--- sourceDocument: brazil Combined Product Files sourceDocumentLink: https://www.servicenow.com/docs/r/delta-yokohama-brazil Release : - brazil ft:locale : - en-US ft:publication_title : - brazil Combined Product Files ft:clusterId : - delta3by bundleId : - delta3by --- # Combined Health Log Analytics release notes for upgrades from Yokohama to Brazil # Combined Health Log Analytics release notes for upgrades from Yokohama to Brazil {#ariaid-title1} Release version: Brazil Updated October 8, 2026 ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 11 minutes to read Summarize ![AI sparkle icon](https://servicenow.com/docs/portal-asset/ai-sparkle-icon) Summarized using AI This content was generated using new OpenAI-powered functionality. Results are provided on an as is basis and are not guaranteed to be accurate or complete. ## Summary of Combined Health Log Analytics Release Notes for Upgrades from Yokohama to Brazil These consolidated release notes provide ServiceNow customers with a comprehensive view of updates, new features, changes, and important upgrade considerations for Health Log Analytics (HLA) from the Yokohama release through to Brazil. This information helps you prepare for the upgrade process and understand the enhancements introduced in each release family. Show full answer Show less ## Key Features * **Integrations Launchpad Enhancements (Yokohama and Zurich):** Easily configure diverse log data integrations including Splunk TCP/UDP, MID Server, Apache Kafka, Microsoft Azure Log Analytics, REST API, Amazon Data Firehose, GCP PubSub, Azure Event Hubs, and Edge Delta via a unified interface. This simplifies setup and supports real-time log streaming without the need for MID Servers in some cases. * **Advanced Data Inputs:** Use dedicated Cribl and Edge Delta inputs to manage high-volume log data ingestion effectively. Splunk Polling enables consistent and automated retrieval of log data from Splunk, accelerating proofs of concept and reducing stakeholder involvement. * **Improved Alert Management (Brazil):** The introduction of Sustained Alert feedback suppresses alerts triggered by short-lived anomalies, notifying you only when issues persist, which reduces noise and enhances alert relevance. * **Smart Parser Gen AI Enhancements (Brazil):** Gain increased confidence in parsing and alerting through expanded automated testing and visibility into the parsing and alert generation workflow. * **MID-less Integration Setup (Brazil):** Leverage AI-enabled MCP Clients to configure MID-less integrations using natural-language prompts without navigating the Integrations Launchpad, streamlining the setup process. * **Contextual Alerting (Zurich):** Map logs to specific service instances and components, enabling alerts to be generated in the correct operational context for more effective monitoring and response. * **ServiceNow Otto® Brand Introduction (Brazil):** Reflects the new AI experience branding across ServiceNow products including Health Log Analytics, with no impact on your product entitlements. * **Log Storage Migration (Brazil):** Short-term troubleshooting logs are now stored in LogDB instead of Elasticsearch, improving compression and ingestion speed without requiring customer action. ## Key Changes * **Alert Model Update (Yokohama):** Component-based alert grouping has been deprecated and replaced by a streamlined two-tier alert model that aligns alerts with service-level anomalies, improving visibility and correlation. * **Renaming for Clarity (Yokohama):** The Glide Syslog data input is now called ServiceNow System Logs data input. * **New Coral Theme (Zurich):** Introduces a fresh, brand-neutral default theme with an optional dark mode for web and mobile, enhancing user experience. ## Upgrade and Activation Guidance Health Log Analytics is available for installation through the ServiceNow Store. Customers should review pre- and post-upgrade tasks specific to their current release to Brazil to ensure a smooth transition. No additional browser or localization requirements have changed between Yokohama and Brazil. The product supports multiple languages, including US English (default), UK English, French, German, Italian, Japanese, and Spanish. ## Practical Benefits for ServiceNow Customers * Streamlined integration setup reduces configuration complexity and accelerates time-to-value. * Improved alert accuracy and sustained alert feedback reduce alert fatigue and focus attention on persistent issues. * Contextualized alerts improve troubleshooting efficiency by linking logs directly to affected services and components. * Enhanced AI and ML capabilities support proactive detection of anomalies and automated root cause analysis. * MID-less integration options and AI-enabled setup tools simplify operational management and reduce dependency on infrastructure components. * Improved log storage performance enhances data processing speed and reduces storage costs without requiring customer intervention. Consolidated page of all release notes for Health Log Analytics from Yokohama to Brazil. ## How to use this page To help you prepare for your upgrade, we have combined the cross-family Health Log Analytics release notes onto one page. Read this summary of the new features, changes, and updated information for your product from Yokohama to Brazil. Tip: If there were no updates for a release notes section in a certain family release, we included a short note for your reference. For example, if a product did not have any updates in Tokyo, the row says "No updates for this release." ## Important information for upgrading Health Log Analytics to Brazil Before you upgrade to Brazil, review these pre- and post-upgrade tasks and complete the tasks as needed. {#dfrn3-healthloganalytics-summary__entry__2} | Release | Release notes | |-|-| | Yokohama | No updates for this release. | | Zurich | No updates for this release. | | Australia | No updates for this release. | | Brazil | No updates for this release. | [ ] ## New features Between your current release family and Brazil, new features were introduced for Health Log Analytics. {#dfrn3-healthloganalytics-summary__entry__12} | Release | Release notes | |-|-| | Yokohama | [Configure log data integrations from the Integrations Launchpad](https://www.servicenow.com/docs/access?context=hla-data-input-setup-integrations&family=yokohama&ft:locale=en-US) : Starting in version 36.0.19, benefit from additional log data integrations for Splunk TCP/UDP, Splunk Poller, MID Server, Apache Kafka, Microsoft Azure Log Analytics, and REST API that can be easily set up through the Integrations Launchpad. [Set up an Amazon Data Firehose integration for real-time log data streaming from multiple sources](https://www.servicenow.com/docs/access?context=il-connector-hla-firehose&family=yokohama&ft:locale=en-US) : Starting in version 36.0.19, leverage an integration for streaming log data from Amazon Data Firehose directly to the collector service in ITOM Gateway, where it is queued and then processed by Health Log Analytics. This integration doesn't run on a MID Server and can be configured from the Integrations Launchpad. [Integrate with log data connectors from the Integrations Launchpad](https://www.servicenow.com/docs/access?context=hla-data-input-setup-integrations&family=yokohama&ft:locale=en-US) : Take advantage of the Integrations Launchpad's unified interface for convenient integration with log data connectors that feed raw log data from external sources into your instance. You set up log data connectors for HLA from the Event Management Integrations Launchpad in Service Operations Workspace for ITOM. In this release, the Integrations Launchpad enables integration with the following connectors: Elasticsearch, ServiceNow System Logs, UDP, and TCP. [Use Cribl and Edge Delta data inputs to streamline HLA data ingestion with tools handling large log volumes](https://www.servicenow.com/docs/access?context=hla-data-input-setup-manual&family=yokohama&ft:locale=en-US) : Use dedicated data inputs to facilitate data ingestion from Cribl or Edge Delta when using these tools to handle large volumes of log data from multiple sources before sending it to HLA. [Pull data from Splunk regularly using the Splunk Polling data input](https://www.servicenow.com/docs/access?context=hla-data-input-splunk-polling&family=yokohama&ft:locale=en-US) : Make your data workflows more consistent and productive by fetching data consistently over time using the Splunk Polling data input, which sends recurring queries (polls) to Splunk. Handling most configurations on the HLA side means you need minimal additional stakeholder involvement, which enables swift integration with your existing Splunk setup. This enhancement accelerates proofs of concept (POCs) and enables faster iterations using real data. [Use your Splunk data input to ingest preprocessed data from Splunk](https://www.servicenow.com/docs/access?context=hla-data-input-splunk&family=yokohama&ft:locale=en-US) : Ingest data from Splunk in a preprocessed, structured format using your existing Splunk data input. | | Zurich | [Export source types to an update set by log source](https://www.servicenow.com/docs/access?context=hla-export-sourcetypes-by-source&family=zurich&ft:locale=en-US) : Starting in version 38.0.16, export all source types related to one or more selected log sources to an update set together. You can then import the update set to the target environment. [Map log data to service instances and components for alerts in context](https://www.servicenow.com/docs/access?context=il-connector-hla-map-business-context&family=zurich&ft:locale=en-US) : Starting in version 38.0.16, map your logs to service instances and components so that Health Log Analytics can generate alerts in the correct context. Contextualizing your log data is especially important when the integration processes logs from multiple service instances and components. [Display Integrations Launchpad from the ITOM AIOps configuration center](https://www.servicenow.com/docs/access?context=itom-aiops-conf-center&family=zurich&ft:locale=en-US) : Starting in version 38.0.16, open the Integrations Launchpad from ITOM AIOps configuration center. The ITOM AIOps configuration center is a centralized workspace that enables you to configure and manage AIOps features from a single place. [Set up a GCP PubSub integration from the Integrations Launchpad](https://www.servicenow.com/docs/access?context=il-connector-hla-gcp-pubsub&family=zurich&ft:locale=en-US) : Starting in version 38.0.16, set up an integration from the Integrations Launchpad for receiving log messages that were published to a Google Cloud Platform (GCP) Pub/Sub topic and streaming them to your ServiceNow instance. [Set up a Microsoft Azure Event Hubs integration from the Integrations Launchpad](https://www.servicenow.com/docs/access?context=il-connector-hla-event-hubs&family=zurich&ft:locale=en-US) : Starting in version 38.0.16, set up an integration from the Integrations Launchpad for streaming events from Microsoft Azure Event Hubs to your ServiceNow instance. [Set up an Edge Delta TCP or REST integration from the Integrations Launchpad](https://www.servicenow.com/docs/access?context=il-connector-hla-edgedelta-tcp&family=zurich&ft:locale=en-US) : Starting in version 38.0.16, set up an integration from the Integrations Launchpad to enable Health Log Analytics to process Edge Delta log messages streaming into your ServiceNow instance over the TCP transport protocol or via REST. [Monitor ServiceNow instance logs with the ServiceNow Log Export data input](https://www.servicenow.com/docs/access?context=hla-data-input-log-export&family=zurich&ft:locale=en-US) : Starting in version 38.0.16, set up a data input for monitoring ServiceNow instance node logs from both Java code and JavaScript in Health Log Analytics. [Facilitate Cribl log data ingestion by Health Log Analytics using the Cribl integration](https://www.servicenow.com/docs/access?context=il-connector-hla-cribl&family=zurich&ft:locale=en-US) : Starting in version 37.0.15, use the Cribl log data integration to streamline Health Log Analytics data ingestion with Cribl. If your organization uses Cribl for filtering and routing large volumes of log data from various sources, the log format received by HLA is distinct from other types. The Cribl integration enables HLA to detect and separate transport headers from inner log messages in this format, forwarding only the inner message to the source type structure for processing. You can configure the Cribl integration conveniently through the Integrations Launchpad. [Leverage additional information available on the integration's Overview screen](https://www.servicenow.com/docs/access?context=il-connector-overview-tab&family=zurich&ft:locale=en-US) : Starting in version 37.0.15, take advantage of extra information presented on the Overview screen. The screen now displays the ITOM Gateway in the log processing pipeline and the log streaming rate per minute, aligning it with the metrics for the MID Server and the HLA Engine. The Overview screen also shows the source time of the last processed log. | | Australia | No updates for this release. | | Brazil | [Sustained Alert feedback](https://www.servicenow.com/docs/access?context=hla-sustained-alert-apply&family=brazil&ft:locale=en-US) : Suppress alerts on short-lived anomaly spikes and receive notifications only when an issue persists continuously. Apply Sustained Alert feedback per metric from the Alert Card or Express List (single or bulk), setting a fixed duration threshold to define what counts as sustained. [Smart Parser Gen AI enhancements](https://www.servicenow.com/docs/access?context=hla-source-type-structure-adjustment&family=brazil&ft:locale=en-US) : Increase confidence in Smart Parser Gen AI alerts by viewing the full parsing and alert generation flow, now backed by expanded automated testing. [MID-less integration setup through an MCP Client](https://www.servicenow.com/docs/access?context=hla-mid-less-integrations-concept&family=brazil&ft:locale=en-US) : Admins with access to the ITOM MCP Server Console can use an AI-enabled MCP Client to set up MID-less integrations. You can use any MCP Client, such as AWS Claude, to create MID-less integrations through natural-language prompts, without navigating to the Integrations Launchpad. | [ ] ## Changes Between your current release family and Brazil, some changes were made to existing Health Log Analytics features. {#dfrn3-healthloganalytics-summary__entry__22} | Release | Release notes | |-|-| | Yokohama | [Component-based alert grouping is deprecated](https://www.servicenow.com/docs/access?context=hla-op-log-analytics-alert-types&family=yokohama&ft:locale=en-US) : Starting in version 36.0.19, the adoption of a streamlined two-tier alert model, Log Analytics Group to Single Alert, has replaced component-based alert groups, which have been removed. This model aligns alert representation with the service-level anomalies identified by Health Log Analytics, rather than individual host CIs. The update improves alert visibility, simplifies correlation, and enhances overall alert management efficiency. [ServiceNow System Logs data input](https://www.servicenow.com/docs/access?context=hla-data-input-glide-syslog&family=yokohama&ft:locale=en-US) : The Glide Syslog data input has been renamed ServiceNow System Logs data input. | | Zurich | Coral theme : Coral is now the default theme for new portal, web, and mobile experiences with Next Experience or Core UI enabled. This theme provides a fresh look and feel, featuring brand-neutral illustrations to enhance your user experience. A dark theme option is available for web and mobile experiences. | | Australia | No updates for this release. | | Brazil | ServiceNow Otto® : ServiceNow Otto® is the new AI experience brand. This change is reflected in the name of ServiceNow products, including Health Log Analytics. Your product entitlements remain unchanged. Check your entitlements to determine whether you have access to specific features. Health Log Analytics migration to LogDB for log storage : Health Log Analytics stores short-term troubleshooting logs in LogDB instead of Elasticsearch for significantly better compression and faster ingestion. No action is required from your organization. Alerts generated before the transition still appear, but their surrounding logs aren't available because existing log data remains in Elasticsearch. New logs generated after the switch populate normally. If you notice anything unexpected, contact ServiceNow support. | [ ] ## Removed Between your current release family and Brazil, some Health Log Analytics features or functionality were removed. {#dfrn3-healthloganalytics-summary__entry__32} | Release | Release notes | |-|-| | Yokohama | No updates for this release. | | Zurich | No updates for this release. | | Australia | No updates for this release. | | Brazil | No updates for this release. | [ ] ## Deprecations Between your current release family and Brazil, some Health Log Analytics features or functionality were deprecated. {#dfrn3-healthloganalytics-summary__entry__42} | Release | Release notes | |-|-| | Yokohama | No updates for this release. | | Zurich | No updates for this release. | | Australia | No updates for this release. | | Brazil | No updates for this release. | [ ] ## Activation information Review information on how to activate Health Log Analytics. {#dfrn3-healthloganalytics-summary__entry__52} | Release | Release notes | |-|-| | Yokohama | Activation information : Install Health Log Analytics by requesting it from the ServiceNow Store. Visit the [ServiceNow Store](https://store.servicenow.com/sn_appstore_store.do#!/store/home) website to view all the available apps and for information about submitting requests to the store. For cumulative release notes information for all released apps, see the [ServiceNow Store version history release notes](https://www.servicenow.com/docs/access?context=sn-store-release-notes&family=yokohama&ft:locale=en-US). Important: [Health Log Analytics](https://www.servicenow.com/docs/access?context=health-log-analytics-rn&family=yokohama&ft:locale=en-US) is available in the ServiceNow Store. For details, see the "Activation information" section of these release notes. | | Zurich | Activation information : Install Health Log Analytics by requesting it from the ServiceNow Store. Visit the [ServiceNow Store](https://store.servicenow.com/sn_appstore_store.do#!/store/home) website to view all the available apps and for information about submitting requests to the store. For cumulative release notes information for all released apps, see the [ServiceNow Store version history release notes](https://www.servicenow.com/docs/access?context=sn-store-release-notes&family=zurich&ft:locale=en-US). Important: [Health Log Analytics](https://www.servicenow.com/docs/access?context=health-log-analytics-rn&family=zurich&ft:locale=en-US) is available in the ServiceNow Store. For details, see the "Activation information" section of these release notes. | | Australia | No updates for this release. | | Brazil | Activation information : Install Health Log Analytics by requesting it from the ServiceNow Store. Visit the [ServiceNow Store](https://store.servicenow.com/sn_appstore_store.do#!/store/home) to view all the available apps, and for information about submitting requests to the store. For cumulative release notes information for all released apps, see the [ServiceNow Store version history release notes](https://www.servicenow.com/docs/access?context=sn-store-release-notes&family=brazil&ft:locale=en-US). Note: Health Log Analytics is available in the ServiceNow Store. For details, see the following activation information. | [ ] ## Additional requirements If any additional requirements were introduced or changed for Health Log Analytics we have noted them here. {#dfrn3-healthloganalytics-summary__entry__62} | Release | Release notes | |-|-| | Yokohama | No updates for this release. | | Zurich | No updates for this release. | | Australia | No updates for this release. | | Brazil | No updates for this release. | [ ] ## Browser requirements If any specific browser requirements were introduced or changed for Health Log Analytics we have noted them here. {#dfrn3-healthloganalytics-summary__entry__72} | Release | Release notes | |-|-| | Yokohama | No updates for this release. | | Zurich | No updates for this release. | | Australia | No updates for this release. | | Brazil | No updates for this release. | [ ] ## Accessibility information Review details on accessibility information for Health Log Analytics, such as specific requirements or compliance levels. {#dfrn3-healthloganalytics-summary__entry__82} | Release | Release notes | |-|-| | Yokohama | No updates for this release. | | Zurich | Accessibility information : Dark theme : The new Coral theme includes a dark theme option for web and mobile experiences. This option is commonly used to alleviate eye strain and improve readability. | | Australia | No updates for this release. | | Brazil | No updates for this release. | [ ] ## Localization information If there are specific localization considerations for Health Log Analytics we have noted them here. {#dfrn3-healthloganalytics-summary__entry__92} | Release | Release notes | |-|-| | Yokohama | Localization information : The current available languages for Health Log Analytics are US English, UK English, French, German, Italian, Japanese, and Spanish. The default language is US English. | | Zurich | Localization information : The current available languages for Health Log Analytics are US English, UK English, French, German, Italian, Japanese, and Spanish. The default language is US English. | | Australia | No updates for this release. | | Brazil | Localization information : The current available languages for Health Log Analytics are US English, UK English, French, German, Italian, Japanese, and Spanish. The default language is US English. | [ ] ## Highlight information If there are specific highlight considerations for Health Log Analytics we have noted them here. {#dfrn3-healthloganalytics-summary__entry__102} | Release | Release notes | |-|-| | Yokohama | * Use the enhanced Splunk data input to ingest data from Splunk in a preprocessed structured format. You can also pull data from Splunk regularly using the new Splunk Polling data input. * Take advantage of a unified interface for convenient data input integration by setting up integrations from the Integrations Launchpad. * Streamline HLA data ingestion with tools for handling large log volumes by using dedicated Cribl and Edge Delta data inputs. * Configure log data integrations for Splunk TCP/UDP, Splunk Poller, MID Server, Apache Kafka, Microsoft Azure Log Analytics, REST API, and Amazon Data Firehose conveniently from the Integrations Launchpad. * Generate a description of Health Log Analytics alerts using Now Assist. See [Health Log Analytics](https://www.servicenow.com/docs/access?context=hla-landing-page&family=yokohama&ft:locale=en-US) for more information. | | Zurich | * Use the Cribl integration to streamline Health Log Analytics data ingestion with Cribl. * Leverage additional information presented on the integration's Overview screen, such as the ITOM Gateway in the processing pipeline and the log streaming rate per minute. * Map log data to service instances and components for alerts in context. * Monitor ServiceNow instance logs with the ServiceNow Log Export data input. See [Health Log Analytics](https://www.servicenow.com/docs/access?context=hla-landing-page&family=zurich&ft:locale=en-US) for more information. | | Australia | No updates for this release. | | Brazil | * Stay ahead of issues with predictive alerts based on anomaly detection. * Detect anomalous behavior automatically with log analytics alert rules. * Reduce mean time to resolution by accelerating root cause analysis with contextual log data. * Simplify log ingestion by processing high-volume log data at scale. * Uncover patterns in log data using built-in AI and ML. See [Health Log Analytics](https://www.servicenow.com/docs/access?context=hla-landing-page&family=brazil&ft:locale=en-US) for more information. | [ ]