Configure ServiceNow System Logs Retriever data inputs

  • Release version: Yokohama
  • Updated January 30, 2025
  • 1 minute to read

    • Configure a data input for streaming log data from the ServiceNow System Log table to the Health Log Analytics AI engine (Occultus).

    Before you begin

    Note:
    Only a single ServiceNow System Logs Retriever data input can exist in the system. This data input doesn't run on a MID Server.

    Role required: admin

    Procedure

    1. Navigate to All > Health Log Analytics > Data Input > Data Inputs.
    2. On the Data Inputs page, select New.
    3. Choose the ServiceNow System Logs Retriever data input.
    4. On the form, fill in the fields.
      For a description of the fields, see ServiceNow System Logs Retriever data input configuration fields.
    5. Select Save.
      Health Log Analytics adds the data input record to the Data Inputs table.

    Result

    The data input configuration process is complete. Health Log Analytics adds the data input record to the Data Inputs table and attaches the configuration file to the data input record.

    The data input starts streaming ServiceNow log data from the System Log table to the Health Log Analytics AI engine, based on the configured filters. Admin users can set filters to query the System Log table. Users with the evt_mgmt_user role can use Event Management to monitor the logs and view the alerts that Health Log Analytics generates from them.

    Note:
    If the HLA engine is down and data has stopped streaming, a notification appears at the top of the data input configuration page. When this happens, contact ServiceNow support.

    What to do next

    Make sure that the data input is streaming data.