The ServiceNow registry tells us that when a new user is created in sys_user table on the application, the event name sys_user.insert should be seen in event logs but the event name that is getting populated in logs is text_index.
This is also happening for events sys_user.delete and password_reset. The event name that should get populate in logs after deleting user is sys_user.delete but in event log it shows as text_index. Also, for password reset event, as per ServiceNow registry the event name password_reset should get populated but it shows as module.key.registry.
