---
sourceDocument: Brazil IT Operations Management
sourceDocumentLink: https://www.servicenow.com/docs/r/it-operations-management

 Release :

    - brazil

ft:locale :

    - en-US

ft:publication_title :

    - Brazil IT Operations Management

ft:clusterId :

    - itom

bundleId :

    - itom

workflow :

    - Technology


---

# Verify your log sources

# Verify your log sources in Health Log Analytics {#ariaid-title1}

Release version: Brazil  
Updated September 10, 2026  
![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read  
Verify that all your log sources are present and active. Health Log Analytics tagging assigns logs to service instances and components, and automatically maps logs to sources.

## Before you begin

Role required: evt_mgmt_admin

## Procedure

1. Navigate to AllHealth Log AnalyticsData InputLog Sources.  
   The Log Sources table provides information about the sources created when you mapped the streaming data. The table lists these sources by service instance.  
   {#hla-log-sources-review__table_wx1_kt1_gnb__entry__2}

   | Column | Description |
   |-|-|
   | Service instance | The service instance. Service instances represent large or complete business processes. A single service instance can consist of multiple components, whereas different service instances can include the same components. |
   | Component | The components comprising the service instance. Components represent small technical parts or business processes. Typically, they represent Configuration Items (CIs). Several components are often clustered together in a single service instance. |
   | Status | The status of the log source: Active or Inactive. The Active status indicates that logs streamed into the system from this source in the last hour. |
   | Created | The creation date and time of this log source. |
   | Last event time | The last time logs streamed into the system from this source. |
   [ ]

   {#hla-log-sources-review__table_wx1_kt1_gnb}
2. Make sure that the system has created all your log sources.
3. Verify the creation, status, and log samples of a specific source in the source record.  
   Note:  
   Because auto-mapping can map log data to multiple sources, be sure to verify this information per source.
4. If a log source is missing, add it.
   1. Navigate to Health Log AnalyticsData InputData Input Mapping.
   2. Use the JavaScript function to manually map a log sample to the correct service instance, component, and source type.  
      For more information, see [Map raw log data manually](https://www.servicenow.com/docs/RTFq766xdWMGqMdEUABgcA "Mapping raw log data that streams into your ServiceNow instance determines how Health Log Analytics processes the data. If HLA doesn't discover properties automatically, you can map data input sources manually.").
   3. Navigate back to the Log Sources page and verify that the status of the new log source is Active.

   {#hla-log-sources-review__substeps_anc_fyp_h4b}  
   The system creates a log source.
5. Make sure that the status of all your log sources is Active.  
   If the status of a source is Inactive, double-click it and change it to Active manually.
6. Select Update.
**Related tasks**   

* [Delete a log source in Health Log Analytics](https://www.servicenow.com/docs/HydmDWrFxLbqCLwh_or69w "Delete a log source with or without its associated log data in Health Log Analytics.")
* [Stop extraction of unneeded log data in Health Log Analytics](https://www.servicenow.com/docs/0v8eHCZvfj_f6ruZ871qUw "If an extracted string of data is not descriptive enough or contains redundant text or information, you can set Health Log Analytics to stop extracting such data from your logs.")
* [Extract specific log data in Health Log Analytics](https://www.servicenow.com/docs/OtdeKL5FxBMKykKJn8wEtA "Set Health Log Analytics to extract specified terms from logs and map them to specific components.")

*[\>]: and then