How sys_audit table is filled ? (where are the rules that created entries in the table?)

[vanessaheux]

Hello

I know that each time I modify an incident or a change request, all modifications (of status or anyone) are stored in sys_audit table and in another custom audit table.
I would like to see the place where the entries are created in these tables.
When I check "configure/all" in the table itself, I can't see a rule that shows how this table is filled.
When I go on display of an incident or a change request and I check "configure/all" I see many business rules or clients scripts, etc... but none of them are done on sys_audit table or my specific historical table.

How can I find how these tables are filled ?

As you don't know my custom table, I think that if you can tell me how sys_audit table is filled (where is the rule to add an item in this table), I'll have the methodology to search how my custom table is filled.

Regards

Vanessa Heux

[scott barnard1]

Hi Vanessa

https://docs.servicenow.com/bundle/helsinki-platform-administration/page/administer/time/concept/audited-tables-2.html

Regards

[Gaurav Bajaj]

Hi, 

I don't think we have visibility to the script which fills up data in the sys_audit table. All we can do is to configure which table entries need to be audited through an attribute in table dictionary.

https://docs.servicenow.com/bundle/jakarta-platform-administration/page/administer/security/task/t_E...

If you need some modification in the data entered in the audit table, you can apply some BR to update the entered data if required.

Please mark it correct/helpful based on the response.

Thanks
Gaurav

[vanessaheux]

Hello 

Thank for your answer however this is not really what I wanted.

I wanted to have visibility of the scripts which filles the data in sys_audit table.

My goal was to find how my custom table u_task_history is filled as I don't find anything that adds entries in it.

Regards

VAnessa Heux

[Gaurav Bajaj]

SO you are saying you have a custom table u_task_history & you want to see how data is being entered into it. If yes, then please look out for BRs, Script includes UI actions or any sort of scheduled jobs which might be doing the job.

But to give an answer to original question, we don't have visibility to the script which fills up data in the sys_audit table.

Thanks

Gaurav