ITSM

garimakharb
Mega Guru

Suppose someone changes the Priority of an Incident — how can we know who changed it, and when?

So I wanted to confirm that Auditing is done field level or table level? if it's done field level also then How?

2 REPLIES 2

Dr Atul G- LNG
Tera Patron
Tera Patron

Hi @garimakharb 

You can view the incident activity log — it provides field-level audit details.

 

DrAtulGLNG_0-1751036023853.png

https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB0685670#:~:text=Auditing%20a%....

*************************************************************************************************************
If my response proves useful, please indicate its helpfulness by selecting " Accept as Solution" and " Helpful." This action benefits both the community and me.

Regards
Dr. Atul G. - Learn N Grow Together
ServiceNow Techno - Functional Trainer
LinkedIn: https://www.linkedin.com/in/dratulgrover
YouTube: https://www.youtube.com/@LearnNGrowTogetherwithAtulG
Topmate: https://topmate.io/atul_grover_lng [ Connect for 1-1 Session]

****************************************************************************************************************

Chaitanya ILCR
Kilo Patron

Hi @garimakharb ,

you can check the history (by default the audit applies to all the fields unless you specifically set to not to apply on all fields)

 

you can open form context menu (hamburger icon) as highlighted and then history -> list

ChaitanyaILCR_0-1751038982421.png

and filter you field (in this it's priority)

you will see details like who has changed it and when it was change and previous value and current value etc

ChaitanyaILCR_1-1751039066498.png

OOB the box the audit is enabled on incident table so you will able to see the 

 

Please mark my answer as helpful/correct if it resolves your query.

Regards,
Chaitanya