---
title: System log
description: View warnings and errors for instance processes, records, and non-critical events, such as memory usage on the server machine.
locale: en-US
canonical_url: https://www.servicenow.com/docs/r/australia/platform-security/r\_SystemLogs.html
release: australia
topic_type: reference
last_updated: "2026-03-12"
reading_time_minutes: 2
breadcrumb: [System logs, Logs, Platform Security]
---

# System log

View warnings and errors for instance processes, records, and non-critical events, such as memory usage on the server machine.

The following information is tracked in the system log:

-   Workflows
-   Configuration
-   Chats sessions
-   Transactions for each view of each page in the system, including load times for network, server, and browser
-   Inbound and outbound email
-   Events triggered in the system
-   Imports and integrations
-   System warnings, errors, and script logs
-   Upgrade information for any plugin activations, update sets, or system upgrades

Log entries appear for the current day only. To view other log files, use the log file browser.

Syslog messages serve diagnostic and maintenance purposes. Log messages can have different owners and may not require action from all readers. Check the message source to determine relevance and ownership. The following fields describe the attributes of each message.

<table id="table_mdc_nsk_sq"><thead><tr><th>

Field

</th><th>

Description

</th></tr></thead><tbody><tr><td>

Created

</td><td>

Date and time of the logging activity for the locale of the machine running the instance.

</td></tr><tr><td>

Level

</td><td>

The severity classification of the message. Levels indicate the nature of the event, not necessarily whether action is required. Messages are generated by the ServiceNow platform, installed applications, and custom scripts. The levels are Debug, Information, Warning, and Error. -   Debug: Detailed diagnostic information, typically used during development or active troubleshooting.
-   Information: Confirmation that an operation completed as expected.
-   Warning: An unexpected condition was encountered, but the operation completed successfully. May require investigation depending on context and source.
-   Error: An operation failed or could not complete as intended. Instances can generate a high volume of Error messages, primarily from the platform itself. These do not necessarily indicate a platform issue and do not always require further investigation.

</td></tr><tr><td>

Message

</td><td>

System-generated message regarding the nature of the occurrence.**Note:** Long messages and stack traces are collapsed by default and can be expanded. To disable, see [Disable stack trace formatting in system logs](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/platform-security/diable-system-log-display.md).

</td></tr><tr><td>

Source

</td><td>

Name of the process or area affected by the occurrence. For example, the source of the occurrence might be EMAIL or Memory.

</td></tr><tr><td>

Source Package

</td><td>

Name of the application package associated with the occurrence. Select the name to view the Store Application \[sys\_store\_app\] record for this package.

</td></tr></tbody>
</table>## Workflow logging

-   Each activity executed, including:
    -   Date and time started
    -   Date and time ended
    -   State, for example, Finished, Cancelled, Timed Out, Error
    -   Result
    -   Fault description, if there was an error
-   Transition history, including:
    -   Time of transition
    -   Activity transitioned from
    -   Activity transitioned to
    -   Which transition was triggered
-   Workflow log, including any log statements added to the workflow

## Configuration information

-   Action taken, including insert, update, and delete
-   Category of change
-   Comments recorded with the change
-   Name of the change
-   XML difference of the change
-   Update set associated with the change
-   Date and time of the change
-   User who made the change
-   Table where the change was made
-   Name of the object being changed
-   Type of object being changed
-   View in which the change was made, for form or list changes