- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
03-15-2016 05:10 PM
My goal is to be able to come up with an incident report for each user where I can see incidents that they have modified in the last 48 hours. Problem is with the current incident fields this doesn't seem possible. You can search on an updated last 48 hours filter, however the updated by will always be the latest user to update an incident so if a different user touched the incident before that there doesn't seem to be a way to accomplish this in an incident report. I was thinking of doing a report on the audit table, or even just running a script that pulls the data, but trying to query sys_audit in any fashion seems to be a horrible idea and I have to cancel the transaction before it just endlessly runs.
Does anyone know of a way to grab the data I am looking for here? Is sys_audit my only option?
Best regards,
Brian
Solved! Go to Solution.

- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
03-16-2016 06:13 AM
Definitely reporting on sys_audit is almost impossible, but you can use Metrics to get your answers. There is a little setup involved, but it works nice.
Step 1: create new Metric, on Incident table, with Type Script Calculation but leave Script area blank. Field doesn't matter but note sys_id of new Metric.
Step 2: create a before business rule on Incident table like below
Step 3: add the following script in the advanced section of your BR. Update the 2 sys_ids of var MetricSysID to match your Metric from Step 1
{
//sys id of the metric definition
var metricSysID = '3c9eb5770f4a9600c2498f8ce1050ea5';
var mi= new GlideRecord('metric_instance');
mi.addQuery('id',current.sys_id);
mi.addQuery('definition',metricSysID);
mi.query();
//if mi.next will insert another if exists.
//if !mi.next, will insert new entry
if(!mi.next()){
insertMetrics();
}
// since !mi.next inserts new, this will insert updates.
else if(current.active == true && current.operation() == 'update'){
insertMetrics();
}
}
function insertMetrics() {
var mi= new GlideRecord('metric_instance');
//sys id of the metric definition
var metricSysID = '3c9eb5770f4a9600c2498f8ce1050ea5';
mi.initialize();
mi.definition = metricSysID;
mi.start = previous.sys_updated_on;
mi.end = gs.nowDateTime();
mi.duration = gs.dateDiff(mi.start, mi.end);
mi.id = current.sys_id;
mi.value = gs.getUser().name;
mi.calculation_complete = true;
mi.insert();
}
gs.log('Metric trigger');
Step 4: (last one) Build a report of the newly captured data. (Doesn't not work on existing data, just new data after this is implemented
It might seem like a lot but screen shots are better than a bunch of words!
I use this all the time.

- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
11-25-2016 07:29 AM
Yes, you can report on incident_metric table where conditions: Definition is (name of your Metric), and group by ID

- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
11-25-2016 07:32 AM
Hello Michael,
Thanks for your respond. But is that filter will give me which incidents assignment group level 2 escalated to assignment group level 3?
Best Regards,

- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
11-25-2016 07:36 AM
Once you see the data, you'll probably have to apply another condition, like Value is x or y.

- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
11-25-2016 07:46 AM

- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
11-25-2016 07:53 AM
If you remove the value conditions, do you see any data? That Metric should come out of the box, so the data should have been collecting.