Track who updates or deletes attachments from ANY table

Rory6 · ‎03-13-2019

So our developer went on medical well that puts me in a bind as I have no background in actual coding. I review a lot of information from the community on attachments but no "step x step". I wouldn't expect it as everyone seems to be a developer BUT, any chance someone can instruct me through the steps to turn on attachment tracking so, I know who updated/deleted any attachment for any table, or if I need to have a specific table cmdb_ci_appl.

Sumanth16 · ‎03-13-2019

Hi,

Please refer below links:

1) https://docs.servicenow.com/bundle/london-platform-administration/page/administer/security/task/t_En...

2) https://docs.servicenow.com/bundle/london-platform-administration/page/administer/system-logs/task/t...

3) https://hi.service-now.com/kb_view.do?sysparm_article=KB0678833

Thanks,

Sumanth

View solution in original post

Mike Allen · ‎03-13-2019

When an attachment is deleted, there is an event that goes into the Event Log, called attachment.deleted. In that record, there is a user and sys_id field that will tell you who:

Mike Allen · ‎03-13-2019

So, Event Log:

Event = attachment.deleted:

Mike Allen · ‎03-13-2019

Other events:

Rory6 · ‎03-13-2019

Hey Mike,

Thanks. It makes sense. Some presumption on my part.

so this type of tracking is always turned on?