Scott,
Yes, the "Audit History" and "Audit Records" are both generated on demand by pulling data from sys_audit.
If you want to report on the "Audit History" table (since it is more end user friendly), you could create a scheduled job to force the "Audit History" and "Audit Records" tables to update for the records you are interested in, and then run a scheduled report to report on the data in the "Audit History" table.
Please make sure you have some limit for the number of records being updated in the Audit tables! Generating the Audit data for all incidents could potentially cause performance issues.
A scheduled job similar to this would populate the Audit tables for all incidents updated this quarter:
var gr = new GlideRecord("incident");
gr.addQuery("sys_updated_on", ">", gs.beginningOfThisQuarter() );
gr.query();
while( gr.next() ){
new GlideHistorySet("incident", gr.sys_id).generate();
}
Thanks
Brian
