# ELK integration with Service now

**URL:** <https://discuss.elastic.co/t/elk-integration-with-service-now/251770>\
**Category:** Elasticsearch\
**Created:** [October 12, 2020, 1:33pm UTC](https://discuss.elastic.co/t/elk-integration-with-service-now/251770 "2020-10-12T13:33:23Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![Ganesh2303](https://avatars.discourse-cdn.com/v4/letter/g/57b2e6/32.png) [@Ganesh2303](https://discuss.elastic.co/u/Ganesh2303)\
**Post date:** [October 12, 2020, 1:33pm UTC](https://discuss.elastic.co/t/elk-integration-with-service-now/251770/1 "2020-10-12T13:33:23Z")

</div>

HI Team,  
I hope everyone safe on this pandemic situation.

My question is how to integrate ELK with ServiceNow.

Currently, we are using version 6.4 and task is if any error code in logs get indexed in ES or logs are failed to get index more than 10 min from a server in ES. It should trigger an alert at servicenow.

How could i achieve this in REST API call and give me some guide on it.

---

<div class="post-metadata">

**Author:** ![Ganesh2303](https://avatars.discourse-cdn.com/v4/letter/g/57b2e6/32.png) [@Ganesh2303](https://discuss.elastic.co/u/Ganesh2303)\
**Post date:** [October 13, 2020, 8:01am UTC](https://discuss.elastic.co/t/elk-integration-with-service-now/251770/3 "2020-10-13T08:01:49Z")

</div>

@kavierkoo Thanks for the reply.

My first scenario is when they application server failed to push log at last 15 min mean i need to trigger alert in servicenow with that server detail.

Currently, we are using Rsyslog as log forwarder in application server.

How can we achieve that?

---

<div class="post-metadata">

**Author:** ![Ganesh2303](https://avatars.discourse-cdn.com/v4/letter/g/57b2e6/32.png) [@Ganesh2303](https://discuss.elastic.co/u/Ganesh2303)\
**Post date:** [November 4, 2020, 1:40pm UTC](https://discuss.elastic.co/t/elk-integration-with-service-now/251770/5 "2020-11-04T13:40:38Z")

</div>

HI Anyone can help me on this how to proceed this issue

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [December 2, 2020, 1:40pm UTC](https://discuss.elastic.co/t/elk-integration-with-service-now/251770/6 "2020-12-02T13:40:40Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.