How to find source of system updating a record

[Ryan M]

We are trying to find the source of some records being deactivated.  The system is changing active to false on a nightly basis.  This is happening on certain records (not all active records) in the sn_imt_diagnosis_request table.  It happens at the same time the night it does happen.  There are no scheduled jobs at this time for this table.  There is a business rule that deactivates records but the conditions do not match and the rule also updates the comments (which is not showing for these).  

Is there a way to figure out what process/script is making this update?

[Ashutosh Munot1]

Hi,

Ryan can you tell me which application is this?

Thanks,
Ashutosh

[Ryan M]

This is Emergency Exposure Management. 

[Mohammad Danis1]

Hi Ryan,

Did you get a chance to look into Transaction log (syslog_transaction) ? 

You can check if transactions are related to user actions on the form or it's a scheduler etc .

Kind Regards,
Mohammad Danish 

[Ankur Bawiskar]

Hi Ryan,

possible things to check

1) check the transaction logs for background

URL: https://instanceName.service-now.com/syslog_transaction_list.do?sysparm_query=sys_created_onONYesterday%40javascript%3Ags.beginningOfYesterday()%40javascript%3Ags.endOfYesterday()%5EurlSTARTSWITHJOB&sysparm_view=

2) Also check any workflow schedule is configured which triggers a workflow and possibly does the update

3) is there any flow configured; not pretty sure on this part though

If my answer solved your issue, please mark my answer as ✅ Correct & 👍Helpful based on the Impact.

Regards
Ankur