Customize the Log Viewer table in Health Log Analytics
Add or remove columns in the Log viewer table to show only the data you want to view.
Before you begin
Role required: evt_mgmt_operator, or evt_mgmt_admin
About this task
This feature is supported in the Health Log Analytics application, Version 20.0.11 - July 2021, and the Health Log Analytics Viewer application, Version 20.0.4 - July 2021, available from the ServiceNow Store.
Procedure
-
Open the Log Viewer using one of the following methods:
- Navigate to Workspaces > Service Operations Workspace and select the Log Viewer icon ([Omitted image "icon-log-viewer-sow.png"] Alt text: Log Viewer icon.).
- While viewing log entries for an alert on the Surrounding logs tab, select Log Viewer.
-
Select the filter icon ([Omitted image "icon-lv-filters-sow.png"] Alt text: Filter icon.) to display the Filters pane.
The Selected fields list includes the fields that currently display as columns in the Log viewer table. By default, the table includes the following columns: Application service, Component, Host, Level, Message, Raw message, and Time. The Available fields include all remaining fields that the system has extracted from the log.
In the Service Operations Workspace Log Analytics application, Version 21.2.7 - November 2022 and later, available from the ServiceNow Store, the Log message column is added. The Raw message column no longer displays by default.
You can add the Raw message column to the table by selecting it from the Filters pane.
-
Add or remove columns in the Log viewer table.
-
To add a column to the table, select the field of the same name in the Available fields list and then select the add icon ([Omitted image "icon-add-sow.png"] Alt text: Add icon.).
The added field displays as a column in the table. It is now listed in the Selected fields list.
-
To remove a column, select the field of the same name in the Selected fields list and then select the remove icon ([Omitted image "icon-remove-sow.png"] Alt text: Remove icon.).
The corresponding column is removed from the table. The removed field is added to the Available fields list.
If you have filtered the data for specific values in a field, that data still displays even when the field is no longer selected. For more information about filtering data, see Filter search results on the Log Viewer in Health Log Analytics.
Note: The Time column can't be removed from the table.
-
-
Adjust the maximum number of characters per field in the table.
-
Navigate to Health Log Analytics > Health Log Analytics Administration > System Properties.
-
Open the sn_occ.log_viewer.max.characters property record.
-
In the Value field, edit the default value.
-
Select Update.
-
Result
The Log viewer table shows the customized view from the current session onward until you change your preferences.
---
title: Customize the Log Viewer table in Health Log Analytics
description: Add or remove columns in the Log viewer table to show only the data you want to view.
locale: en-US
canonical_url: https://www.servicenow.com/docs/r/australia/it-operations-management/health-log-analytics/hla-op-log-viewer-table-sow.html
release: australia
product: Health Log Analytics
classification: health-log-analytics
topic_type: task
last_updated: "2026-09-10"
reading_time_minutes: 2
keywords: [customize table, Log Viewer table, add columns, remove columns, Selected fields, Available fields, table columns, field display, column customization, table configuration, character limit, max characters, system properties]
breadcrumb: [Review alert-related logs on the Log Viewer, Analyzing and resolving alerts, Health Log Analytics, ITOM AIOps, IT Operations Management]
---
# Customize the Log Viewer table in Health Log Analytics
Add or remove columns in the **Log viewer** table to show only the data you want to view.
## Before you begin
Role required: evt\_mgmt\_operator, or evt\_mgmt\_admin
## About this task
This feature is supported in the Health Log Analytics application, Version 20.0.11 - July 2021, and the Health Log Analytics Viewer application, Version 20.0.4 - July 2021, available from the [ServiceNow Store](https://store.servicenow.com/sn_appstore_store.do#!/store/home).
## Procedure
1. Open the **Log Viewer** using one of the following methods:
- Navigate to **Workspaces** > **Service Operations Workspace** and select the Log Viewer icon \(\[Omitted image "icon-log-viewer-sow.png"\] Alt text: Log Viewer icon.\).
- While viewing log entries for an alert on the **Surrounding logs** tab, select **Log Viewer**.
2. Select the filter icon \(\[Omitted image "icon-lv-filters-sow.png"\] Alt text: Filter icon.\) to display the **Filters** pane.
The Selected fields list includes the fields that currently display as columns in the **Log viewer** table. By default, the table includes the following columns: Application service, Component, Host, Level, Message, Raw message, and Time. The Available fields include all remaining fields that the system has extracted from the log.
In the Service Operations Workspace Log Analytics application, Version 21.2.7 - November 2022 and later, available from the [ServiceNow Store](https://store.servicenow.com/sn_appstore_store.do#!/store/home), the Log message column is added. The Raw message column no longer displays by default.
You can add the Raw message column to the table by selecting it from the **Filters** pane.
3. Add or remove columns in the **Log viewer** table.
- To add a column to the table, select the field of the same name in the Available fields list and then select the add icon \(\[Omitted image "icon-add-sow.png"\] Alt text: Add icon.\).
The added field displays as a column in the table. It is now listed in the Selected fields list.
- To remove a column, select the field of the same name in the Selected fields list and then select the remove icon \(\[Omitted image "icon-remove-sow.png"\] Alt text: Remove icon.\).
The corresponding column is removed from the table. The removed field is added to the Available fields list.
If you have filtered the data for specific values in a field, that data still displays even when the field is no longer selected. For more information about filtering data, see [Filter search results on the Log Viewer in Health Log Analytics](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/it-operations-management/health-log-analytics/hla-op-log-viewer-filter-sow.md).
**Note:** The Time column can't be removed from the table.
4. Adjust the maximum number of characters per field in the table.
1. Navigate to **Health Log Analytics** > **Health Log Analytics Administration** > **System Properties**.
2. Open the **sn\_occ.log\_viewer.max.characters** property record.
3. In the **Value** field, edit the default value.
4. Select **Update**.
## Result
The **Log viewer** table shows the customized view from the current session onward until you change your preferences.
| title | Customize the Log Viewer table in Health Log Analytics |
| description | Add or remove columns in the Log viewer table to show only the data you want to view. |
| locale | en-US |
| canonical_url | https://www.servicenow.com/docs/r/australia/it-operations-management/health-log-analytics/hla-op-log-viewer-table-sow.html |
| release | australia |
| product | Health Log Analytics |
| classification | health-log-analytics |
| topic_type | task |
| last_updated | 2026-09-10 |
| reading_time_minutes | 2 |
| keywords | customize tableLog Viewer tableadd columnsremove columnsSelected fieldsAvailable fieldstable columnsfield displaycolumn customizationtable configurationcharacter limitmax characterssystem properties |
| breadcrumb | Review alert-related logs on the Log ViewerAnalyzing and resolving alertsHealth Log AnalyticsITOM AIOpsIT Operations Management |