Group Deletion history

[DUGGI]

Somebody deleted one group in production,we want to know the person name,how do we get that

Thanks in Advance

[Michael Fry1]

Look in Deleted Records. The Table Name will be sys_user_group, the Display value will be the name of your group. Updated by will tell you who deleted it.

[DUGGI]

Thank You Michael,

I don't find any group related records in deleted records table.

i found entry's in sys_audit table but there is no group name(it showing Document ID).

[Mike Allen]

It appears that sys_user_group is not audited by default, so tracking this down will be difficult.

Also, according to Restoring Deleted Records - ServiceNow Wiki,

• Deletions from tables with a sys prefix are not tracked. To track deletions from these tables, add the table name to the glide.ui.audit_deleted_tables property.

[DUGGI]

Tank you Mike.

now we have enable the property,and able to track the deletion   in table prefix with sys.