How to track a field changes ?

[Mohamed Ezzeddi]

I have a flow that creates tasks and on cases and do a bunch of changes to alot of fields (it's a complicated process)
My issue is we found a field change in regarding statistic codes. The field changes randomly, once in multiple retries.

When using field watcher, the tool shows random scripts caused by that change, maybe in Tokyo the tool is ruined.

This field causes the new value to be replaced by the old value.

We literally tried everything, logging all flows, seeing flow executions steps and all changes, all scripts, seeing if there is any recurrence, we found NOTHING.

Also the watchlist thing is not even developed for our project, and it also shows up randomly.

Is there any idea how can we track this field change from u_stat_code and it just tells us or shows us what caused this field to change ? (ui policy, some kind of script ... ) 

I used Audit history but it doenst tell me what caused the change

I'll attach some screenshots to make it more comprehendable

Thanks 

[Mohamed Ezzeddi]

no one faced this before ?

[Bert_c1]

https://docs.servicenow.com/bundle/utah-platform-security/page/administer/time/concept/c_AuditedTabl...

You may check the node log file, Transaction log, maybe others.

[Mohamed Ezzeddi]

The screenshot is actually history audit, but i can't know who changed that field.

I know it has been changed and i have the time .... 

[Bert_c1]

The Support Engineers have access to the database log, where the session and transaction can be found (logs are kept for 4 days). and then find more information from from the app node log.