Connecting ElasticSearch with ServiceNow

VigneshV4790469
Kilo Contributor

3 weeks ago

Is it advisable to send all logs to ServiceNow from ElasticSearch for monitoring?

0 Helpfuls
  • 127 Views
1 REPLY 1

Matthew_13
Mega Sage

2 weeks ago

Hi My friend,

 It’s generally NOT best practice to send all Elasticsearch logs into ServiceNow.

Elastic is built to store and analyze large volumes of raw logs. ServiceNow is better used for what comes out of that like alerts, correlations, and incidents.

Most teams either:

  • send only alerts/events from Elastic into ServiceNow, or

  • ingest a small, curated set of logs for AIOps/Health Log Analytics.

Moving everything usually creates noise, cost, and little operational value. The goal is to send actionable signals, not the full log stream. Hope this helps my friend

 

@VigneshV4790469  - If help answer, Please mark Accepted Solution & Thumbs Up.

MJG
0 Helpfuls