We're reclaiming inactive PDIs to keep them available for active builders. Learn what's changing, who's affected, and how to protect your work. Read More

Is it possible to capture or log activity notes when a user downloads an attachment?

Purvi Kotadiya
Giga Expert
Is it possible to capture or log activity notes when a user downloads an attachment using the attachment icon on a custom table?
 
PurviKotadiya_0-1775840442519.png

 

2 ACCEPTED SOLUTIONS

Tanushree Maiti
Tera Patron

Hi @Purvi Kotadiya 

 

1. Navigate to Event registry table (sysevent_register.list)

2. There you will get attachment.read event  ,OOB. This even helps to track whether an attachment has been read/dowloaded. 

 

Screenshot 2026-04-10 233320.png

 

Link:  https://<your_instance_name>/now/nav/ui/classic/params/target/sysevent_register_list.do%3Fsysparm_query%3DtableLIKEattachment%26sysparm_first_row%3D1%26sysparm_view%3D%26sysparm_choice_query_raw%3D%26sysparm_list_header_search%3Dtrue

 

Now if you upload  any attachment using attachment icon in incident, 

it  will show in activity log of incident.

Now if you download it , you can track it from here.

Navigate to sysevent.list table

 

(Check the screenshot which I downloaded as admin in my PDI)

Screenshot 2026-04-10 234000.png

 

 

 

Please Accept the solution if it assisted you with your question & Mark this response as Helpful.
Regards
Tanushree Maiti
ServiceNow Technical Architect
LinkedIn: https://www.linkedin.com/in/tanushreemaiti

View solution in original post

Hi @Purvi Kotadiya 

 

You could try using BR.

However, the sysevent table is a backend table, and it’s likely that only admins have access to it—not the caller or the requested user.

 

As an alternative, you could generate a report from it and share that with the business, if that works for them.

 

Please Accept the solution if it assisted you with your question & Mark this response as Helpful.
Regards
Tanushree Maiti
ServiceNow Technical Architect
LinkedIn: https://www.linkedin.com/in/tanushreemaiti

View solution in original post

4 REPLIES 4

Tanushree Maiti
Tera Patron

Hi @Purvi Kotadiya 

 

1. Navigate to Event registry table (sysevent_register.list)

2. There you will get attachment.read event  ,OOB. This even helps to track whether an attachment has been read/dowloaded. 

 

Screenshot 2026-04-10 233320.png

 

Link:  https://<your_instance_name>/now/nav/ui/classic/params/target/sysevent_register_list.do%3Fsysparm_query%3DtableLIKEattachment%26sysparm_first_row%3D1%26sysparm_view%3D%26sysparm_choice_query_raw%3D%26sysparm_list_header_search%3Dtrue

 

Now if you upload  any attachment using attachment icon in incident, 

it  will show in activity log of incident.

Now if you download it , you can track it from here.

Navigate to sysevent.list table

 

(Check the screenshot which I downloaded as admin in my PDI)

Screenshot 2026-04-10 234000.png

 

 

 

Please Accept the solution if it assisted you with your question & Mark this response as Helpful.
Regards
Tanushree Maiti
ServiceNow Technical Architect
LinkedIn: https://www.linkedin.com/in/tanushreemaiti

Hi @Tanushree Maiti , Thank you for the response. I have checked as you mentioned and I can see the event in the sysevents table.

 

Can I copy this event in the activity notes via BR or some other ways which doesn't impact the performance?

Hi @Purvi Kotadiya 

 

You could try using BR.

However, the sysevent table is a backend table, and it’s likely that only admins have access to it—not the caller or the requested user.

 

As an alternative, you could generate a report from it and share that with the business, if that works for them.

 

Please Accept the solution if it assisted you with your question & Mark this response as Helpful.
Regards
Tanushree Maiti
ServiceNow Technical Architect
LinkedIn: https://www.linkedin.com/in/tanushreemaiti

@Tanushree Maiti , yes, end user will not have access to that table. Generating a report is a good idea.