Find your people. Pick a challenge. Ship something real. The CreatorCon Hackathon is coming to the Community Pavilion for one epic night. Every skill level, every role welcome. Join us on May 5th and learn more here.

Connecting ElasticSearch with ServiceNow

VigneshV4790469
Kilo Contributor

Is it advisable to send all logs to ServiceNow from ElasticSearch for monitoring?

1 REPLY 1

Matthew_13
Mega Sage

Hi My friend,

 It’s generally NOT best practice to send all Elasticsearch logs into ServiceNow.

Elastic is built to store and analyze large volumes of raw logs. ServiceNow is better used for what comes out of that like alerts, correlations, and incidents.

Most teams either:

  • send only alerts/events from Elastic into ServiceNow, or

  • ingest a small, curated set of logs for AIOps/Health Log Analytics.

Moving everything usually creates noise, cost, and little operational value. The goal is to send actionable signals, not the full log stream. Hope this helps my friend

 

@VigneshV4790469  - If help answer, Please mark Accepted Solution & Thumbs Up.

MJG