View log data for an alert in Health Log Analytics
View a chart of the frequency of anomalous log lines and the associated log data on the Log Viewer.
Before you begin
Role required: evt_mgmt_operator, or evt_mgmt_admin
Procedure
Open the Log Viewer tab using one of the following methods:
- Navigate to Workspaces > Service Operations Workspace and select the Log Viewer icon (
Log Viewer icon.\).
- While viewing log entries for an alert on the **Surrounding logs** tab, select **Log Viewer**.
Personalize the displayed data and how it is presented on the Log Viewer.
- Filter search results on the Log Viewer in Health Log Analytics to show only the data you want to view.
- Customize the Log Viewer table in Health Log Analytics by adding or removing columns. These features are supported in the Health Log Analytics application, Version 20.0.11 - July 2021, and the Health Log Analytics Viewer application, Version 20.0.4 - July 2021, available from the ServiceNow Store.
Analyze log-based anomalies and added context to help you achieve faster mean time to repair (MTTR).
For example, say you find a log line with errors found in a configuration file. On the Anomaly card, a sudden spike on the chart indicates where the configuration file is generating the errors. You can view additional key-value pairs extracted from the logs on the Meaningful log properties card and find the affected application services and their related service offerings on the Impacted services card. For greater context, you may want to investigate the logs that surround the anomaly, locate the configuration file, and find the time frame where the issues occurred.
What to do next
Use additional features on the Log Viewer to refine your search or define alerts.
- Modify the search query to fine-tune the search and save useful searches. See Define, save, and share a search of log data in Health Log Analytics.
- If you discover important relationships in the log data, select Define alert to define the kind of alert that should be triggered by the data. See Define a custom Log Analytics alert rule in Health Log Analytics for instructions.
Related topics