Configure a ServiceNow System Logs connector

  • Release version: Washingtondc
  • Updated December 11, 2024
  • 2 minutes to read

    • Configure a push connector for streaming log data from the ServiceNow System Log table to the Health Log Analytics AI engine. Integrating with a connector is an essential step in setting up the Health Log Analytics (HLA) application.

    Before you begin

    Note:
    This integration doesn't run on a MID Server. Only a single ServiceNow System Logs Retriever integration or data input can exist in the system.
    • Ensure that the Health Log Analytics application is installed and provisioned on your instance. For more information, see Health Log Analytics installation.
    • Ensure that a service instance is available.
    • Ensure that the HLA Engine is up and running.

    Role required: evt_mgmt_admin

    Procedure

    1. Navigate to Workspaces > Service Operations Workspace.
    2. From the left pane, select the Integrations Launchpad icon (Integration Launchpad icon)
    3. In the Browse integrations tab, enter System Logs in the search field.
    4. Select the ServiceNow System Logs tile.
      Note:
      If you started the integration process without meeting all the prerequisites listed in the Before you begin section, a message appears. You have the option to cancel the integration and complete the missing requirements, or continue in draft mode and fulfill them later. Keep in mind that you can only activate a configured integration when all the prerequisites are met.
    5. On the Provide details form, fill in the fields.
      For a description of the fields, see the Provide details table in ServiceNow System Logs Retriever integration configuration fields.
    6. Select Next.
    7. Optional: On the Set data retrieval method page, build conditions for filtering log data from the System Log table before it is streamed to the HLA engine.
    8. Select Save to save your configuration.
    9. Select Activate to activate the integration.
      Note:
      You can only activate a configured integration when you have fulfilled all the prerequisites listed in the Before you begin section.
      The integration is activated and the Overview tab is displayed.
    10. Optional: If you installed the integration in draft mode, perform these steps to activate it:
      1. Complete the integration prerequisites.
      2. In the Integrations Launchpad Installed integrations tab, under Waiting for your action, locate and select the integration.
      3. On the Data retrieval method tab, select Activate to activate the integration.

    Result

    The connector starts streaming ServiceNow log data from the System Log table to the Health Log Analytics AI engine, based on the configured filters.

    Users with the evt_mgmt_user role can use Event Management to monitor the logs and view the alerts that Health Log Analytics generates from them.

    What to do next

    Review the streaming status of the integration on the Overview tab. For more information, see Review log data streaming status and sources of an integration. The MID Server streaming status and the Log streaming sources table do not appear on the Overview tab for this integration, because it doesn't run on a MID Server.

    Note:
    You can go directly from this tab to the Data Input Mapping, Source Type Structures, and Log Sources pages with context from the integration. If the log data is not properly mapped, structured, or sourced, you can go back and adjust the configuration of the integration.
    1. Select the View menu icon (View menu icon.).
    2. Choose the appropriate menu option.
    3. Review the displayed information.
    4. Adjust the integration configuration if needed.