Add a log correlator to identify related alerts

task brazil Updated Sep 10, 2026 1 min read hla-op-correlator-define.md

In Health Log Analytics, detect related alerts in log data by adding log correlators. The base system includes several log correlators and you can define custom log correlators.

Before you begin

Role required: evt_mgmt_operator or evt_mgmt_admin

About this task

For information about the types and functions of log correlators, see Log correlators for identifying related alerts.

Procedure

Use one of the following methods to add a log correlator.

Option	Procedure
Add a log correlator for a specific log source	Navigate to Health Log Analytics > Log Anomaly Detection > Log Correlators. The list of existing log correlators opens. Select the name of a log correlator. The names appear in the Correlation indicator column. Select New.
Add a log correlator that applies either to all log sources or to only those log sources that become active after you define this log correlator	Navigate to Health Log Analytics > Data Input > Log Sources. Select the name of the log source. The Log correlators related list displays the list of existing log correlators that analyze log data from the selected log source. On the Log correlators tab, select New.

Option

Procedure

Add a log correlator for a specific log source

Navigate to Health Log Analytics > Log Anomaly Detection > Log Correlators. The list of existing log correlators opens.
Select the name of a log correlator. The names appear in the Correlation indicator column.
Select New.

Add a log correlator that applies either to all log sources or to only those log sources that become active after you define this log correlator

Navigate to Health Log Analytics > Data Input > Log Sources.
Select the name of the log source.

The Log correlators related list displays the list of existing log correlators that analyze log data from the selected log source.

On the Log correlators tab, select New.

2. Fill in the Log correlator form.

For a description of the fields, see [Log correlators form fields](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/it-operations-management/health-log-analytics/hla-log-correlators-form-ref.md).

Select Active and then click Submit.

Parent Topic:Log correlators for identifying related alerts

Keywords add log correlatordefine log correlatorcreate log correlatorcustom log correlatorslog correlator configurationcorrelator setup

75 lines · 3.0 KB Wrap lines

---
title: Add a log correlator to identify related alerts
description: In Health Log Analytics, detect related alerts in log data by adding log correlators. The base system includes several log correlators and you can define custom log correlators.
locale: en-US
canonical_url: https://www.servicenow.com/docs/r/it-operations-management/health-log-analytics/hla-op-correlator-define.html
release: brazil
product: Health Log Analytics
classification: health-log-analytics
topic_type: task
last_updated: "2026-09-10"
reading_time_minutes: 1
keywords: [add log correlator, define log correlator, create log correlator, custom log correlators, log correlator configuration, correlator setup]
breadcrumb: [Use log correlators to find related alerts, Analyzing and resolving alerts, Health Log Analytics, ITOM AIOps, IT Operations Management]
---

# Add a log correlator to identify related alerts

In Health Log Analytics, detect related alerts in log data by adding log correlators. The base system includes several log correlators and you can define custom log correlators.

## Before you begin

Role required: evt\_mgmt\_operator or evt\_mgmt\_admin

## About this task

For information about the types and functions of log correlators, see [Log correlators for identifying related alerts](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/it-operations-management/health-log-analytics/hla-op-correlator-what-is-a.md).

## Procedure

1.  Use one of the following methods to add a log correlator.

<table id="choicetable_aks_4jj_dpb"><thead><tr><th align="left" id="d391809e105">

Option

</th><th align="left" id="d391809e108">

Procedure

</th></tr></thead><tbody><tr><td id="d391809e114">

**Add a log correlator for a specific log source**

</td><td>

1.  Navigate to **Health Log Analytics** &gt; **Log Anomaly Detection** &gt; **Log Correlators**. The list of existing log correlators opens.
2.  Select the name of a log correlator. The names appear in the **Correlation indicator** column.
3.  Select **New**.


</td></tr><tr><td id="d391809e153">

**Add a log correlator that applies either to all log sources or to only those log sources that become active after you define this log correlator**

</td><td>

1.  Navigate to **Health Log Analytics** &gt; **Data Input** &gt; **Log Sources**.
2.  Select the name of the log source.

The Log correlators related list displays the list of existing log correlators that analyze log data from the selected log source.

3.  On the **Log correlators** tab, select **New**.


</td></tr></tbody>
</table>2.  Fill in the Log correlator form.

    For a description of the fields, see [Log correlators form fields](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/it-operations-management/health-log-analytics/hla-log-correlators-form-ref.md).

3.  Select **Active** and then click **Submit**.


**Parent Topic:**[Log correlators for identifying related alerts](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/it-operations-management/health-log-analytics/hla-op-correlator-what-is-a.md)