Property reference

`evt_mgmt.acr_groups_creation_time_to_query_from_in_minutes`

Limits how far back the system searches for active tag-cluster groups created for a rule. The default is 1440 minutes, or one day; higher values include older groups when main-alert group updates are enabled.

Default: 1440
Type: integer
Application: Not stated
Category: CMDB & Discovery

Key questions about this property

The answers below summarize the purpose, scope, default effect, and review scenarios for this property.

What does it do?	When main-alert group updates are enabled, sets the lookback period for finding active tag-cluster groups created for a rule.
What area does it affect?	Event Management alert correlation
What does the default mean?	The default value is "1440", which sets the baseline numeric behavior for this property.
When should you review it?	Review when changing how far back rule updates should search for active tag-cluster groups.

Property record

No out of the box record exists. ServiceNow scripts read this property and use the default value shown until you create it.

Property name	`evt_mgmt.acr_groups_creation_time_to_query_from_in_minutes`
Type	integer
Application	Not stated
Default value	`1440`
Description	Not stated

Sources

Official references and nearby text excerpts where this property appears.

Used in

Out of the box artefacts that read this property. Append the path to your instance URL to open the record and see how the value is used.

Script include: EvtMgmtTagBasedDefinitionToACR When main-alert group updates are enabled, the system reads this setting to limit how far back it searches for active tag-cluster groups created for the rule. A larger value includes older groups; if unset, it uses 1440 minutes (one day). /sys_script_include.do?sys_id=21c4a01db76830107c038229ce11a910

Alert Correlation Rule: [Tag Based] Group alerts from the same namespace When the option to update group records with the main alert is enabled, this setting determines how many minutes back the rule searches for active tag-based alert groups to compare; older groups are excluded. The default is 1440 minutes (one day). /em_alert_correlation_rule.do?sys_id=e9fa38ac6761c210a26cf94ad8f922c3

Alert Correlation Rule: [Tag Based] Group alerts from the same subnet When the main-alert update setting is enabled, the rule uses this property to limit its search to active tag-based groups created within the specified number of minutes. This controls how far back admins let the rule look for groups to match; if unset, it defaults to 1440 minutes (one day). /em_alert_correlation_rule.do?sys_id=ac09fd7867e9c210a26cf94ad8f92244

Alert Correlation Rule: [Tag Based] Group alerts with the same Application When updating group records with the main alert is enabled, the rule uses this setting to limit its search to active tag-based groups created within the specified number of minutes; older groups are not considered for matching alerts. Admins can change the search window, which defaults to 1440 minutes (one day). /em_alert_correlation_rule.do?sys_id=c1e73d16074b7510d4728c14dfd3000c

Alert Correlation Rule: [Tag Based] Group alerts with the same Application and Environment /em_alert_correlation_rule.do?sys_id=0a48fd56074b7510d4728c14dfd30021

Alert Correlation Rule: [Tag Based] Group alerts with the same Assignment group and Class /em_alert_correlation_rule.do?sys_id=9367e625078f3110d4728c14dfd300b5

More in `evt_mgmt`

Other properties in the same namespace.

evt_mgmt.active_interval This property specifies the active interval for reopening closed alerts in Event Management, influencing how… evt_mgmt.ai_refresh_time_interval This property defines a 5000-millisecond interval during which alert updates are suppressed to optimize… evt_mgmt.ai_refresh_time_to_wait_after_manual_action This property determines the delay before the alert list refreshes after a manual action, with a default… evt_mgmt.alert.management.activated This property determines whether the Alert Management functionality is active, impacting how alerts are… evt_mgmt.alert.management.enable_legacy_alert_action_rules This property determines whether legacy alert action rules are enabled, affecting how alerts are processed… evt_mgmt.alert.management.enable_legacy_whitelist_executeSubflow Chooses between legacy domain-aware execution and synchronous execution for alert-management subflows. evt_mgmt.alert.management.enable_synchronous_subflow Enables alert-management subflows to complete within the operation that triggers them; when disabled, they… evt_mgmt.alert.management.executions_in_memory Sets the maximum number of alert-management executions held in memory, defaulting to 1,000,000 when no value…

All 217 properties in evt_mgmt →