---
sourceDocument: Australia IT Operations Management
sourceDocumentLink: https://servicenow-prod.fluidtopics.net/r/de-DE/it-operations-management

 Release :

    - australia

ft:locale :

    - de-DE

ft:publication_title :

    - Australia IT Operations Management

ft:clusterId :

    - itom

bundleId :

    - itom

workflow :

    - Technology


---

# Configure alert correlation logic order

# Configure alert correlation logic order {#ariaid-title1}

* Freigeben Version: Australia
* 
* Aktualisiert 30. Juni 2026
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 Minute Lesedauer

Improve alert management by enabling users to customize correlation logic order. This feature empowers you to fine-tune correlation methods to their specific needs, enhancing alert prioritization and response
efficiency.

## Vorbereitungen

Role required: admin

## Prozedur

1. Navigate to AllSystem PropertiesAll Properties.
2. Search for the property sa_analytics.agg.query.group_logic_order.  
   Default value is "MIXED,NETWORK_TRAFFIC,PATTERN,GENERALIZED_PATTERNS,TEXTBASE". This is a comma separated list of the grouping types in the order of their execution.  
   Hinweis:  
   If one of the grouping types is not specified in the property, it needs to be added manually. Alert correlation rules are trigger-based and applied immediately when an alert is created or updated, before other grouping algorithms.  
   * MIXED: Combination of 2 or more grouping criteria
   * NETWORK_TRAFFIC: Network traffic grouping
   * PATTERN: Automated CI-based patterns grouping
   * TEXTBASE: Text-based grouping
   {#configure-alert-correlation-logic-order__ul_asp_hhl_xbc}
3. Use the property sa_analytics.agg.query.group_logic_order to define or modify the order of correlation methods based on your preferences.
**Zugehörige Konzepte**   

* [Alert grouping and use cases](https://servicenow-prod.fluidtopics.net/dCVrfN~ILfNwI06GeDeGug "Alert grouping methods range from user-defined approaches, like Manual and Rule-based to advanced, fine-tunable algorithms, including Automatic, Mixed, Text-based, Log Analytics, and Network Traffic-based grouping.")