Set up a Microsoft Azure Event Hubs integration for Health Log Analytics

Set up an integration for streaming events from Microsoft Azure Event Hubs to your ServiceNow instance.

Before you begin

• Ensure that a MID Server is installed and configured with the Log Ingestion capability enabled. For more information, see MID Server system requirements.
  Important:

  Health Log Analytics does not support IPv6. To work with the application, configure the MID Server to IPv4.
• If the IP address of the MID Server is exposed by network address translation (NAT), a load balancer or a similar device, it must have a public IP address. In the MID Server properties, add a property named mid.public_ip with the public IP address as the value. For more information, see Create a MID Server property.

Role required: evt_mgmt_admin

Procedure

1. Navigate to Workspaces > Service Operations Workspace.
2. From the left pane, select the Integrations Launchpad icon ()
3. In the Browse integrations tab, enter Event Hubs in the search field.
4. Select the relevant Azure Event Hubs integration tile.
   Note:

   If you start an integration setup before meeting all prerequisites, a message appears. You can either cancel the setup and complete the prior requirements first, or continue in draft mode and complete them later. Note that you can't activate the integration until all prerequisites are met.
5. On the Provide details form, fill in the fields and then select Next.
   For a description of the fields, see the Provide details table in Microsoft Azure Event Hubs integration configuration fields.
6. On the Set data retrieval form, fill in the fields.
   For a description of the fields, see the Set data retrieval table in Microsoft Azure Event Hubs integration configuration fields.
7. Optional: Select Advanced settings and fill in the advanced configuration fields.
   For a description of the fields, see the Advanced settings table in Microsoft Azure Event Hubs integration configuration fields.
8. Do one of the following:
   • If you completed all the prerequisites before starting the configuration, select Activate.

     In the pop-up screen, select Test & save to save the integration to the database and test connectivity. If an error is returned, adjust the configuration as suggested in the error message and then try to activate the integration again.

     Once the test is successful, the integration is activated and the Overview tab is displayed. On the Integrations Launchpad, the integration tile is available in the Installed integrations tab.

     Note:

     To test and save the integration without activating it, select the Test & save button at the top of the page.
   • If you didn't complete all the prior requirements, select Save draft.

     The system saves the integration as a draft in the Integrations Launchpad Installed integrations tab, under Waiting for your action. You can complete the prerequisites and activate the installation later. For more information, see the What to do next section.

9. Do one of the following:
   • If you completed all the prerequisites before starting the configuration, select Activate.

     In the pop-up screen, select Test & save to save the integration to the database and test connectivity. If an error is returned, adjust the configuration as suggested in the error message and then try to activate the integration again.

     Once the test is successful, the integration is activated and the Overview tab is displayed. On the Integrations Launchpad, the integration tile is available in the Installed integrations tab.

     Note:

     To test and save the integration without activating it, select the Test & save button at the top of the page.
   • If you didn't complete all the prior requirements, select Save draft.

     The system saves the integration as a draft in the Integrations Launchpad Installed integrations tab, under Waiting for your action. You can complete the prerequisites and activate the installation later. For more information, see the What to do next section.

What to do next

Leverage the information on the Overview tab to refine how HLA reads the log data. For more information, see Review log data streaming status and sources of an integration.

Tip:

Use the More options menu () to open the Data Input Mapping, Source Type Structures, or Log Sources pages with context from the integration. If your log data is not properly mapped, structured, or sourced, go back and adjust the configuration. If the Service Operations Workspace Log Analytics application is installed, the More options menu also provides direct access to the Log Viewer, where you can review raw log messages ingested by the integration.

For more information, see:

• Log data auto-mapping and mapping
• Source type structure adjustment
• Review logs on the Log Viewer

If you saved the integration as a draft, perform these steps to activate it later:

1. Complete all the prior requirements.
2. In the Integrations Launchpad Installed integrations tab, under Waiting for your action, locate and select the integration tile.
3. On the configuration screen, select Activate.

   Select Test & save to save the integration to the database and test connectivity. If an error is returned, adjust the configuration as suggested in the error message and then try to activate the integration again.

   Once the test is successful, the integration is activated and the Overview tab is displayed. The integration tile is available in the Installed integrations tab on the Integrations Launchpad.

   Note:

   To test and save the integration without activating it, select the Test & save button at the top of the page.

• Microsoft Azure Event Hubs integration configuration fields
  Description of the fields on the Microsoft Azure Event Hubs integration configuration forms for Health Log Analytics.