---
sourceDocument: Brazil Release Notes
sourceDocumentLink: https://servicenow-prod.fluidtopics.net/r/release-notes

 Release :

    - brazil

ft:locale :

    - en-US

ft:publication_title :

    - Brazil Release Notes

ft:clusterId :

    - rn

bundleId :

    - rn


---

# Log Export Service release notes

# Log Export Service release notes {#ariaid-title1}

Release version: Brazil  
Updated September 10, 2026  
![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read  
The ServiceNow®
Log Export Service application provides scalable, near real-time integration with analytic tools for security threat detection, performance optimization, and user experience monitoring. See the following sections
for release notes by version.

## About Log Export Service {#log-export-service-rn-static__log-export-service-release-notes-about}

* Detect security threats and analyze security incidents by exporting your instance system and application logs into your enterprise security analytics tools.
* Troubleshoot and optimize application performance and user experience by forwarding your instance log events in near real-time to your analytics solutions.
* Manage and export large volumes of log events through highly scalable integration that's quick to set up with guided setup.
* Connect to your analytics tools using a dedicated MID Server, a Kafka connector from your analytics solution, or a direct Kafka connection.
{#log-export-service-rn-static__ul_ftr_m53_lkc}

See [Log Export Service (LES)](https://www.servicenow.com/docs/access?context=les-intro&version=brazil&pubname=brazil-platform-security&ft:locale=en-US) for more information.{#log-export-service-rn-static__log-export-service-release-notes-about-2}

## Activation and other requirements {#log-export-service-rn-static__log-export-service-release-notes-requirements-activation}

Activation information{#log-export-service-rn-static__log-export-service-release-notes-activation-info}
:   Install Log Export Service by requesting it from the ServiceNow Store. Visit the [ServiceNow Store](https://store.servicenow.com/sn_appstore_store.do#!/store/home) to view all the available apps, and for information about submitting requests to the store. For cumulative release notes information for all released apps, see the [ServiceNow Store version history release notes](https://www.servicenow.com/docs/r/store-release-notes/sn-store-release-notes.html).{#log-export-service-rn-static__log-export-service-release-notes-requirements-info-1}
{#log-export-service-rn-static__log-export-service-release-notes-requirements-info-1}{#log-export-service-rn-static__log-export-service-release-notes-activation-details}

## Version 3.6 {#ariaid-title2}

This release expands the security and compliance data you can
export and makes setup verification safer by adding on-demand historical log back-fill for Kafka destinations, four new log source tables, a read-only sn_logstoanalytics.auditor role, and a Test MID Connection step in guided setup that
confirms Kafka connectivity before exporting logs.

### What's new {#log-export-service-rn-2026-09__log-export-service-rn-2026-09-new}

[Historical log back-fill](https://www.servicenow.com/docs/access?context=les-export-existing-logs-on-demand&version=brazil&pubname=brazil-platform-security&ft:locale=en-US){#log-export-service-rn-2026-09__log-export-service-rn-2026-09-new-feature-1}
:   You can now replay historical log data to your Kafka destination, in addition to live logs. A new setup screen lets you select the log table, date range, target topic, batch size, and throttling. Backfill settings are
    locked once a run begins to prevent accidental changes mid-run, and a live run status is displayed while the backfill is in progress.

Broader log coverage

:   LES now supports the following additional log source tables:

    * sys_flow_log: Captures execution details and status of flow engine processes, for both live and historical export
    * sys_user_login_history: Captures user login attempts and authentication events
    * Delete and relationship audit records (sys_audit_delete and sys_audit_relation) - so your compliance trail now includes record deletions and reference-field changes, not just regular field changes
    {#log-export-service-rn-2026-09__ul_cps_4yn_lkc}
{#log-export-service-rn-2026-09__log-export-service-rn-2026-09-new-list}

### What's changed {#log-export-service-rn-2026-09__log-export-service-rn-2026-09-changed}

[Enhanced guided setup](https://www.servicenow.com/docs/access?context=les-configure&version=brazil&pubname=brazil-platform-security&ft:locale=en-US){#log-export-service-rn-2026-09__log-export-service-rn-2026-09-changed-feature-1}
:
    * Guided setup now includes a Test MID Connection step, so you can verify connectivity to the Kafka cluster before exporting logs catching configuration problems earlier.
    {#log-export-service-rn-2026-09__ul_jcc_qyn_lkc}
{#log-export-service-rn-2026-09__log-export-service-rn-2026-09-changed-list}