Set up integrations from Integrations Launchpad
Summarize
Summary of Set up integrations from Integrations Launchpad
The Integrations Launchpad in Service Operations Workspace for ITOM provides a unified interface for setting up integrations that feed raw log messages from external sources into your ServiceNow instance. This capability is essential for enabling Health Log Analytics (HLA) to process and analyze log data effectively.
Show less
Key Integrations for Health Log Analytics
The Launchpad supports two types of integrations for Health Log Analytics:
- Pull integrations: These pull log data from external sources via a MID Server into your instance. Examples include Elasticsearch, Apache Kafka, Microsoft Azure Log Analytics, MID Server logs, and the ServiceNow System Logs Retriever (admin-only, single instance, and does not use MID Server).
- Push integrations: These receive log data pushed from external sources, typically via a MID Server. Supported push integrations include UDP, TCP/SSL, REST API (JSON formatted), GCP PubSub, Splunk (UDP/TCP via heavy forwarder), and Amazon Data Firehose.
Practical Configuration Guidance
- Each integration type has a dedicated setup procedure accessible through the Launchpad, guiding you step-by-step for configuration.
- Common configurations include streaming from cloud services like Microsoft Azure Event Hubs, Google Cloud Pub/Sub, and Amazon Data Firehose to your instance without needing to store cloud keys locally.
- Specialized connectors like the ServiceNow System Logs Retriever enable direct streaming from internal logs to HLA, with administrative controls on creation and configuration.
Management and Monitoring
- You can review the log data streaming status and data sources on each integration’s Overview tab, allowing you to troubleshoot and optimize streaming performance.
- The Launchpad allows editing installed integrations to update configurations such as switching service instances.
- Integrations can be deactivated directly from the Launchpad when they are no longer needed or require suspension.
Benefits for ServiceNow Customers
By leveraging the Integrations Launchpad, customers can quickly and efficiently connect diverse log data sources to Health Log Analytics, improving visibility into system health and operational insights. The centralized setup and management reduce complexity, streamline log ingestion, and enhance the analytics capabilities of the ServiceNow platform.
Set up integrations for Health Log Analytics from the Event Management Integrations Launchpad in Service Operations Workspace for ITOM.
Integrations Launchpad
The Integrations Launchpad tool provides a unified interface for convenient integration with connectors that feed raw log messages from external sources into your ServiceNow instance for processing and analysis. For more information, see Integrations Launchpad in Service Operations Workspace for ITOM.
Integrations for Health Log Analytics
The Integrations Launchpad enables the following integrations for Health Log Analytics:
- Pull integrations
- These integrations pull log data from external data sources and stream the data to your instance via a MID Server. Select an integration in the table to open a page with the setup procedure.
Table 1. Pull integrations Integration Description Elasticsearch Streams log data from Elasticsearch indices to your instance. ServiceNow System Logs Retriever Sends log data from the ServiceNow System Log table to the Health Log Analytics AI engine. Note:Only a single ServiceNow System Logs Retriever data input can exist in the system, and only users with the admin role can create and configure it. This data input doesn't run on a MID Server.Apache Kafka Streams log data from Apache Kafka to your instance. Microsoft Azure Log Analytics Streams log data from Microsoft Azure Log Analytics to your instance. The connector points the Health Log Analytics AI engine to a data source in your Microsoft Azure Log Analytics account. MID Server Collects log messages from the MID Server and streams them to your instance. - Push integrations
- These integrations connect to external data sources that push log data to your instance via a MID Server. Select an integration in the table to open a page with the setup procedure.
Table 2. Push integrations Integration Description UDP Sends raw log messages to your instance directly over a UDP socket. TCP Sends raw log messages to your instance directly over a TCP/SSL socket. REST API Streams log data to your instance in JSON format. GCP PubSub Receives log messages that were published to a Google Cloud Pub/Sub topic and streams them to your instance. Splunk UDP Streams log messages to your ServiceNow instance over the UDP transport protocol using a Splunk heavy forwarder. Splunk TCP Streams log messages to your ServiceNow instance over the TCP transport protocol using a Splunk heavy forwarder. Amazon Data Firehose Streams log messages from Amazon Data Firehose directly to the collector service in ITOM Gateway, where it’s queued for Health Log Analytics processing.