Express List in the Service Operations Workspace for ITOM

  • Release version: Zurich
  • Updated June 10, 2026
  • 2 minutes to read
    • Summarize
    Summarized using AI
    This content was generated using new OpenAI-powered functionality. Results are provided on an as is basis and are not guaranteed to be accurate or complete.

    Summary of Express List in the Service Operations Workspace for ITOM

    The Express List feature in ServiceNow Event Management within the Service Operations Workspace helps IT teams quickly identify and manage health issues across the datacenter. It displays a sortable list of alerts that enables efficient monitoring, prioritization, impact evaluation, and incident reporting without navigating multiple screens.

    Show full answer Show less

    Key Features

    • Alert Monitoring and Management: Provides a streamlined alert list that reduces clicks and shows essential alert details for faster resolution.
    • Preview Panel: Selecting an alert checkbox opens a preview panel displaying detailed information such as alert number, status, duration, configuration items, metric name, assigned personnel, last update, and impacted services to support prioritization and root cause analysis.
    • Alert Group Insights: The preview panel’s Alerts in group tab shows grouped alert details with tiles summarizing alert status, severity, and related metrics.
    • Customizable Display: Users can filter alerts by fields, show additional information, and set the time range for displayed alerts with options from the last 15 minutes up to 90 days or a custom range.
    • Real-time Updates: The alert list refreshes automatically until paused by the user, ensuring up-to-date information.

    Practical Considerations

    • Exporting alerts directly from the Express List is not supported; exporting requires opening the full list view.
    • Administrators can define default time ranges for alert display using a system property that controls how many days of alerts are shown.

    Key Outcomes

    • Enables more efficient monitoring of IT systems and application services by displaying relevant alert data in a concise format.
    • Supports faster alert resolution by providing immediate access to critical alert details and impacted service information.
    • Improves tracking and documentation of issues, facilitating clear communication and escalation of incidents when necessary.

    The ServiceNow Event Management Express List feature helps you identify health issues across the datacenter on the Service Operations Workspace. It provides a list of quick information on alerts so you can more efficiently monitor systems and services,​ resolve alerts, evaluate the alert impact,​ track issues, and report incidents.

    The Express List pane sortable alert list reduces the number of clicks necessary to access alert information. Selecting the check box of an alert opens a preview panel where you can view data that helps for prioritization, impact realization, and root cause analysis. You can easily modify the Express List pane to narrow down the display by using a provided fields list, displaying additional alert information, and filtering out or showing matching alerts. You can also modify the displayed time range.

    Note:

    Exporting alerts is not supported from the Express List. To export alerts, open the list view in Service Operations Workspace.

    The following image shows a sample Express List pane.Express List display

    Express List benefits

    The Express List pane enables operators to more efficiently perform the following actions:
    • Monitoring systems or application services. Monitoring the performance and capability of computer systems to see any discrepancies​.
    • Resolving alerts. Working on discrepancies to troubleshoot issues and promote the efficient functioning of IT infrastructure.​
    • Tracking issues. Tracking and documenting defects and resolutions in detail and reporting incidents.
    • Reporting incidents. Escalating complex issues to management, other IT resources, third parties or vendors​.

    Alert information displayed in the Express List preview panel

    The Express List preview panel displays additional alert information on the Express List pane. This information enables you to conduct an assessment that helps in resolving incidents without having to open multiple alert forms.

    The Info tab on the preview panel displays the following information for a selected alert:You can view additional alert information by selecting any of the linked items.

    The Alerts in group tab on the preview panel displays alert information for a selected alert group. Information for each alert is displayed in a tile with additional options for each alert in the group.

    Each tile displays the following alert information:
    • Alert number (link)
    • Status
    • Severity
    • Configuration items
    • Duration
    • Metric name

    Customizing the alert display time range

    You can determine the time range of the displayed alerts. The default time range is the last 24 hours. The list continues to update with new alerts until you select the pause icon (Pause icon.). Selecting the current range setting in the upper right displays a dialog box with date and time range options:
    • All time - The last 90 days
    • Last 24 hours
    • Last week
    • Last 12 hours
    • Last hour
    • Last 15 minutes
    • Custom - Enables you to select a date and time range from the pop-up calendar.
    The Default Time Range field is introduced on the Express List view in the following versions:
    • Service Operations Workspace Express List 26.6.1
    • Service Operations Workspace Express List App 26.4.0
    • Service Operations Workspace ITOM Apps 26.9.0

    Default time ranges can be defined by your administrator using the system property evt_mgmt.express_list.all_time_days. This property specify the time range (in days) of displayed alerts.