We're reclaiming inactive PDIs to keep them available for active builders. Learn what's changing, who's affected, and how to protect your work. Read More

Attach attachment in incident from SOW

Mk_snow
Tera Contributor

Hi,

 

In the Service Operations Workspace, when I attach a Knowledge Base article to a Major Incident using the bell (Notifications) icon on the right-hand side, a message is automatically posted to the Work Notes of the incident.(In the activity section highlighted in yellow)

1000174976.jpg

I'm not sure why this is happening or what configuration is causing it.

 

Could you please help identify the source of this behavior and let me know how to prevent this automatic Work Notes entry from being posted when a KB article is attached?

 

Thanks in advance 🙂 

2 REPLIES 2

Tanushree Maiti
Tera Patron

Hi @Mk_snow 

 

Are you using Agent Assist?

 

If yes, In that case - check this KB: KB2106782 Knowledge base articles are attaching to customer comments instead of work notes via agent... 

 

 

Please Accept the solution if it assisted you with your question & Mark this response as Helpful.
Regards
Tanushree Maiti
ServiceNow Technical Architect
LinkedIn: https://www.linkedin.com/in/tanushreemaiti

Vikram Reddy
Tera Guru

Hi @Mk_snow,

 

That bell icon opens the Recommendations panel (Recommended actions + Search), and its Search tab is powered by Contextual Search using the KnowledgeSearchResource. When you click Attach on a KB result there, the platform always drops a journal entry recording which article got linked, that's the audit trail the Attach action exists to create, it's not optional add-on behavior.

One thing worth flagging from your screenshot: that entry is actually typed as Comments, not Work notes (you can see "Comments" right above the KB0010579 line). By default the KnowledgeSearchResource Attach action writes to the customer-visible Comments/Additional comments field, not Work notes, so on a major incident this is arguably worse than you think, since watch list contacts could see it. The "Relationship change" lines above it are unrelated, those come from the Recommended actions/generative AI recommendation being dismissed and are not governed by the same setting.

You can't suppress the note entirely and keep the one-click Attach working, but you can move it off the customer-visible field and make it internal-only:

  1. Go to Contextual Search > Table Configuration.
  2. Open the Incident table configuration record used for the workspace/SOW search context. Some instances have a separate SOW-specific config from classic Agent Workspace, so check both if the first one doesn't stick.
  3. In the Search Action Configuration related list, open the record where Action label is Attach and Search resource is KnowledgeSearchResource.
  4. Enable Use custom field for attach note and set the Attach note field to work_notes.
  5. Run cache.do and retest the Attach action from the Search panel.

After that change, attaching a KB article still logs the entry (you can't turn that off short of deactivating the Attach action itself, which removes the button), but it lands in Work notes where only internal staff see it instead of the caller.

References

 

Thank you,
Vikram Karety
Octigo Solutions INC