---
title: View Log Analytics anomaly alert charts on the preview panel in Express List
description: View visualizations for Health Log Analytics anomaly alerts to identify periods of behavior that deviate from expected ranges. You can view visualizations from the Express List preview panel or the alert record.
locale: en-US
canonical_url: https://www.servicenow.com/docs/r/australia/it-operations-management/event-management/view-anomaly-alert-display.html
release: australia
product: Event Management
classification: event-management
topic_type: task
last_updated: "2026-03-12"
reading_time_minutes: 1
breadcrumb: [Respond to alerts, Express List, Event Management, ITOM AIOps, IT Operations Management]
---

# View Log Analytics anomaly alert charts on the preview panel in Express List

View visualizations for Health Log Analytics anomaly alerts to identify periods of behavior that deviate from expected ranges. You can view visualizations from the Express List preview panel or the alert record.

## Before you begin

Role required: evt\_mgmt\_operator, evt\_mgmt\_admin

## Procedure

1.  Navigate to **Workspaces** > **Service Operations Workspace**.

2.  From the navigation bar, select the Express list icon \[Omitted image "express-list1.png"\].

3.  In the Active Alerts list, locate a Log Analytics based alert.

    This option is available only for individual alerts or the underlying individual alerts within a group.

4.  Choose where to view the anomaly chart.

<table id="choicetable_kfx_rzl_33c"><thead><tr><th align="left" id="d406786e111">

Option

</th><th align="left" id="d406786e114">

Procedure

</th></tr></thead><tbody><tr><td id="d406786e120">

**View the chart in the preview panel**

</td><td>

1.  Select the check box for a Log Analytics based alert.
2.  In the preview panel, select the **Info** tab.

A chart with a visual representation of the anomaly appears.

</td></tr><tr><td id="d406786e146">

**View the chart in the alert record**

</td><td>

Select the number of the anomaly alert to open the alert record.

 The **Overview** tab opens by default. The anomaly chart is displayed.

</td></tr></tbody>
</table>5.  Select the parameter to visualize anomaly data within that time period:

    -   **Events per minute** - The default setting, which shows the detected anomaly.
    -   **Day ago**
    -   **Week ago**
6.  Review relevant logs in context by selecting the Open in Surrounding logs icon:\[Omitted image "icon-anomaly-logs-link.png"\] Alt text: Open in Surrounding logs icon.

    The **Surrounding logs** tab displays the list of log lines that were generated one minute before and one second after the Log Analytics alert. For more information, see [How Health Log Analytics generates alerts](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/it-operations-management/health-log-analytics/hla-op-anomalies-detecting.md).