Recover deleted attachments from an Incident record.

[MThomas1]

Hello,

Situation:

Release  "Y"

Incident - Attachments deleted.

Tech does not have the file name.

How to recover the deleted attachments? 

Thank you .

[Tanushree Maiti · Accepted solution]

If  your sys_attachment is audited ( OOB - it is not audited), in that case-

• Navigate to All > System Definition > Deleted Records.
  Search for the Table SysID of the incident under "Payload" to identify which attachments were attached to it.
• Open the deleted record that you want to restore.
  Note:
  You can only restore one deleted record and its associated references at a time.
• Click Restore deleted record.
  A Progress page shows the progress of the restore process, and shows a count of the references restored.

[Tanushree Maiti · Accepted solution]

If  your sys_attachment is audited ( OOB - it is not audited), in that case-

• Navigate to All > System Definition > Deleted Records.
  Search for the Table SysID of the incident under "Payload" to identify which attachments were attached to it.
• Open the deleted record that you want to restore.
  Note:
  You can only restore one deleted record and its associated references at a time.
• Click Restore deleted record.
  A Progress page shows the progress of the restore process, and shows a count of the references restored.

[Ankur Bawiskar · Accepted solution]

@MThomas1 

Out of the box sys_attachment and sys_attachment_doc table is not enabled for audit so you can't recover that

once you enable the audit of delete on those 2 tables, then you can try to see if you can recover

💡 If my response helped, please mark it as correct ✅ and close the thread 🔒— this helps future readers find the solution faster! 🙏