In which table attachments are stored which is attached to Incident table

[Surya67]

Hi,

For one Incident record I have attached Attachment. After few days somebody  deleted that attachment.

1. How to check who is deleted that attachment?

2. In which table I will find attachment which I have attached?

I have checked in attachment and images tables, but I couldn't find any attachment over there

[Sulabh Garg]

Hello Surya,

All attachments are stored in "sys_attachment" table.

To check who deleted it, You may check "sys_audit" table for this. 

Hope it helps.

Please Mark ✅ Correct/helpful, if applicable, Thanks!! 

Regards

Sulabh Garg

[Miguel Donayre]

By default, the sys_attachement table isn't aduited unless you added it to the property. 

[Sulabh Garg]

Then probably there is no other way I am aware of. 

[Miguel Donayre]

Here is a long shot at finding out who deleted the attachment. It's worth a try!

go to system logs --> Client transactions remove the ""created on Today" filter and search for "*attachment_deleted.do" in the "URL" field.

Depending on when it happened, you can see who did the deletion, but you cannot get it back.