Check the deleted record log

[shiva_gupta]

Hi,

In service now imp_user[import set table] contain some entry(record) whenever we load data inside this table, I want to know where I can check the log details and which user or scheduler is responsible for deleting the record in this table.

Also please help me to identify how to identify which cleanup scheduler is responsible for deleting the record in the import set table.

[Pradeep Sharma]

Hello Shiva,

Check for column updated by or created by in deleted records.

Restoring Deleted Records - ServiceNow Wiki

Import Set Deleter is the scheduled job which is responsible to delete the records that were created more than or equal to 7 days ago

[shiva_gupta]

thanks for such a quick response

[Vaibhav Sharma1]

Hi Pradeep,

thanks for your valuable inputs. I want to understand is there a way to identify who has deleted record if updated by and created by are coming up as "system" or "guest"

[gtalreja · Accepted solution]

Hello Shiva,

To answer your first question, you can go to table "sys_audit_delete" by typing the tablename.list <sys_audit_delete.list> in the application navigator, and check all the records that were deleted.

In your case you would be searching it with the Table name <imp_user> To identify who deleted the record make "updated by" and "created by" field available on the form.

And the Schedule Job name is   "Import Set Deleter", you can see it in the following table "sysauto.list", which is a schedule jobs Table.