Set up integrations for Health Log Analytics from the Integrations Launchpad

  • 릴리스 버전: Australia
  • 업데이트 날짜 2026년 03월 12일
  • 소요 시간: 6분

    • Set up integrations from the Event Management Integrations Launchpad in Service Operations Workspace for ITOM.

    Integrations Launchpad

    The Integrations Launchpad tool provides a unified interface for convenient integration with connectors that feed raw log messages from external sources into your ServiceNow instance for processing and analysis. For more information, see Integrations Launchpad in Service Operations Workspace for ITOM.

    Integrations for Health Log Analytics

    The Integrations Launchpad enables the following integrations for Health Log Analytics:

    Pull integrations
    These integrations pull log data from external data sources and stream the data to your instance, typically via a MID Server. Select an integration in the table to open a page with the setup procedure.
    표 1. Pull integrations
    Integration Description
    Elasticsearch Streams log data from Elasticsearch indices to your instance.
    ServiceNow System Logs Retriever Sends log data from the ServiceNow System Log table to the Health Log Analytics AI engine.

    This integration doesn't run on a MID Server.

    주:
    Only a single ServiceNow System Logs Retriever data input can exist in the system, and only users with the admin role can create and configure it.
    Apache Kafka Streams log data from Apache Kafka to your instance.
    Splunk Poller Pulls log data from Splunk to your ServiceNow instance periodically by query.
    Microsoft Azure Log Analytics Streams log data from Microsoft Azure Log Analytics to your instance. The connector points the Health Log Analytics AI engine to a data source in your Microsoft Azure Log Analytics account.
    Microsoft Azure Event Hubs Streams events from Microsoft Azure Event Hubs to your instance.
    Microsoft Azure Event Hubs (MID-less) Streams events from Microsoft Azure Event Hubs to your instance without a MID Server.
    MID Server Collects log messages from the MID Server and streams them to your instance.
    Push integrations
    These integrations connect to external data sources that push log data to your instance, typically via a MID Server. Select an integration in the table to open a page with the setup procedure.
    표 2. Push integrations
    Integration Description
    UDP Sends raw log messages to your instance directly over a UDP socket.
    TCP Sends raw log messages to your instance directly over a TCP/SSL socket.
    REST API Streams log data to your instance in JSON format.
    GCP PubSub Receives log messages that were published to a Google Cloud Pub/Sub topic and streams them to your instance.
    Splunk UDP Streams log messages to your ServiceNow instance over the UDP transport protocol using a Splunk heavy forwarder.
    Splunk TCP Streams log messages to your ServiceNow instance over the TCP transport protocol using a Splunk heavy forwarder.
    Amazon Data Firehose Streams log messages from Amazon Data Firehose directly to the collector service in ITOM Gateway, where it’s queued for Health Log Analytics processing.

    This integration doesn't run on a MID Server.
    Cribl Enables Health Log Analytics to process Cribl log messages streaming into the ServiceNow instance.
    Edge Delta REST Enable Health Log Analytics to process logs it receives from Edge Delta in a distinct format. These logs stream into the ServiceNow instance via REST.
    Edge Delta TCP Enable Health Log Analytics to process logs it receives from Edge Delta in a distinct format. These logs stream into the ServiceNow instance over the TCP transport protocol.
    Vector Agent Enable Health Log Analytics to process log messages that are streaming into the ServiceNow instance via a Vector Agent.