---
title: List of predefined tag-based alert grouping definitions
description: A list of the predefined alert clustering definitions provided with the Tag Based Alert Clustering Engine  application.
locale: en-US
canonical_url: https://www.servicenow.com/docs/r/australia/it-operations-management/event-management/alert-clustering-predefined-definition-list.html
release: australia
product: Event Management
classification: event-management
topic_type: reference
last_updated: "2026-03-12"
reading_time_minutes: 2
breadcrumb: [Reference, Event Management, ITOM AIOps, IT Operations Management]
---

# List of predefined tag-based alert grouping definitions

A list of the predefined alert clustering definitions provided with the Tag Based Alert Clustering Engine  application.

<table id="table_ufq_13c_b1c"><thead><tr><th>

Name

</th><th>

Description

</th><th>

Order

</th></tr></thead><tbody><tr><td>

Group alerts from the same Application

</td><td>

Group all alerts from the same application, created in the last 10 minutes. In new systems, this definition is activated by default.

</td><td>

9010

</td></tr><tr><td>

Group all alerts from the same IP address

</td><td>

Group all alerts from the same IP address, created in the last 10 minutes.

</td><td>

9020

</td></tr><tr><td>

Group all alerts from the same Namespace

</td><td>

Group all alerts from the same namespace, created in the last 10 minutes. In new systems, this definition is activated by default.

</td><td>

9030

</td></tr><tr><td>

Group all alerts from the same Subnet

</td><td>

Group all alerts from the same subnet, created in the last 10 minutes. In new systems, this definition is activated by default.

</td><td>

9040

</td></tr><tr><td>

Group alerts from the same CI class and Location

</td><td>

Group all alerts from the same CI class and location, created in the last 10 minutes.

</td><td>

9050

</td></tr><tr><td>

Group alerts from the same Application and Environment

</td><td>

Group all alerts from the same application and environment, created in the last 10 minutes.

</td><td>

9060

</td></tr><tr><td>

Group all alerts from a similar Node

</td><td>

Group all alerts from a similar node name, created in the last 10 minutes.

</td><td>

9070

</td></tr><tr><td>

Group alerts from the same Location and Assignment group

</td><td>

Group all alerts from the same location and assignment group, created in the last 10 minutes.

</td><td>

9080

</td></tr><tr><td>

Group alerts from the same Region and Metric

</td><td>

Group all alerts from the same region and metric, created in the last 10 minutes.

</td><td>

9090

</td></tr><tr><td>

Group alerts from the same CI class and Metric

</td><td>

Group all alerts from the same CI class and metric, created in the last 10 minutes.

</td><td>

9100

</td></tr><tr><td>

Group alerts from the same Node and Metric

</td><td>

Group all alerts from the same node and metric, created in the last 10 minutes.

</td><td>

9110

</td></tr><tr><td>

Group alerts from the same Assignment group and Class

</td><td>

Group all alerts from the same assignment group and class, created in the last 10 minutes.

</td><td>

9120

</td></tr><tr><td>

Group alerts from the same Type, Metric and Source

</td><td>

Group all alerts from the same type, metric, and source instance, created in the last 10 minutes.

</td><td>

9130

</td></tr><tr><td>

Group alerts from the same CI

</td><td>

Group all alerts from the same CI, created in the last 10 minutes. **Important:** When this rule is active, CMDB grouping must be disabled.

</td><td>

9140

</td></tr><tr><td>

Group alerts from the same Node

</td><td>

Group all alerts from the same node, created in the last 10 minutes. In new systems, this rule is activated by default.

</td><td>

9150

</td></tr></tbody>
</table>**Parent Topic:**[Event Management reference](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/it-operations-management/event-management/event-management-reference.md)