# Service Now Integration with Elastic plugin Watcher

**URL:** <https://discuss.elastic.co/t/service-now-integration-with-elastic-plugin-watcher/55097>\
**Category:** Elasticsearch\
**Created:** [July 8, 2016, 8:59pm UTC](https://discuss.elastic.co/t/service-now-integration-with-elastic-plugin-watcher/55097 "2016-07-08T20:59:53Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![megaforce1020](https://avatars.discourse-cdn.com/v4/letter/m/ecae2f/32.png) [@megaforce1020](https://discuss.elastic.co/u/megaforce1020)\
**Post date:** [July 8, 2016, 8:59pm UTC](https://discuss.elastic.co/t/service-now-integration-with-elastic-plugin-watcher/55097/1 "2016-07-08T20:59:53Z")

</div>

We are using ELK to monitor the system performance and our application logs. If there is an error in the logs, we want to create an issue in ServiceNow from ELK. Is there a way to do this? Any pointers would help

---

<div class="post-metadata">

**Author:** ![Glen\_Smith](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/glen_smith/32/111656_2.png) [@Glen\_Smith](https://discuss.elastic.co/u/Glen_Smith)\
**Post date:** [July 8, 2016, 9:18pm UTC](https://discuss.elastic.co/t/service-now-integration-with-elastic-plugin-watcher/55097/2 "2016-07-08T21:18:13Z")

</div>

Sure. Use the logstash http output plugin conditional on whatever is your indication that the event is an error.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 5, 2017, 10:36pm UTC](https://discuss.elastic.co/t/service-now-integration-with-elastic-plugin-watcher/55097/3 "2017-07-05T22:36:54Z")

</div>