Audit History updates

[_bhishek]

Hello All,

While checking audit history of CI,I am getting created date of today .This CI was created on 25th May 2023 and last updated on same date .What could be the reason ,I am getting created date of today .For few type is Audit .Also created by ,updated ,updated by fields are empty.

Thanks 

[Ahmmed Ali]

Hello @_bhishek 

That is because the sys_history_set and sys_history_line (the ones you are viewing currently) are cleaned up after 28 days of not being used. The audit data will be present permanently in auditing source records. please refer below document for the explanation:

https://docs.servicenow.com/en-US/bundle/utah-platform-security/page/administer/security/concept/c_D...

Thanks,

Ali

[_bhishek]

Hello Ahmmed,

Thanks for your response .

Could you please help me to understand why I am getting today's  date as created date for below audit types also in Audit history.As this CI was last updated on 25th May 2023.Is there something running on backend for CIs.

Thanks

[Ahmmed Ali]

Hello @_bhishek 

The created date is the date when the history record is recreated (after delete). You will need to check update time field which shows the date/time when the update was made for that particular field.

Thank you,

Ali

[_bhishek]

Thanks Ahmmed.

I can see update time is showing correct time .I am still thinking ,Why were new history record created for today ,As we have not deleted or updated any thing for CIs or Audit history .We are getting todays date for almost all CIs .We have not updated today.

Thanks.