---
sourceDocument: Australia IT Operations Management
sourceDocumentLink: https://www.servicenow.com/docs/r/it-operations-management

 Release :

    - australia

ft:locale :

    - en-US

ft:publication_title :

    - Australia IT Operations Management

ft:clusterId :

    - itom

bundleId :

    - itom

workflow :

    - Technology


---

# Review alert-related logs on the Log Viewer

# Review alert logs on the Log viewer {#ariaid-title1}

* Release version: Australia
* 
* Updated March 12, 2026
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read

The Log Viewer tab lets you browse the logs for an alert by timestamp or time range, and visualize anomaly frequency within a specific time period. Customizing the displayed data and adjusting time
filters enables you to better understand the framework in which the anomaly occurred, helping you find the root cause faster.

The Log Viewer presents all data connected with the Log Analytics alert. It shows the query that relates to the anomaly, the selected component, and the appropriate time filter. You can personalize the displayed data, and manually adjust the time range without
affecting the other settings. The applied filters appear in the Filters pane. You can add or remove filters as needed to show only the data you want to view.

The Log Viewer displays a chart of the frequency of anomalous log lines during one minute before and one minute after the Log Analytics alert and lists the associated log data. This information helps you identify trends leading up to and following the event, providing context for root cause analysis.

As you analyze the logs for an alert on the Log Viewer, you can modify the query to fine-tune the search, save useful searches, and share them with others. For a description of the information displayed in
the Log Viewer table, see [Log Viewer table fields](https://www.servicenow.com/docs/SOVp2GcrUvwyWod8PW49qA "This section describes the information displayed in the Log Viewer table.").  
You can perform the following tasks on the Log Viewer:

* [View log data for an alert in Health Log Analytics](https://www.servicenow.com/docs/mlNe4k~gKs13kKcwOs9dEQ "View a chart of the frequency of anomalous log lines and the associated log data on the Log Viewer.")

  View a chart of the frequency of anomalous log lines and the associated log data.
* [Define, save, and share a log data search](https://www.servicenow.com/docs/EfIvw5TWHaNaqJxf9X_ANA "Define, save, and share searches of log data to help determine the causes of Log Analytics alerts.")

  Fine-tune the search query to help determine the causes of the issue, and save and share useful searches.
* [Use or modify a saved log data search in Health Log Analytics](https://www.servicenow.com/docs/E_VCBTiCqsPSIlRe71ANSQ "Use a saved search of log data to better understand the causes of an alert. As the owner of a saved search, you can modify the search values and save your changes.")

  Use a saved search. As the owner of a saved search, you can modify the search values and save your changes.
* [Filter search results on the Log Viewer in Health Log Analytics](https://www.servicenow.com/docs/YHhho2ZwUIn12tzyQMoX5g "Apply filters on the Log Viewer to show only your desired data.")

  Apply filters to show only the data you want to view.
* [Customize the Log Viewer table in Health Log Analytics](https://www.servicenow.com/docs/2qwqcJq7hpYycUk~ZgXjzA "Add or remove columns in the Log viewer table to show only the data you want to view.")

  Add or remove columns in the table to show only the data you want to view.
{#hla-op-logs-log-viewer-concept-sow__ul_xhr_13x_f2c}
**Related concepts**   

* [Analyze log lines to identify an alert root cause](https://www.servicenow.com/docs/mX_12iVn5JTgym9vDKoPtA "When Health Log Analytics identifies an anomaly, viewing the logs that surround the anomaly provides clues about the state of faulting systems. This information can help you narrow down the root cause of an alert.")