HOW TO RESTORE DELETED INCIDENT TEMPLATE

[Yinka Bob]

An INCIDENT TEMPLATE (this is a file, not a table) frequently used by an assignment group was deleted. I don't know how to see the AUDIT TRAIL to find out when it was deleted and who deleted it. Please, how can I find and restore this INCIDENT TEMPLATE?

Thank you.

[Mark Roethof]

Hi there,

Do you mean with an INCIDENT TEMPLATE, a template record, so actually a sys_template record? Can you clarify.

If my answer helped you in any way, please then mark it as helpful.

Kind regards,
Mark
2020-2022 ServiceNow Community MVP
2020-2022 ServiceNow Developer MVP

---

LinkedIn
Community article, blog, video list

[djohnson1]

Kinya,

       Deleted templated are logged in the Sys_Audits table. You can look for who and when it was deleted by typing sys_audit.list in the filter navigator and searching for records on the sys_template table. You can also find a record in the sysevent table; sysevent.list in filter navigator and filter on sys_template in Parm1. Unfortunately, there is no way that I have found to recover the deleted record or its contents. 

Thanks, 

Derrick Johnson

[Saul6]

Probably a bit late to the party, but I believe sys_template records are captured in the sys_update_xml table.