Configure a REST API data input in Health Log Analytics manually

Set up a REST API data input for streaming log data to your ServiceNow instance.

Before you begin

Verify that a MID Server is installed and configured with the Log Ingestion capability enabled. For more information, see MID Server system requirements.

[Omitted image "hla-mid-log-ingestion.png"] Alt text: MID Server configuration with Log Ingestion capability enabled.

Important: Health Log Analytics does not support IPv6. To work with the application, configure the MID Server to IPv4.

On the MID Web Server Context form, in the Execute on field, select Specific MID Server and not the cluster option. In the MID Server field, select the specific MID Server to which the log data is pulled.
Unless the MID Server and external clients are on the same network, verify that the MID Server has a public IP address. This is required when its IP is exposed through network address translation (NAT), a load balancer, or a similar device. The public IP address enables external clients, such as Filebeat agents located outside its network, to reach the MID Server. Private IP addresses aren't routable over the internet. Without a public IP, external clients can't connect to the MID Server even if they are configured with its address. In the MID Server properties, add a property named mid.public_ip with the public IP address as the value. For more information, see Create a MID Server property. If the MID Server and external clients are on the same network, connections can be made using the private IP address.

Role required: evt_mgmt_admin

Procedure

Navigate to All > Health Log Analytics > Data Input > Data Inputs.
On the Data Inputs page, select New.
Choose the REST API data input.
On the form, fill in the fields.

For a description of the fields, see REST API data input configuration fields.
Select Save.

Health Log Analytics adds the data input record to the Data Inputs table.
Instruct your API client to send log messages to the MID Server.
1. In the API client, configure a request with the following parameters:
  - HTTP Method: POST.
  - URL: A URL with the following format: http://(MID_SERVER_IP):(MID_WEB_SERVER_PORT)/api/mid/hla/raw. The format of the URL for a secure connection is: https://(MID_SERVER_IP):(MID_WEB_SERVER_PORT)/api/mid/hla/raw Here /aps/mid/hla/raw is the endpoint. Replace (MID_SERVER_IP) with the IP address of the MID Server and (MID_WEB_SERVER_PORT) with the port of the MID Web Server.
  - Authentication: The required authentication credentials. For example, Basic authentication (username and password).
    
    Note: The authentication method must be the same as the method configured on the MID Web Server.
  - Headers: Set the Content-Type header to match your payload format.
    - For JSON: application/json.
    - For raw text: text/plain.
  - Body: The logs payload in JSON or raw text.
2. Send the request.
  
  A successful response indicates that the MID Server has received the payload. When the MID Server has processed the log messages, the data input streams them to your ServiceNow instance using the REST protocol.

Parent Topic:Configuring data inputs for Health Log Analytics manually

title	Configure a REST API data input in Health Log Analytics manually
description	Set up a REST API data input for streaming log data to your ServiceNow instance.
locale	en-US
canonical_url	https://www.servicenow.com/docs/r/australia/it-operations-management/health-log-analytics/hla-data-input-rest-api.html
release	australia
product	Health Log Analytics
classification	health-log-analytics
topic_type	task
last_updated	2026-09-10
reading_time_minutes	2
keywords	ServiceNowHealth Log AnalyticsHLAmanualdata inputconfiguration
breadcrumb	Manual data input configurationSet up data inputs manuallySet up HLA on your instanceConfiguringHealth Log AnalyticsITOM AIOpsIT Operations Management