Field Value

[harry24]

hello ,

What is the easiest way to find a field value is changed by which script , template or user ?

Thanks 

[Ashish Parab]

Hello, @harry24 

The easiest way to find out if a field value has been changed by a script, template, or user in ServiceNow is by using the following methods:

1. Script Tracer: Use the Script Tracer tool to trace and identify which script or background process modified the field.

2. sys_history_set Table: The "sys_history_set" table tracks historical changes to records in ServiceNow, including details about changes made by users.

3. sys_update_xml Table: Check the "sys_update_xml" table to see if a system update (such as a script or template) modified the field.

Please mark this as "correct" and "helpful" if you feel this answer helped you in anyway.

Thanks and Regards,

Ashish

[Akash4]

Hi Harry,

There are multiple ways possible but no single path gives all the information. Here are few insights that might help.

1. User - Finding intermediate update logs is difficult but at any point you can get lastest updates on records by which user! On sys_updated_by field value (list view) or on sys_update_xml list view (this is Update set) also on Right click on header of a record form > History > List. 
The last feature also gives how many times it has been changed by which user (Ex: Assignment group = A at 9AM by User1 and Assignment group = B at 10 AM by User2)

2. For Scripts like Business Rules, Client script etc., the path is via System Logs or Debug. This is indeed broad topic but as an example if you want to find which script updates state = WIP on incident automatically either you may try rules of OOB Processes or have debug techniques like searching Client scripts with filtering as Name or Script contains “state”. Similarly with other server side scripts using filters. 
Debug All is a Module available that serves the same purpose but here you may repeat the same process after turning on Debug (logs are shown immediately below every page you open until you Disable Debug)

Advanced System Admin course on NowLearning has some more hints about this point.