---
title: Create an incident from an alert in Express List
description: Create an incident from an alert directly from the Express List pane, saving you the time and effort of navigating to the incident record.
locale: en-US
canonical_url: https://www.servicenow.com/docs/r/australia/it-operations-management/event-management/open-incident.html
release: australia
product: Event Management
classification: event-management
topic_type: task
last_updated: "2026-03-12"
reading_time_minutes: 1
breadcrumb: [Promote alerts, Express List, Event Management, ITOM AIOps, IT Operations Management]
---

# Create an incident from an alert in Express List

Create an incident from an alert directly from the Express List pane, saving you the time and effort of navigating to the incident record.

## Before you begin

Role required: evt\_mgmt\_operator, evt\_mgmt\_admin

**Note:** The evt\_mgmt\_user role is view-only and doesn’t have permission to perform this action.

## Procedure

1.  Navigate to **Workspaces** > **Service Operations Workspace**.

2.  From the navigation bar, select the Express list icon \[Omitted image "express-list1.png"\].

3.  Create an incident from a selected alert.

    1.  In the Express List pane, select the check box for the desired alert.

        **Note:** To display the individual alerts inside a group, select the chevron icon \(\[Omitted image "icon-chevron.png"\] Alt text: Chevron icon.\) at the beginning of the alert group row.

    2.  Select the **Alert actions** drop-down list.

        \[Omitted image "alert-actions-tool-tip.png"\] Alt text: Alert actions drop down arrow

    3.  Under **Response actions**, select **Create Incident**.

    An incident is created from the selected alert and a confirmation message is displayed.