Method for identifying an output alarm message of an alarm message cluster in a management system of a technical installation, wherein the management system has an operator station server and a control device , the method comprising: a) detecting, by means of the operator station server , alarm messages arriving in the management system of the technical installation and storing the alarm messages in a storage device ; b) defining, by means of an operator of the control device of the management system , a specific time range ; c) determining, by means of the operator station server , individual time instants within the time range , at which output alarm messages, which arrive in the technical installation, are either activated or deactivated, wherein an output alarm message represents an alarm message which brings with it a plurality of further alarm messages, and wherein d) within the scope of determining the time instants, the following method steps are carried out by the operator station server : i) totalling a number of all active alarm messages in the time range and determining an associated totalling function , wherein the totalling function provides information about which quantity of alarm messages is active at which time instant within the observed time range ; ii) identifying local minima of the course of the totalling function; iii) transmitting the time instants of the identified local minima to the control device ; e) presenting the identified local minima and alarm messages to an operator of the technical installation in an automated manner by means of the control device , f) wherein the operator may view the immediate vicinity of the individual local minima , where the output alarm messages are potentially located. a) detecting, by means of the operator station server , alarm messages arriving in the management system of the technical installation and storing the alarm messages in a storage device ; b) defining, by means of an operator of the control device of the management system , a specific time range ; c) determining, by means of the operator station server , individual time instants within the time range , at which output alarm messages, which arrive in the technical installation, are either activated or deactivated, wherein an output alarm message represents an alarm message which brings with it a plurality of further alarm messages, and wherein d) within the scope of determining the time instants, the following method steps are carried out by the operator station server : i) totalling a number of all active alarm messages in the time range and determining an associated totalling function , wherein the totalling function provides information about which quantity of alarm messages is active at which time instant within the observed time range ; ii) identifying local minima of the course of the totalling function; iii) transmitting the time instants of the identified local minima to the control device ; i) totalling a number of all active alarm messages in the time range and determining an associated totalling function , wherein the totalling function provides information about which quantity of alarm messages is active at which time instant within the observed time range ; ii) identifying local minima of the course of the totalling function; iii) transmitting the time instants of the identified local minima to the control device ; e) presenting the identified local minima and alarm messages to an operator of the technical installation in an automated manner by means of the control device , f) wherein the operator may view the immediate vicinity of the individual local minima , where the output alarm messages are potentially located. <EOS>