Method for identifying an output alarm message of an alarm message cluster in a management system of a technical installation, wherein the management system has an operator station server and a control device, the method comprising: a) detecting, by means of the operator station server, alarm messages arriving in the management system of the technical installation and storing the alarm messages in a storage device; b) defining, by means of an operator of the control device of the management system, a specific time range; c) determining, by means of the operator station server, individual time instants within the time range, at which output alarm messages, which arrive in the technical installation, are either activated or deactivated, wherein an output alarm message represents an alarm message which brings with it a plurality of further alarm messages, and wherein d) within the scope of determining the time instants, the following method steps are carried out by the operator station server: i) totalling a number of all active alarm messages in the time range and determining an associated totalling function, wherein the totalling function provides information about which quantity of alarm messages is active at which time instant within the observed time range; ii) identifying local minima (3a, 3b, 3c) of the course of the totalling function; iii) transmitting the time instants of the identified local minima (3a, 3b, 3c) to the control device; e) presenting the identified local minima (3a,3b, 3c) and alarm messages to an operator of the technical installation in an automated manner by means of the control device, f) wherein the operator may view the immediate vicinity of the individual local minima (3a, 3b, 3c), where the output alarm messages are potentially located. a) detecting, by means of the operator station server, alarm messages arriving in the management system of the technical installation and storing the alarm messages in a storage device; b) defining, by means of an operator of the control device of the management system, a specific time range; c) determining, by means of the operator station server, individual time instants within the time range, at which output alarm messages, which arrive in the technical installation, are either activated or deactivated, wherein an output alarm message represents an alarm message which brings with it a plurality of further alarm messages, and wherein d) within the scope of determining the time instants, the following method steps are carried out by the operator station server: i) totalling a number of all active alarm messages in the time range and determining an associated totalling function, wherein the totalling function provides information about which quantity of alarm messages is active at which time instant within the observed time range; ii) identifying local minima (3a, 3b, 3c) of the course of the totalling function; iii) transmitting the time instants of the identified local minima (3a, 3b, 3c) to the control device; i) totalling a number of all active alarm messages in the time range and determining an associated totalling function, wherein the totalling function provides information about which quantity of alarm messages is active at which time instant within the observed time range; ii) identifying local minima (3a, 3b, 3c) of the course of the totalling function; iii) transmitting the time instants of the identified local minima (3a, 3b, 3c) to the control device; e) presenting the identified local minima (3a,3b, 3c) and alarm messages to an operator of the technical installation in an automated manner by means of the control device, f) wherein the operator may view the immediate vicinity of the individual local minima (3a, 3b, 3c), where the output alarm messages are potentially located.