--- sourceDocument: australia Combined Product Files sourceDocumentLink: https://www.servicenow.com/docs/r/australia/delta-xanadu-australia Release : - australia ft:locale : - en-US ft:publication_title : - australia Combined Product Files ft:clusterId : - delta3ax bundleId : - delta3ax --- # Combined Health Log Analytics release notes for upgrades from Xanadu to Australia # Combined Health Log Analytics release notes for upgrades from Xanadu to Australia {#ariaid-title1} Release version: Australia Updated November 5, 2026 ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 10 minutes to read Summarize ![AI sparkle icon](https://servicenow.com/docs/portal-asset/ai-sparkle-icon) Summarized using AI This content was generated using new OpenAI-powered functionality. Results are provided on an as is basis and are not guaranteed to be accurate or complete. ## Summary of Combined Health Log Analytics Release Notes for Upgrades from Xanadu to Australia This consolidated release notes document provides ServiceNow customers with a comprehensive summary of Health Log Analytics (HLA) updates spanning from the Xanadu release family through to the Australia release. It is designed to assist customers in preparing for upgrades by highlighting new features, changes, deprecations, and activation information relevant to the Health Log Analytics product across multiple releases. Show full answer Show less ## Key Features * **Improved Log Streaming Performance (Xanadu)**: The Lightning gRPC client enhances MID Server communication with ServiceNow instances, increasing log streaming speeds by up to six times. This requires manual activation. * **Glide Syslog Integration (Xanadu)**: Enables streaming of system log messages from the Glide Syslog table directly to the HLA AI engine without using a MID Server. * **Integrations Launchpad Enhancements (Yokohama, Zurich)**: Centralized interface for configuring various log data integrations such as Splunk TCP/UDP, Splunk Poller, MID Server, Apache Kafka, Microsoft Azure Log Analytics, REST API, Amazon Data Firehose, GCP PubSub, and Microsoft Azure Event Hubs. * **Support for Cribl and Edge Delta (Yokohama, Zurich)**: Dedicated data inputs facilitate ingestion of large log volumes processed by Cribl and Edge Delta, including handling specific log formats to optimize processing. * **Splunk Polling Data Input (Yokohama)**: Enables regular, automated polling of Splunk for consistent data retrieval, simplifying integration and accelerating proof of concept activities. * **Contextual Alerting (Zurich)**: Log data can be mapped to specific service instances and components, allowing HLA to generate alerts in the correct operational context for improved visibility and relevance. * **ServiceNow System Logs Data Input (Zurich)**: Formerly known as Glide Syslog, this renamed data input allows monitoring of ServiceNow instance node logs from Java and JavaScript sources. * **UI Improvements (Zurich)**: Introduction of the Coral theme as default for portals and mobile experiences, including a dark mode option to enhance accessibility and user comfort. * **Enhanced Metrics (Zurich)**: The Integration Overview screen now provides detailed metrics such as ITOM Gateway involvement, log streaming rates per minute, and timestamp of last processed logs. ## Key Changes * **Alert Grouping Model Update (Yokohama)**: Component-based alert grouping is deprecated and replaced by a streamlined two-tier alert model focusing on Log Analytics Group to Single Alert, improving alert management and correlation aligned to service-level anomalies. * **Data Input Renaming (Yokohama)**: Glide Syslog data input renamed to ServiceNow System Logs data input for clarity. * **Theme Update (Zurich)**: Coral theme becomes default for new user experiences, enhancing visual consistency and accessibility. ## Activation and Upgrade Considerations * Health Log Analytics is available for installation via the ServiceNow Store. Customers should request the app from the Store and review cumulative release notes there for additional details. * Before upgrading to Australia, customers should review and complete pre- and post-upgrade tasks as outlined in the release notes to ensure a smooth transition. * Manual activation is required for certain features such as the Lightning gRPC client. ## Additional Information * No features or functionalities were removed or deprecated in the Australia release. * No new browser or localization requirements were introduced between Xanadu and Australia; supported languages include US English, UK English, French, German, Italian, Japanese, and Spanish. * Accessibility improvements include availability of a dark theme option with the Coral theme to reduce eye strain and improve readability. ## Practical Benefits for ServiceNow Customers * Faster and more efficient log data streaming and ingestion improve the performance of Health Log Analytics workflows. * Centralized integration setup through the Integrations Launchpad simplifies configuration and management of diverse log sources. * Context-aware alerts enhance operational visibility by correlating logs to specific services and components. * Enhanced alert grouping and UI improvements reduce alert noise and improve user experience. * Consistent and extensible log data ingestion capabilities support a broad range of enterprise log sources and tools, facilitating scalability. Consolidated page of all release notes for Health Log Analytics from Xanadu to Australia. ## How to use this page To help you prepare for your upgrade, we have combined the cross-family Health Log Analytics release notes onto one page. Read this summary of the new features, changes, and updated information for your product from Xanadu to Australia. Tip: If there were no updates for a release notes section in a certain family release, we included a short note for your reference. For example, if a product did not have any updates in Tokyo, the row says "No updates for this release." ## Important information for upgrading Health Log Analytics to Australia Before you upgrade to Australia, review these pre- and post-upgrade tasks and complete the tasks as needed. {#dfrn3-healthloganalytics-summary__entry__2} | Release | Release notes | |-|-| | Xanadu | No updates for this release. | | Yokohama | No updates for this release. | | Zurich | No updates for this release. | | Australia | No updates for this release. | [ ] ## New features Between your current release family and Australia, new features were introduced for Health Log Analytics. {#dfrn3-healthloganalytics-summary__entry__12} | Release | Release notes | |-|-| | Xanadu | [Enjoy a significantly faster log streaming rate with the Lighting gRPC client for MID Server communication with the ServiceNow instance](https://www.servicenow.com/docs/access?context=hla-configuration-preferences&family=xanadu&ft:locale=en-US) : Increase log streaming speeds to Health Log Analytics by up to six times through the Lightning gRPC client, which enhances MID Server communication with your ServiceNow instance. Note that the Lightning gRPC client requires manual configuration to activate. [Stream system logs from Glide to Health Log Analytics](https://www.servicenow.com/docs/access?context=hla-data-input-glide-syslog&family=xanadu&ft:locale=en-US) : Use the Glide Syslog data input to stream log messages from the System Log table (Glide Syslog) in Glide to the Health Log Analytics AI engine (Occultus). Note: Only a single Glide Syslog data input can exist in the system. This data input doesn't run on a MID Server. | | Yokohama | [Configure log data integrations from the Integrations Launchpad](https://www.servicenow.com/docs/access?context=hla-data-input-setup-integrations&family=yokohama&ft:locale=en-US) : Starting in version 36.0.19, benefit from additional log data integrations for Splunk TCP/UDP, Splunk Poller, MID Server, Apache Kafka, Microsoft Azure Log Analytics, and REST API that can be easily set up through the Integrations Launchpad. [Set up an Amazon Data Firehose integration for real-time log data streaming from multiple sources](https://www.servicenow.com/docs/access?context=il-connector-hla-firehose&family=yokohama&ft:locale=en-US) : Starting in version 36.0.19, leverage an integration for streaming log data from Amazon Data Firehose directly to the collector service in ITOM Gateway, where it is queued and then processed by Health Log Analytics. This integration doesn't run on a MID Server and can be configured from the Integrations Launchpad. [Integrate with log data connectors from the Integrations Launchpad](https://www.servicenow.com/docs/access?context=hla-data-input-setup-integrations&family=yokohama&ft:locale=en-US) : Take advantage of the Integrations Launchpad's unified interface for convenient integration with log data connectors that feed raw log data from external sources into your instance. You set up log data connectors for HLA from the Event Management Integrations Launchpad in Service Operations Workspace for ITOM. In this release, the Integrations Launchpad enables integration with the following connectors: Elasticsearch, ServiceNow System Logs, UDP, and TCP. [Use Cribl and Edge Delta data inputs to streamline HLA data ingestion with tools handling large log volumes](https://www.servicenow.com/docs/access?context=hla-data-input-setup-manual&family=yokohama&ft:locale=en-US) : Use dedicated data inputs to facilitate data ingestion from Cribl or Edge Delta when using these tools to handle large volumes of log data from multiple sources before sending it to HLA. [Pull data from Splunk regularly using the Splunk Polling data input](https://www.servicenow.com/docs/access?context=hla-data-input-splunk-polling&family=yokohama&ft:locale=en-US) : Make your data workflows more consistent and productive by fetching data consistently over time using the Splunk Polling data input, which sends recurring queries (polls) to Splunk. Handling most configurations on the HLA side means you need minimal additional stakeholder involvement, which enables swift integration with your existing Splunk setup. This enhancement accelerates proofs of concept (POCs) and enables faster iterations using real data. [Use your Splunk data input to ingest preprocessed data from Splunk](https://www.servicenow.com/docs/access?context=hla-data-input-splunk&family=yokohama&ft:locale=en-US) : Ingest data from Splunk in a preprocessed, structured format using your existing Splunk data input. | | Zurich | [Export source types to an update set by log source](https://www.servicenow.com/docs/access?context=hla-export-sourcetypes-by-source&family=zurich&ft:locale=en-US) : Starting in version 38.0.16, export all source types related to one or more selected log sources to an update set together. You can then import the update set to the target environment. [Map log data to service instances and components for alerts in context](https://www.servicenow.com/docs/access?context=il-connector-hla-map-business-context&family=zurich&ft:locale=en-US) : Starting in version 38.0.16, map your logs to service instances and components so that Health Log Analytics can generate alerts in the correct context. Contextualizing your log data is especially important when the integration processes logs from multiple service instances and components. [Display Integrations Launchpad from the ITOM AIOps configuration center](https://www.servicenow.com/docs/access?context=itom-aiops-conf-center&family=zurich&ft:locale=en-US) : Starting in version 38.0.16, open the Integrations Launchpad from ITOM AIOps configuration center. The ITOM AIOps configuration center is a centralized workspace that enables you to configure and manage AIOps features from a single place. [Set up a GCP PubSub integration from the Integrations Launchpad](https://www.servicenow.com/docs/access?context=il-connector-hla-gcp-pubsub&family=zurich&ft:locale=en-US) : Starting in version 38.0.16, set up an integration from the Integrations Launchpad for receiving log messages that were published to a Google Cloud Platform (GCP) Pub/Sub topic and streaming them to your ServiceNow instance. [Set up a Microsoft Azure Event Hubs integration from the Integrations Launchpad](https://www.servicenow.com/docs/access?context=il-connector-hla-event-hubs&family=zurich&ft:locale=en-US) : Starting in version 38.0.16, set up an integration from the Integrations Launchpad for streaming events from Microsoft Azure Event Hubs to your ServiceNow instance. [Set up an Edge Delta TCP or REST integration from the Integrations Launchpad](https://www.servicenow.com/docs/access?context=il-connector-hla-edgedelta-tcp&family=zurich&ft:locale=en-US) : Starting in version 38.0.16, set up an integration from the Integrations Launchpad to enable Health Log Analytics to process Edge Delta log messages streaming into your ServiceNow instance over the TCP transport protocol or via REST. [Monitor ServiceNow instance logs with the ServiceNow Log Export data input](https://www.servicenow.com/docs/access?context=hla-data-input-log-export&family=zurich&ft:locale=en-US) : Starting in version 38.0.16, set up a data input for monitoring ServiceNow instance node logs from both Java code and JavaScript in Health Log Analytics. [Facilitate Cribl log data ingestion by Health Log Analytics using the Cribl integration](https://www.servicenow.com/docs/access?context=il-connector-hla-cribl&family=zurich&ft:locale=en-US) : Starting in version 37.0.15, use the Cribl log data integration to streamline Health Log Analytics data ingestion with Cribl. If your organization uses Cribl for filtering and routing large volumes of log data from various sources, the log format received by HLA is distinct from other types. The Cribl integration enables HLA to detect and separate transport headers from inner log messages in this format, forwarding only the inner message to the source type structure for processing. You can configure the Cribl integration conveniently through the Integrations Launchpad. [Leverage additional information available on the integration's Overview screen](https://www.servicenow.com/docs/access?context=il-connector-overview-tab&family=zurich&ft:locale=en-US) : Starting in version 37.0.15, take advantage of extra information presented on the Overview screen. The screen now displays the ITOM Gateway in the log processing pipeline and the log streaming rate per minute, aligning it with the metrics for the MID Server and the HLA Engine. The Overview screen also shows the source time of the last processed log. | | Australia | No updates for this release. | [ ] ## Changes Between your current release family and Australia, some changes were made to existing Health Log Analytics features. {#dfrn3-healthloganalytics-summary__entry__22} | Release | Release notes | |-|-| | Xanadu | No updates for this release. | | Yokohama | [Component-based alert grouping is deprecated](https://www.servicenow.com/docs/access?context=hla-op-log-analytics-alert-types&family=yokohama&ft:locale=en-US) : Starting in version 36.0.19, the adoption of a streamlined two-tier alert model, Log Analytics Group to Single Alert, has replaced component-based alert groups, which have been removed. This model aligns alert representation with the service-level anomalies identified by Health Log Analytics, rather than individual host CIs. The update improves alert visibility, simplifies correlation, and enhances overall alert management efficiency. [ServiceNow System Logs data input](https://www.servicenow.com/docs/access?context=hla-data-input-glide-syslog&family=yokohama&ft:locale=en-US) : The Glide Syslog data input has been renamed ServiceNow System Logs data input. | | Zurich | Coral theme : Coral is now the default theme for new portal, web, and mobile experiences with Next Experience or Core UI enabled. This theme provides a fresh look and feel, featuring brand-neutral illustrations to enhance your user experience. A dark theme option is available for web and mobile experiences. | | Australia | No updates for this release. | [ ] ## Removed Between your current release family and Australia, some Health Log Analytics features or functionality were removed. {#dfrn3-healthloganalytics-summary__entry__32} | Release | Release notes | |-|-| | Xanadu | No updates for this release. | | Yokohama | No updates for this release. | | Zurich | No updates for this release. | | Australia | No updates for this release. | [ ] ## Deprecations Between your current release family and Australia, some Health Log Analytics features or functionality were deprecated. {#dfrn3-healthloganalytics-summary__entry__42} | Release | Release notes | |-|-| | Xanadu | No updates for this release. | | Yokohama | No updates for this release. | | Zurich | No updates for this release. | | Australia | No updates for this release. | [ ] ## Activation information Review information on how to activate Health Log Analytics. {#dfrn3-healthloganalytics-summary__entry__52} | Release | Release notes | |-|-| | Xanadu | Install Health Log Analytics by requesting it from the ServiceNow Store. Visit the [ServiceNow Store](https://store.servicenow.com/sn_appstore_store.do#!/store/home) website to view all the available apps and for information about submitting requests to the store. For cumulative release notes information for all released apps, see the [ServiceNow Store version history release notes](https://www.servicenow.com/docs/access?context=sn-store-release-notes&family=xanadu&ft:locale=en-US). | | Yokohama | Activation information : Install Health Log Analytics by requesting it from the ServiceNow Store. Visit the [ServiceNow Store](https://store.servicenow.com/sn_appstore_store.do#!/store/home) website to view all the available apps and for information about submitting requests to the store. For cumulative release notes information for all released apps, see the [ServiceNow Store version history release notes](https://www.servicenow.com/docs/access?context=sn-store-release-notes&family=yokohama&ft:locale=en-US). Important: [Health Log Analytics](https://www.servicenow.com/docs/access?context=health-log-analytics-rn&family=yokohama&ft:locale=en-US) is available in the ServiceNow Store. For details, see the "Activation information" section of these release notes. | | Zurich | Activation information : Install Health Log Analytics by requesting it from the ServiceNow Store. Visit the [ServiceNow Store](https://store.servicenow.com/sn_appstore_store.do#!/store/home) website to view all the available apps and for information about submitting requests to the store. For cumulative release notes information for all released apps, see the [ServiceNow Store version history release notes](https://www.servicenow.com/docs/access?context=sn-store-release-notes&family=zurich&ft:locale=en-US). Important: [Health Log Analytics](https://www.servicenow.com/docs/access?context=health-log-analytics-rn&family=zurich&ft:locale=en-US) is available in the ServiceNow Store. For details, see the "Activation information" section of these release notes. | | Australia | No updates for this release. | [ ] ## Additional requirements If any additional requirements were introduced or changed for Health Log Analytics we have noted them here. {#dfrn3-healthloganalytics-summary__entry__62} | Release | Release notes | |-|-| | Xanadu | No updates for this release. | | Yokohama | No updates for this release. | | Zurich | No updates for this release. | | Australia | No updates for this release. | [ ] ## Browser requirements If any specific browser requirements were introduced or changed for Health Log Analytics we have noted them here. {#dfrn3-healthloganalytics-summary__entry__72} | Release | Release notes | |-|-| | Xanadu | No updates for this release. | | Yokohama | No updates for this release. | | Zurich | No updates for this release. | | Australia | No updates for this release. | [ ] ## Accessibility information Review details on accessibility information for Health Log Analytics, such as specific requirements or compliance levels. {#dfrn3-healthloganalytics-summary__entry__82} | Release | Release notes | |-|-| | Xanadu | No updates for this release. | | Yokohama | No updates for this release. | | Zurich | Accessibility information : Dark theme : The new Coral theme includes a dark theme option for web and mobile experiences. This option is commonly used to alleviate eye strain and improve readability. | | Australia | No updates for this release. | [ ] ## Localization information If there are specific localization considerations for Health Log Analytics we have noted them here. {#dfrn3-healthloganalytics-summary__entry__92} | Release | Release notes | |-|-| | Xanadu | The current available languages for Health Log Analytics are US English, UK English, French, German, Italian, Japanese, and Spanish. The default language is US English. | | Yokohama | Localization information : The current available languages for Health Log Analytics are US English, UK English, French, German, Italian, Japanese, and Spanish. The default language is US English. | | Zurich | Localization information : The current available languages for Health Log Analytics are US English, UK English, French, German, Italian, Japanese, and Spanish. The default language is US English. | | Australia | No updates for this release. | [ ] ## Highlight information If there are specific highlight considerations for Health Log Analytics we have noted them here. {#dfrn3-healthloganalytics-summary__entry__102} | Release | Release notes | |-|-| | Xanadu | * Enjoy a significantly faster log streaming rate with the Lighting gRPC client for MID Server communication with the ServiceNow instance. * Stream system logs from Glide to Health Log Analytics. See [Health Log Analytics](https://www.servicenow.com/docs/access?context=hla-landing-page&family=xanadu&ft:locale=en-US) for more information. | | Yokohama | * Use the enhanced Splunk data input to ingest data from Splunk in a preprocessed structured format. You can also pull data from Splunk regularly using the new Splunk Polling data input. * Take advantage of a unified interface for convenient data input integration by setting up integrations from the Integrations Launchpad. * Streamline HLA data ingestion with tools for handling large log volumes by using dedicated Cribl and Edge Delta data inputs. * Configure log data integrations for Splunk TCP/UDP, Splunk Poller, MID Server, Apache Kafka, Microsoft Azure Log Analytics, REST API, and Amazon Data Firehose conveniently from the Integrations Launchpad. * Generate a description of Health Log Analytics alerts using Now Assist. See [Health Log Analytics](https://www.servicenow.com/docs/access?context=hla-landing-page&family=yokohama&ft:locale=en-US) for more information. | | Zurich | * Use the Cribl integration to streamline Health Log Analytics data ingestion with Cribl. * Leverage additional information presented on the integration's Overview screen, such as the ITOM Gateway in the processing pipeline and the log streaming rate per minute. * Map log data to service instances and components for alerts in context. * Monitor ServiceNow instance logs with the ServiceNow Log Export data input. See [Health Log Analytics](https://www.servicenow.com/docs/access?context=hla-landing-page&family=zurich&ft:locale=en-US) for more information. | | Australia | No updates for this release. | [ ]