Incident Updated by shows as "System"

[Murali krishna3]

Hello everyone,

I have weird problem with incident table. I am unable to figure out the cause for it. I have an incident which was created by one of our partners through Rest explorer Table API, and they tried to update it by posting a comment on it. 

In the mean time there many work notes posted on the incident saying that "This ticket is retrieved by ...."  and it is being updated so many times everyday even though it was not actually updated and Updated by shows as "System".

Would like to know what would be cause for this behavior.

Thanks,

Murali Pasikanti

[vinothkumar]

There should be some schedule job defined in your system which is doing this.

Can you check if there is any schedule job defined in your instance.

[Murali krishna3]

Hi Vinoth,

Thanks for the reply. I did not find any schedules job that doing this.

Murali 

[Uncle Rob]

Nothing OOB.  
Search anything scriptable for the text "This ticket is retrieved by".  Probable candidates:
scheduled scripts
business rules
script includes

[Murali krishna3]

Hi Robert,

Thanks for the reply.

Did not find any script that contained "This ticket has been retrieved by" any one of the scheduled job or BRs or Script includes.

Murali Pasikanti