I'm trying to use REST API to pull data from ServiceNow, particularly the data shown in Activities section for the incidents/changes/requests I have. I'm using the table API (/api/now/v1/table/:table_name?sysparm_query=xxx) to find and retrieve data.
So far I've identified:
sys_journal_field. This contains work notes/comments/approval history. element = comments|work_notes|approval_history, element_id=master record's sys_id
sys_audit. This contains the audit trace. tablename, documentkey, newvalue, oldvalue are the key attributes.
sys_email. This contains the email received/sent entries. target_table points to the master record table, while instance.value in the JSON points to the master record.
Questions:
1. Are there more types of activities I do not know about? Where can I find documentation for them?
2. How do you use sysparm_query to search a nested JSON value, like for sys_email's instance.value?
3. How is email stored in sys_email if there are attachments? Because of question 2, I am unable to locate an example in my ServiceNow instance.
