View log data for an alert in Health Log Analytics

Versão de lançamento: Australia

Atualizado 12 de mar. de 2026

1 min. de leitura

View a chart of the frequency of anomalous log lines and the associated log data on the Log Viewer.

Antes de Iniciar

Role required: evt_mgmt_operator, or evt_mgmt_admin

Importante:

From the Vancouver release onward, the Operator Workspace is deprecated and replaced with Service Operations Workspace. For the new procedure, see the corresponding topic in the Service Operations Workspace for ITOM documentation: View log data for an alert in Health Log Analytics.

Procedimento

Open the Log Viewer tab using one of the following methods:
- In the Agent Workspace, select the Log Viewer icon ().
- While viewing log entries for an alert on the Surrounding logs tab, select Log Viewer.
- Navigate to Health Log Analytics > Log Viewer.
Opcional: Personalize the displayed data and how it is presented on the Log Viewer.
- Filter the search results to show only the data you want to view.
- Customize the Log viewer display by adding or removing columns.
These features are supported in the Health Log Analytics application, Version 20.0.11 - July 2021, and the Health Log Analytics Viewer application, Version 20.0.4 - July 2021, available from the ServiceNow Store.
Analyze log-based anomalies and added context to help you achieve faster mean time to repair (MTTR).
For example, say you find a log line with errors found in a configuration file. On the Anomaly card, a sudden spike on the chart indicates where the configuration file is generating the errors. You can view additional key-value pairs extracted from the logs on the Meaningful log properties card and find the affected service instances on the Impacted services card. For more information, see Information on the Overview tab for a Component-based alert. For greater context, you may want to investigate the logs that surround the anomaly, locate the configuration file, and find the time frame where the issues occurred.

O que Fazer Depois

Use additional features on the Log Viewer to refine your search or define alerts.

Modify the search query to fine-tune the search and save useful searches. See Define, save, and share a search of log data in Health Log Analytics for instructions.
If you discover important relationships in the log data, select Define alert to define the kind of alert that should be triggered by the data. See Add a Log Analytics alert rule in Health Log Analytics for instructions.