Report to count number of INC where Short Description was updated by specific user.

[Blue]

Is there a way to determine INC count where a specific user updated the Short Description field in a certain time frame?

[SumanthDosapati]

@Blue 

ServiceNow only holds the last updated date and last updated by.

You can create a report on last updated by a specific user and last updated at specific time range.

Accept the solution and mark as helpful if it does, to benefit future readers.
Regards,
Sumanth

[Maik Skoddow]

Hi @Blue 

The incident table itself only shows the current state of the record, not the history of changes.

To track changes to the Short Description field, you need to use the sys_audit table, which logs field-level changes, including who made the change and when.

The sys_audit table records each field update, including the user who made the change, the field name, the old and new values, and the timestamp.

You can filter sys_audit records by:

• field = "short_description"

• user = the specific user who made the update

• sys_created_on (or equivalent) within your desired date range

The documentkey in sys_audit corresponds to the sys_id of the incident, allowing you to link back to the incident record.