User record updated unknowingly

[servicenow_devo]

Hi, I was having a visitor user record in user Table which is used for incident creation through inbound email. The company field for record was empty previously seems like now company updates to some value.

I have enabled audit log but no history for company modified.

Through incident record created by this profile I could see company was showing 3different name for same profile for last 3months. But no history is showing on user profile.

Can anybody help what else cause and what how we can figure out what has updating the user profile.

My customer wants to control the same without updating any user record. Issue was with only visitor profiles.

[Tony Chatfield1]

Hi, unfortunately your post does not make your issue or configuration very clear.

If the sys_user record is not showing audited updates, then perhaps the issue is not with the sys_user records company reference changing, but with the company reference being inconsistently applied to the incident record?

Perhaps you could update this thread with clear\specific details of your sys_user and incident audit\history for impacted records, so that the forum can get a better understanding of your actual issue.

[servicenow_devo]

Hi Tony,

I meant that one user profile seems like updated it's company field unknowingly and audit logs are not there on particular field to check how updated.

I was taking on incident records because, user profile company will reflect while creating incidents. When incident created by respective user shows company as different name at each month

[Tony Chatfield1]

Hi, records cannot update themselves, so if changes have been made to the company referenced in a sys_user record, it is the result of an import\transform or a script.

[servicenow_devo]

I have tried to make field empty and rerun the date source on which load company data to see whether field changes.

But after wards it has never happened. Even after data source running user record not modified as previous