Set up an Amazon Data Firehose integration for Health Log Analytics
Set up an integration to stream log data from Amazon Data Firehose directly to the ServiceNow datacenter, where it’s queued for Health Log Analytics processing. There’s no need to store AWS keys on your ServiceNow instance.
Before you begin
Set up MID-less log streaming via ITOM Gateway. Choose the deployment method based on your expected log volume. For more information, see MID-less log streaming via ITOM Gateway in Health Log Analytics.
As an alternative to the provided procedure, set up a MID-less integration for HLA from an AI-enabled MCP Client. For more information, see MID-less log ingestion for HLA from an MCP Client.
Role required: evt_mgmt_admin
Procedure
-
Navigate to Workspaces > Service Operations Workspace.
-
From the navigation pane, select the AIOps configuration center icon [Omitted image "icon-itom-aiops-config.png"] Alt text: ITOM AIOps configuration center icon.
The ITOM AIOps configuration center page appears. The configuration center is a centralized workspace. Use it to configure and manage AIOps features from a single place.
-
From the Integrate section, under Integrations, select Add integration.
The Integrations Launchpad appears.
-
In the Browse integrations tab, enter
Firehosein the search field. -
Select the Amazon Data Firehose (MID-less) integration tile.
Note: If you start an integration setup before meeting all prerequisites, a message appears. You can cancel the setup and complete the prior requirements first. Alternatively, you can continue in draft mode and complete the requirements later. Note that you can't activate the integration until you have completed all the prerequisites.
-
On the Provide details form, fill in the fields.
For a description of the fields, see Amazon Data Firehose integration configuration fields.
-
Select Next.
-
Follow one of the procedures provided on the Set-up instruction screen to install the integration in AWS.
You can perform the installation procedure using either AWS CloudFormation or the AWS Management Console. Both methods require the same input. The appropriate choice depends on your requirements and the size of your deployment:
- Use AWS CloudFormation when you need automation, repeatability, and infrastructure-as-code benefits. It's best for deploying standardized configurations across multiple environments. AWS CloudFormation prompts for input automatically.
- Use the AWS Management Console when you need manual setups or quick configurations without automation. Before you perform either of these procedures, copy the access token, the ServiceNow endpoint URL, and the integration ID to the clipboard. You need these values during the installation process.
-
Do one of the following.
-
If you completed all the prerequisites before starting the configuration, activate the integration either with or without AI-powered capabilities. Select the appropriate option.
-
Activate with AI enables AI-powered automatic parsing and mapping of log data to service instances and components for contextual alerts.
When the integration is activated successfully, the Overview tab is displayed. ServiceNow Otto for ITOM collects and analyzes log data. An AI icon indicates that AI is active.
-
Activate activates the integration without AI-powered mapping. The integration is activated and the Overview tab is displayed. On the Integrations Launchpad, the integration tile is available in the Installed integrations tab.
-
-
If you didn't complete all the prior requirements, select Save draft.
The system saves the integration as a draft in the Integrations Launchpad Installed integrations tab, under Waiting for your action. At a later time, complete the prerequisites and activate the installation. For more information, see Activate a draft integration in Health Log Analytics.
-
What to do next
On the Overview tab, do the following:
- Use the displayed information to refine how Health Log Analytics reads the log data. For more information, see Review log streaming data and adjust integration settings in Health Log Analytics.
- Use the More options menu ([Omitted image "more-options.png"] Alt text: More options menu icon.) to open the Data Input Mapping, Source Type Structures, or Log Sources pages with context from the integration. If your log data is not properly mapped, structured, or sourced, go back and adjust the configuration. If the Service Operations Workspace Log Analytics application is installed, the More options menu also provides direct access to the Log Viewer. Use the Log Viewer to review raw log messages ingested by the integration. For more information, see:
If you activated the integration with AI, verify that AI correctly auto-mapped log data to service instances and components. To do this, select View mapping under Log context mapping. You can override the AI mapping by selecting a different log field from each list. For more information, see Map logs to service instances, components, source types.
Parent Topic:MID-less integrations for Health Log Analytics
---
title: Set up an Amazon Data Firehose integration for Health Log Analytics
description: Set up an integration to stream log data from Amazon Data Firehose directly to the ServiceNow datacenter, where it’s queued for Health Log Analytics processing. There’s no need to store AWS keys on your ServiceNow instance.
locale: en-US
canonical_url: https://www.servicenow.com/docs/r/it-operations-management/health-log-analytics/il-connector-hla-firehose.html
release: brazil
product: Health Log Analytics
classification: health-log-analytics
topic_type: task
last_updated: "2026-09-10"
reading_time_minutes: 5
keywords: [AWS Firehose, data input, integration, MID-less, configuration, ServiceNow, Health Log Analytics, HLA]
breadcrumb: [MID-less integrations, Set up integrations from Integrations Launchpad, Set up HLA on your instance, Configuring, Health Log Analytics, ITOM AIOps, IT Operations Management]
---
# Set up an Amazon Data Firehose integration for Health Log Analytics
Set up an integration to stream log data from Amazon Data Firehose directly to the ServiceNow datacenter, where it’s queued for Health Log Analytics processing. There’s no need to store AWS keys on your ServiceNow instance.
## Before you begin
Set up MID-less log streaming via ITOM Gateway. Choose the deployment method based on your expected log volume. For more information, see [MID-less log streaming via ITOM Gateway in Health Log Analytics](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/it-operations-management/health-log-analytics/hla-midless-streaming.md).
As an alternative to the provided procedure, set up a MID-less integration for HLA from an AI-enabled MCP Client. For more information, see [MID-less log ingestion for HLA from an MCP Client](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/it-operations-management/itom-mcp-server-hla-ingest.md).
Role required: evt\_mgmt\_admin
## Procedure
1. Navigate to **Workspaces** > **Service Operations Workspace**.
2. From the navigation pane, select the AIOps configuration center icon \[Omitted image "icon-itom-aiops-config.png"\] Alt text: ITOM AIOps configuration center icon.
The ITOM AIOps configuration center page appears. The configuration center is a centralized workspace. Use it to configure and manage AIOps features from a single place.
3. From the Integrate section, under Integrations, select **Add integration**.
The Integrations Launchpad appears.
4. In the **Browse integrations** tab, enter `Firehose` in the search field.
5. Select the Amazon Data Firehose \(MID-less\) integration tile.
**Note:** If you start an integration setup before meeting all prerequisites, a message appears. You can cancel the setup and complete the prior requirements first. Alternatively, you can continue in draft mode and complete the requirements later. Note that you can't activate the integration until you have completed all the prerequisites.
6. On the **Provide details** form, fill in the fields.
For a description of the fields, see [Amazon Data Firehose integration configuration fields](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/it-operations-management/health-log-analytics/il-connector-hla-firehose-fields.md).
7. Select **Next**.
8. Follow one of the procedures provided on the **Set-up instruction** screen to install the integration in AWS.
You can perform the installation procedure using either AWS CloudFormation or the AWS Management Console. Both methods require the same input. The appropriate choice depends on your requirements and the size of your deployment:
- Use AWS CloudFormation when you need automation, repeatability, and infrastructure-as-code benefits. It's best for deploying standardized configurations across multiple environments. AWS CloudFormation prompts for input automatically.
- Use the AWS Management Console when you need manual setups or quick configurations without automation.
Before you perform either of these procedures, copy the access token, the ServiceNow endpoint URL, and the integration ID to the clipboard. You need these values during the installation process.
9. Do one of the following.
- If you completed all the prerequisites before starting the configuration, activate the integration either with or without AI-powered capabilities. Select the appropriate option.
- **Activate with AI** enables AI-powered automatic parsing and mapping of log data to service instances and components for contextual alerts.
When the integration is activated successfully, the **Overview** tab is displayed. ServiceNow Otto for ITOM collects and analyzes log data. An AI icon indicates that AI is active.
- **Activate** activates the integration without AI-powered mapping. The integration is activated and the **Overview** tab is displayed.
On the Integrations Launchpad, the integration tile is available in the **Installed integrations** tab.
- If you didn't complete all the prior requirements, select **Save draft**.
The system saves the integration as a draft in the Integrations Launchpad **Installed integrations** tab, under **Waiting for your action**. At a later time, complete the prerequisites and activate the installation. For more information, see [Activate a draft integration in Health Log Analytics](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/it-operations-management/health-log-analytics/il-connector-hla-activate-draft.md).
## What to do next
On the **Overview** tab, do the following:
- Use the displayed information to refine how Health Log Analytics reads the log data. For more information, see [Review log streaming data and adjust integration settings in Health Log Analytics](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/it-operations-management/health-log-analytics/il-connector-overview-tab.md).
- Use the More options menu \(\[Omitted image "more-options.png"\] Alt text: More options menu icon.\) to open the **Data Input Mapping**, **Source Type Structures**, or **Log Sources** pages with context from the integration. If your log data is not properly mapped, structured, or sourced, go back and adjust the configuration. If the Service Operations Workspace Log Analytics application is installed, the More options menu also provides direct access to the **Log Viewer**. Use the **Log Viewer** to review raw log messages ingested by the integration. For more information, see:
- [Log data auto-mapping and mapping](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/it-operations-management/health-log-analytics/hla-data-input-automapping.md)
- [Source type structure adjustment](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/it-operations-management/health-log-analytics/hla-source-type-structure-adjustment.md)
- [Review alert-related logs on the Log Viewer](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/it-operations-management/health-log-analytics/hla-op-logs-log-viewer-concept.md)
If you activated the integration with AI, verify that AI correctly auto-mapped log data to service instances and components. To do this, select **View mapping** under **Log context mapping**. You can override the AI mapping by selecting a different log field from each list. For more information, see [Map logs to service instances, components, source types](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/it-operations-management/health-log-analytics/il-connector-hla-map-business-context.md).
**Parent Topic:**[MID-less integrations for Health Log Analytics](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/it-operations-management/health-log-analytics/hla-mid-less-integrations-concept.md)
| title | Set up an Amazon Data Firehose integration for Health Log Analytics |
| description | Set up an integration to stream log data from Amazon Data Firehose directly to the ServiceNow datacenter, where it’s queued for Health Log Analytics processing. There’s no need to store AWS keys on your ServiceNow instance. |
| locale | en-US |
| canonical_url | https://www.servicenow.com/docs/r/it-operations-management/health-log-analytics/il-connector-hla-firehose.html |
| release | brazil |
| product | Health Log Analytics |
| classification | health-log-analytics |
| topic_type | task |
| last_updated | 2026-09-10 |
| reading_time_minutes | 5 |
| keywords | AWS Firehosedata inputintegrationMID-lessconfigurationServiceNowHealth Log AnalyticsHLA |
| breadcrumb | MID-less integrationsSet up integrations from Integrations LaunchpadSet up HLA on your instanceConfiguringHealth Log AnalyticsITOM AIOpsIT Operations Management |