Displaying an event group in the classic Event Viewer
Expand an alert group to display the alerts that were correlated together within the group.
About this task
An alert group contains two or more alerts, which are correlated
together by the underlying analytics. The group can include 
Temporal groups, 
Topological groups, and 
Scope-based groups.
Procedure
-
Identify an event group within the table. You can identify a group using the following signs:
- It has a Down chevron icon
at its
row in the table. - It has an
link in the Grouping column. - By default, it has a summary that includes the words:
GROUP (n active events), where n is the number of the events in the group.
- It has a Down chevron icon
- Click to open the event group. A second DASH tab opens containing an events table. The group's events are now displayed under the parent event in that table.