logs of errors when integration cannot create incident

[AnthonyMull]

Hi community,

is there any easy way to search for logs if an integration that creates incidents can no longer create incidents?

Thank you

[Tanushree Maiti]

Hi @AnthonyMull 

Generally we check following log 

• System Logs (syslog): Go to System Logs > System Log > All and apply a filter with Source = INTG_AUDIT to review outputs generated by integration scripts.
• System Import Sets > Import Set Logs: Ideal for finding issues if the integration uses transform maps to create incidents.
• IntegrationHub History: If using IntegrationHub/Flow, look at the flow execution records
• Transaction Logs (syslog_transaction): Review failed API transaction records, such as sys_ws_operation or sys_transform_map, to detect attempts that were blocked while creating incidents.
• ECC Queue: Inspect the ecc_queue table for entries marked with an “error” status, or verify whether input records from monitoring platforms like Splunk or Netenrich were received but not processed.
• Inbound Email Logs: For email-based integrations, review System Mail > Inbound Actions or System Logs - Emails to identify errors and confirm the email was not skipped or handled by another rule.