Configure a REST API data input for streaming log data to your ServiceNow instance in JSON format.

Before you begin

  • Ensure that a MID Server is installed and configured with the Log Ingestion capability enabled. For more information, see MID Server system requirements.

    MID Server configuration with Log Ingestion capability enabled.

    Important: Health Log Analytics does not support IPv6. To work with the application, configure the MID Server to IPv4.
  • Ensure that a MID Web Server is set up for the MID Server.

    For more information, see Configure the MID Web Server extension.

    On the MID Web Server Contexts form, in the Executing on field, select Specific MID Server and not the cluster option. In the MID Server field, select the specific MID Server to which the log data is pushed.

  • If the IP address of the MID Server is exposed by network address translation (NAT), a load balancer or a similar device, it must have a public IP address. In the MID Server properties, add a property named mid.public_ip with the public IP address as the value. For more information, see Create a MID Server property.

Role required: evt_mgmt_admin

About this task

The extension handles log messages that are sent to the MID Server by an external log source. The MID Server processes the messages and then passes them to your instance.

To stream log messages to the MID Server, the URL must have the format http://{MID_SERVER_IP}:{MID_WEB_SERVER_PORT}/api/mid/hla/raw, where /api/mid/hla/raw is the endpoint.

Procedure

  1. Navigate to All > Health Log Analytics > Data Input > Data Inputs.
  2. On the Data Inputs page, select New.
  3. Choose the REST API data input.
  4. On the form, fill in the fields.
    For a description of the fields, see REST API data input configuration fields.
    Note: REST API integrations support only UTF-8 encoding for incoming data.
  5. Select Submit.

Result

The data input configuration process is complete. Health Log Analytics adds the data input record to the Data Inputs table and attaches the configuration file to the data input record. The data input starts streaming log data in JSON format to your ServiceNow instance.
Note: If the HLA engine is down and data has stopped streaming, a notification appears at the top of the data input configuration page. When this happens, contact ServiceNow support.

What to do next

Ensure that the data input is streaming data.