All the logs in ServiceNowDescriptionThe System Logs module provides a variety of logs that you can use to troubleshoot and debug transactions and events that take place within the instance. Information Please find the information related to ServiceNow logs.Below are the various tables that stores logs, the system uses table rotation and table extension to archive the logs, and by default, the system uses a schedule depend on the table: For Event [ecc_event] Queue [ecc_queue] and Event [sysevent] the archive schedule is every day and rotation is 7.For Log [syslog] and Transaction Log [syslog_transaction] the archive schedule is every week and rotation is 8.For Email [sys_email] the archive schedule is every 30 days and rotation is 8 (Please note sys_email is not included in Table Rotation out-of-the-box if your instance is recently created. This is expected and table rotation should not be enabled for sys_email). The System Logs (syslog) table is used to keep application logging. The base system (aka out-of-the-box) has table rotation enabled for this table, as this is transient data for troubleshooting issues. The default rotation is set to 7 days x 8 rotations. Which is around 56 days before it is recycled. This setting satisfies the needs of most of our customers. It is not recommended to retain logging for too long as it can grow big quickly. When it is too big, it becomes difficult for analyzing and slow to search. The system uses table rotation and table extension to archive older logs. By default, the system uses the following schedule to archive common logs: Common log archive schedule: Table |Archive schedule |Rotations |Type --------------------------------------------------------------------------- Event [ecc_event] |Every day | 7 |Rotation Queue [ecc_queue] |Every day | 7 |Rotation Event [sysevent] |Every day | 7 |Rotation Log [syslog] |Every week | 8 |Rotation Transaction Log [syslog_transaction] |Every week | 8 |Rotation Email [sys_email] |Every 30 days | 8 |Extension Logs are stored internally in the data center of an instance. Based on the type of log, the relevant information is retrieved. Please note that there are performance implications when you modify the data retention period. You will therefore need to carry out thorough tests on your sub prod systems. Table RotationApply Table Rotation You can navigate to the system logs module in your instance which shows all the logs types and when you open each link, it will navigate to the corresponding page and you can find the table name in the URL.Additional InformationLocalhost logs and wrapper logs can be found under the Node log file module for each node the user is connected to. The instance creates compressed archives of system logs every two days and purges log archives after 21 days. Please review the following documentation for self-reference: System logs informationTransaction logsSystem logsLog history