<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>question Categorize System Logs in Community Central forum</title>
    <link>https://www.servicenow.com/community/community-central-forum/categorize-system-logs/m-p/3205815#M2483</link>
    <description>&lt;P&gt;Dear all,&lt;/P&gt;&lt;P&gt;I have changed the following system properties from&amp;nbsp;debug to Error. The question is how can I find out if the logs were&amp;nbsp; generated by "&lt;SPAN&gt;sa.ie.log.ie_severity_level&lt;/SPAN&gt;".&lt;/P&gt;&lt;UL&gt;&lt;LI&gt;&lt;SPAN&gt;sa.ie.log.ie_severity_level&lt;/SPAN&gt;&lt;/LI&gt;&lt;LI&gt;&lt;SPAN&gt;glide.discovery.identification.log_level&lt;/SPAN&gt;&lt;/LI&gt;&lt;LI&gt;&lt;SPAN&gt;sa.ie.log.service_cache_severity_level&lt;/SPAN&gt;&lt;/LI&gt;&lt;/UL&gt;&lt;P&gt;&lt;SPAN&gt;Regards,&lt;/SPAN&gt;&lt;/P&gt;&lt;P&gt;&lt;SPAN&gt;Hong&lt;/SPAN&gt;&lt;/P&gt;</description>
    <pubDate>Thu, 13 Mar 2025 15:11:14 GMT</pubDate>
    <dc:creator>hongsok</dc:creator>
    <dc:date>2025-03-13T15:11:14Z</dc:date>
    <item>
      <title>Categorize System Logs</title>
      <link>https://www.servicenow.com/community/community-central-forum/categorize-system-logs/m-p/3205815#M2483</link>
      <description>&lt;P&gt;Dear all,&lt;/P&gt;&lt;P&gt;I have changed the following system properties from&amp;nbsp;debug to Error. The question is how can I find out if the logs were&amp;nbsp; generated by "&lt;SPAN&gt;sa.ie.log.ie_severity_level&lt;/SPAN&gt;".&lt;/P&gt;&lt;UL&gt;&lt;LI&gt;&lt;SPAN&gt;sa.ie.log.ie_severity_level&lt;/SPAN&gt;&lt;/LI&gt;&lt;LI&gt;&lt;SPAN&gt;glide.discovery.identification.log_level&lt;/SPAN&gt;&lt;/LI&gt;&lt;LI&gt;&lt;SPAN&gt;sa.ie.log.service_cache_severity_level&lt;/SPAN&gt;&lt;/LI&gt;&lt;/UL&gt;&lt;P&gt;&lt;SPAN&gt;Regards,&lt;/SPAN&gt;&lt;/P&gt;&lt;P&gt;&lt;SPAN&gt;Hong&lt;/SPAN&gt;&lt;/P&gt;</description>
      <pubDate>Thu, 13 Mar 2025 15:11:14 GMT</pubDate>
      <guid>https://www.servicenow.com/community/community-central-forum/categorize-system-logs/m-p/3205815#M2483</guid>
      <dc:creator>hongsok</dc:creator>
      <dc:date>2025-03-13T15:11:14Z</dc:date>
    </item>
    <item>
      <title>Re: Categorize System Logs</title>
      <link>https://www.servicenow.com/community/community-central-forum/categorize-system-logs/m-p/3212163#M2535</link>
      <description>&lt;P class=""&gt;The data is recorded in the syslog table. Currently, I have the property value set to "Error," but since we haven't experienced any errors in weeks, I don't have example data to share.&lt;BR /&gt;&lt;BR /&gt;&lt;/P&gt;&lt;P class=""&gt;There's a similar setting for the IRE (Identification and Reconciliation Engine), where the source column value is "identification_engine" when log data is written into the table. For more information on this example and it's detailed information, you can refer to the following article:&lt;BR /&gt;&lt;BR /&gt;&lt;/P&gt;&lt;P class=""&gt;KB0750382: How to capture IRE [identification and reconciliation engine] debug logs&lt;BR /&gt;&lt;A class="" href="https://support.servicenow.com/kb?id=kb_article_view&amp;amp;sysparm_article=KB0750382" target="_blank" rel="nofollow noopener"&gt;https://support.servicenow.com/kb?id=kb_article_view&amp;amp;sysparm_article=KB0750382&lt;/A&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;/P&gt;&lt;P class=""&gt;Generally, most error/debug data is written into the syslog table. The ServiceNow instance has over 20 log tables, many of which extend from the base syslog table.&lt;/P&gt;&lt;P class=""&gt;To find relevant data in your case, you can search the syslog table using the following methods:&lt;/P&gt;&lt;UL class=""&gt;&lt;LI&gt;&lt;P class=""&gt;Search for message column which contain the word "engine."&lt;/P&gt;&lt;/LI&gt;&lt;LI&gt;&lt;P class=""&gt;Or look for entries with "identification_engine" value in the source column.&lt;/P&gt;&lt;/LI&gt;&lt;/UL&gt;&lt;P class=""&gt;If you're not seeing any data, it's possible that no error data has been generated, similar to my situation.&lt;BR /&gt;&lt;BR /&gt;BR, Jan&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;</description>
      <pubDate>Wed, 19 Mar 2025 17:49:18 GMT</pubDate>
      <guid>https://www.servicenow.com/community/community-central-forum/categorize-system-logs/m-p/3212163#M2535</guid>
      <dc:creator>JC Moller</dc:creator>
      <dc:date>2025-03-19T17:49:18Z</dc:date>
    </item>
  </channel>
</rss>

