Health Log Analytics architecture
concept brazil Updated Sep 10, 2026 1 min read hla-architecture.md
Health Log Analytics collects logs streaming into your ServiceNow instance from endpoints or data lakes, such as Splunk and Elasticsearch.
The ServiceNow instance receives the logs either via a MID Server connector instance or via MID-less Ingest, which supports integration with services such as Amazon Data Firehose. Health Log Analytics identifies and triages anomalies in your log data using unsupervised machine-learning (ML) models. It then groups the anomalies together and applies further algorithms to help identify the root cause of the issue.
[Omitted image "MMASSET0021014-health-log-analysis-landing.svg"] Alt text: Health Log Analytics scaled architecture.
Keywords ServiceNowHealth Log AnalyticsHLAarchitecturescaled
24 lines · 1.4 KB
--- title: Health Log Analytics architecture description: Health Log Analytics collects logs streaming into your ServiceNow instance from endpoints or data lakes, such as Splunk and Elasticsearch. locale: en-US canonical_url: https://www.servicenow.com/docs/r/it-operations-management/health-log-analytics/hla-architecture.html release: brazil product: Health Log Analytics classification: health-log-analytics topic_type: concept last_updated: "2026-09-10" reading_time_minutes: 1 keywords: [ServiceNow, Health Log Analytics, HLA, architecture, scaled] breadcrumb: [Exploring, Health Log Analytics, ITOM AIOps, IT Operations Management] --- # Health Log Analytics architecture Health Log Analytics collects logs streaming into your ServiceNow instance from endpoints or data lakes, such as Splunk and Elasticsearch. The ServiceNow instance receives the logs either via a [MID Server](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/servicenow-platform/mid-server-landing.md) connector instance or via MID-less Ingest, which supports integration with services such as Amazon Data Firehose. Health Log Analytics identifies and triages anomalies in your log data using unsupervised machine-learning \(ML\) models. It then groups the anomalies together and applies further algorithms to help identify the root cause of the issue. \[Omitted image "MMASSET0021014-health-log-analysis-landing.svg"\] Alt text: Health Log Analytics scaled architecture.
| title | Health Log Analytics architecture |
| description | Health Log Analytics collects logs streaming into your ServiceNow instance from endpoints or data lakes, such as Splunk and Elasticsearch. |
| locale | en-US |
| canonical_url | https://www.servicenow.com/docs/r/it-operations-management/health-log-analytics/hla-architecture.html |
| release | brazil |
| product | Health Log Analytics |
| classification | health-log-analytics |
| topic_type | concept |
| last_updated | 2026-09-10 |
| reading_time_minutes | 1 |
| keywords | ServiceNowHealth Log AnalyticsHLAarchitecturescaled |
| breadcrumb | ExploringHealth Log AnalyticsITOM AIOpsIT Operations Management |