Add a KB article to a Log Analytics alert

  • Versão de lançamento: Australia
  • Atualizado 12 de mar. de 2026
  • 1 min. de leitura

    • Add your own knowledge base (KB) article to an alert that was generated by Health Log Analytics. For example, you can provide additional information that might help to resolve the underlying issue. Health Log Analytics also uses your knowledge to enhance similar alerts.

    Antes de Iniciar

    Role required: evt_mgmt_operator or evt_mgmt_admin

    Importante:
    From the Vancouver release onward, the Operator Workspace is deprecated and replaced with Service Operations Workspace. For the new procedure, see the corresponding topic in the Service Operations Workspace for ITOM documentation: Add a KB article to a Log Analytics alert.

    This feature is supported in the Health Log Analytics application, Version 22.0.12 - December 2021 and later, and the Health Log Analytics Viewer application, Version 21.0.0 - December 2021 and later. These applications are available from the ServiceNow Store.

    Procedimento

    1. Open a Log Analytics alert.
      For more information, see Start remediation of a Log Analytics alert from the Overview tab.
      Nota:
      In the All alerts list, alerts that were generated by Health Log Analytics have the value Log Analytics in the Source column.
    2. Select the selection icon at the top right of the Details tab and then choose Create KB article from the list.
    3. On the form, fill in the fields.
      Tabela 1. Create New Knowledge form
      Field Description
      Knowledge base The knowledge base where the new KB article is stored. By default, this value is the Health Log Analytics knowledge base.
      Workflow (Read-only) The status of the KB article.

      When you publish the article, its status automatically changes from Draft to Published.
      Category The category of the component that caused the alert.
      Short description Summary of the KB article.
      Article body Content of the KB article.
    4. Select Save.
    5. When the content of the article is final, select Publish.

    Resultado

    The KB article is added to the selected alert. You can search for and display the article in the Agent assist side panel. Health Log Analytics also uses your article to enhance other alerts that have the same Event ID property or alert pattern.