Using Health Log Analytics

As an operator, you perform the vital function of remediating the alerts that Health Log Analytics generates. Because the artificial intelligence engine generates predictive alerts on emerging IT issues, operators can often remediate an alert before users are affected.

• Take action on a Health Log Analytics alert from the Overview tab
  Start the remediation process from the Overview tab. The Overview tab provides information on alerts, log data that is associated with the anomalous behavior, CIs that generated the triggering metric, and services that are impacted by the alerts.
• Analyzing log lines to identify the root cause of an alert
  When Health Log Analytics identifies an anomaly, viewing the logs that surround the anomaly provides clues about the state of faulting systems. This information can help you to identify the root cause of an alert.
• Viewing the logs for an alert on the Log viewer
  The Log viewer tab enables you to browse the logs by timestamp or time range, to search for particular log text, and to visualize the frequency of anomaly occurrences in a particular time period. If you discover an important metric in the log data, you can use it to define a Log Analytics alert rule.
• Using log correlators to detect relationships in log data
  Log correlators are keys or values in log data that detect correlations between alerts. For example, a log correlator could detect when the interface ID of a particular network device occurs simultaneously in multiple warnings across different service instances.
• Assigning higher or lower significance to an alert in Health Log Analytics
  Label an alert as meaningful or insignificant, or restore normal importance to the metric involved in generating it.
• Add a KB article to a Health Log Analytics alert
  Add your own knowledge base (KB) article to an alert that was generated by Health Log Analytics. For example, you can provide additional information that might help to resolve the underlying issue. Health Log Analytics also uses your knowledge to enhance similar alerts.
• Log anomaly detection
  Health Log Analytics discovers patterns in your log data and learns their unique data behavior. When it finds an anomalous pattern, it sends an event to the ServiceNow® Event Management application. You can use these predictive alerts to handle emerging IT issues before they impact users.
• Reducing noise by using advanced log alert filters
  Advanced alert filters reduce noise by dropping alerts that do not indicate a significant issue.
• Adding, changing, or deleting Log Analytics alert rules
  Add, change, or delete an alert rule that generates an alert for a specified metric.
• Viewing Health Log Analytics system health alerts on the service map
  The ServiceNow Event Management service instance map includes a model of the Health Log Analytics core components and the system health alerts that affect them.
• View the settings of Health Log Analytics system features
  View the settings for all Health Log Analytics system features. These features configure many operations that affect your work. The admin can enable or disable the features.