---
sourceDocument: Yokohama IT Operations Management
sourceDocumentLink: https://www.servicenow.com/docs/r/yokohama/it-operations-management

 Release :

    - yokohama

ft:locale :

    - en-US

ft:publication_title :

    - Yokohama IT Operations Management

ft:clusterId :

    - itom

bundleId :

    - itom

workflow :

    - Technology


---

# Reviewing alert logs on the Log viewer

# Reviewing alert logs
on the Log viewer {#ariaid-title1}

* Release version: Yokohama
* 
* Updated January 30, 2025
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read

The Log viewer tab lets you browse the logs for an alert by timestamp or time range, and visualize anomaly frequency within a specific time period. Customizing the displayed data and adjusting time
filters enables you to better understand the framework in which the anomaly occurred, helping you find the root cause faster.

The Log viewer presents all data connected with the Log Analytics alert. It shows the query that relates to the anomaly, the selected component, and the appropriate time filter. You can personalize the displayed data, and manually adjust the time range without
affecting the other settings. The applied filters appear in the Filters pane. You can add or remove filters as needed to show only the data you want to view.

The Log viewer displays a chart of the frequency of anomalous log lines during one minute before and one minute after the Log Analytics alert and lists the associated log data. This information helps you identify trends leading up to and following the event, providing context for root cause analysis.

As you analyze the logs for an alert on the Log viewer, you can modify the query to fine-tune the search, save useful searches, and share them with others. For a description of the information displayed in
the Log viewer table, see [Log viewer table fields](https://www.servicenow.com/docs/xrz_H6qydIql_xgud1q5ng "This section describes the information displayed in the Log viewer table.").  
You can perform the following tasks on the Log viewer:

* [View log data for an alert](https://www.servicenow.com/docs/Ip3q~x0I~VrXC2ArjYyBMw "View a chart of the frequency of anomalous log lines and the associated log data on the Log viewer.")

  View a chart of the frequency of anomalous log lines and the associated log data.
* [Define, save, and share a search of log data](https://www.servicenow.com/docs/6PlOdhIJn7_Ush8nKwKVkQ "Define, save, and share searches of log data to help determine the causes of Log Analytics alerts.")

  Fine-tune the search query to help determine the causes of the issue, and save and share useful searches.
* [Use or modify a saved search](https://www.servicenow.com/docs/y2EwCUT35I9JafCCuseDBA "Use a saved search of log data to better understand the causes of an alert. As the owner of a saved search, you can modify the search values and save your changes.")

  Use a saved search. As the owner of a saved search, you can modify the search values and save your changes.
* [Filter search results on the Log viewer](https://www.servicenow.com/docs/abKqaVgr3YIn~YoFHa8q9Q "Apply filters on the Log viewer to show only your desired data.")

  Apply filters to show only the data you want to view.
* [Customize the Log viewer table](https://www.servicenow.com/docs/INX4hBSWTLCazTICsq7~ww "Add or remove columns in the Log viewer table to show only the data you want to view.")

  Add or remove columns in the table to show only the data you want to view.
{#hla-op-logs-log-viewer-concept__ul_rpf_pcx_f2c}

If you discover an important metric in the log data, you can use it to define a new Log Analytics alert rule. For more information, see [Add a Log Analytics alert rule](https://www.servicenow.com/docs/JVsZQdN4JbHz1BYwxASuWw "Define a Log Analytics alert rule when you encounter log data that should generate an alert. The alert rule generates an alert for a specified metric with a threshold that you specify and sets the properties of the generated alert.").
**Related concepts**   

* [Analyzing the logs that surround the anomaly](https://www.servicenow.com/docs/Jq9JQ6DGaBT4doa04HaQjg "When Health Log Analytics identifies an anomaly, viewing the logs that surround the anomaly provides clues about the state of faulting systems. This information can help you narrow down the root cause of an alert.")