View log data for an alert

  • Release version: Xanadu
  • Updated August 1, 2024
  • 1 minute to read

    • View a chart of the frequency of anomalous log lines and the associated log data on the Log viewer.

    Before you begin

    Role required: evt_mgmt_operator, or evt_mgmt_admin

    Procedure

    1. Open the Log viewer tab using one of the following methods:
      • Navigate to Workspaces > Service Operations Workspace and select the Log Viewer icon (Log viewer icon.).
      • While viewing log entries for an alert on the Surrounding logs tab, select Log viewer.
    2. Optional: Personalize the displayed data and how it is presented on the Log viewer.

      These features are supported in the Health Log Analytics application, Version 20.0.11 - July 2021, and the Health Log Analytics Viewer application, Version 20.0.4 - July 2021, available from the ServiceNow Store.

    3. Analyze log-based anomalies and added context to help you achieve faster mean time to repair (MTTR).
      For example, say you find a log line with errors found in a configuration file. On the Anomaly card, a sudden spike on the chart indicates where the configuration file is generating the errors. You can view additional key-value pairs extracted from the logs on the Meaningful log properties card and find the affected application services and their related service offerings on the Impacted services card. For greater context, you may want to investigate the logs that surround the anomaly, locate the configuration file, and find the time frame where the issues occurred.

    What to do next

    Use additional features on the Log viewer to refine your search or define alerts.