Where can I find the Audit Trail?

[brendarodriguez]

I am investigating an issue reported that a previously created ticket is lost. So I am checking if by any chance this ticket was deleted by a user with admin role. At what table are activities logged so that can I find all activities done in an instance.

[Vignesh11]

Hi Brenda,

You can find all the deleted records(including incident) stored in System Definitions -> Deleted Records, also you can refer sys audit table(https://dev.service-now.com/sys_audit_list.do ) for an audit trial.

[karthiknagaramu]

Hi,

The below article on restoring delete record would be helpful.

http://wiki.servicenow.com/index.php?title=Restoring_Deleted_Records#gsc.tab=0

Regards,

Karthik