Categorize System Logs

[hongsok]

Dear all,

I have changed the following system properties from debug to Error. The question is how can I find out if the logs were  generated by "sa.ie.log.ie_severity_level".

• sa.ie.log.ie_severity_level
• glide.discovery.identification.log_level
• sa.ie.log.service_cache_severity_level

Regards,

Hong

[JC Moller · Accepted solution]

The data is recorded in the syslog table. Currently, I have the property value set to "Error," but since we haven't experienced any errors in weeks, I don't have example data to share.

There's a similar setting for the IRE (Identification and Reconciliation Engine), where the source column value is "identification_engine" when log data is written into the table. For more information on this example and it's detailed information, you can refer to the following article:

KB0750382: How to capture IRE [identification and reconciliation engine] debug logs
https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB0750382

Generally, most error/debug data is written into the syslog table. The ServiceNow instance has over 20 log tables, many of which extend from the base syslog table.

To find relevant data in your case, you can search the syslog table using the following methods:

• Search for message column which contain the word "engine."

• Or look for entries with "identification_engine" value in the source column.

If you're not seeing any data, it's possible that no error data has been generated, similar to my situation.

BR, Jan