Deleted incident

Ralton Stewart
Tera Guru

Hello Community,

 

It was reported that we have a deleted incident which occurred yesterday I navigated to Audit Records but could not find it. Any further suggestions to try and locate please would be great.

 

RaltonStewart_0-1698390847405.png

 

8 REPLIES 8

Ralton Stewart
Tera Guru

I found this but no incidents deleted in the last 3months

RaltonStewart_0-1698393357802.png

 

Hi @Ralton Stewart ,
Check in this tablesys_rollback_sequence.LIST in Audit delete column

AnandKumarP_0-1698397096844.png
Try to excute below script in lower instance and check.

 

var gr = new GlideRecord("incident");

gr.addQuery("sys_updated_on", ">", gs.beginningOfThisQuarter() );

gr.query();

while( gr.next() ){

 new GlideHistorySet("incident", gr.sys_id).generate();

}

 

1)Double check if incident really deleted some times it will not delete and still active.

2)Make sure audit is enabaled for incident table
3)Check if you have necessary permissions to check delete records

Please mark it as helpful and solution proposed if it serves your purpose.

Thanks,

Anand



ServiceNow Use6
Tera Guru

Hi @Ralton Stewart ,

Please find it in this table sys_metadata_delete.list

Regards

Suman P.

Ralton Stewart
Tera Guru

thank you all but still nowhere to be found I will raise a case with snow.