System is creating new records automatically with empty "Created" and "Created by" fields

[Farah5]

I'm dealing with a very strange issue I've never seen before. We have a custom table where you can save a form as a "Draft" (current status = draft). Several fields are required to be filled out before you can even save it as a draft. However, we've noticed that there are a bunch of empty Draft records being automatically created in the system. The record is active, but not a single field on the form is filled out. The strangest thing is that the "Created" and "Created by" fields are empty, and there is no history whatsoever on the record. This makes it extremely difficult to pinpoint when and how these tickets are created. 

Does anyone have any idea of what could cause a record to be automatically created without a "Created" or "Created by" date? This is happening in our DEV, TEST, and PROD instances. There doesn't seem to be any pattern for when these are created. 

[brandenwright]

Whenever I am chasing a gremlin I always make sure auditing is enabled on the table.  If you haven't done that yet I would highly suggest it. Look at the history of the blank records and you might see what specifically created it or at the very least when it was created.  You can then look at the logs and find the culprit.

How are records created normally on this table?  Is it done through a record producer or in the native ui?  I would also check my BR as they create records through scripting.  Without knowing more about the process I would be shooting in the dark.

[Farah5]

Most fields in the form are already being audited... for some reason I am restricted from enabling auditing on the sys_created_by and sys_created_on fields. I can't seem to enable it for OOTB fields. 

When I click on the calendar history of the record, I am brought to a totally blank page (screenshot below). When I click on the list history, it brings me back to the list view of that table. It's so strange. 

New records are just created in the native ui. I have been checking business rules, but wouldn't new records created by any kind of script have AT LEAST a value in the sys_created_on field? The system is acting like these records don't even exist, even though they're right there. 

[brandenwright]

That doesn't sound like Auditing enabled correctly.  When you are selecting history you should see 2 items to select from.  One is Calendar the other is List.  If List isn't an option, then that means that it isn't working correctly.  Calendar is always available even if auditing isn't available.

Go into the table dictionary and edit the properties.  Select the object which has a blank entry under the column "Column name".  You should see "Audit" as a something you can select in the upper-right section of the form.

Now when you check the history of a record you should see both Calendar & List.  Select list and you should see the specifics on when entries were made and by whom.

[Farah5]

Sorry, I don't think I explained myself very well. Auditing is enabled for this table. For working records that were created intentionally, I can see both options - List and Calendar, where I can see the history for every field. I meant that the issue with the blank Calendar page is only happening with these erroneous records.