How to report on incident table and check for certain keyswords in work notes field

[Snehal13]

How to report on incident table and check for certain keyswords in work notes field

I cat find work notes column when I select incident on OOB report in ServiceNow

[Snehal13]

I am querying sys_journal field table and able to get incident records with ORing keywords in work notes

But this one doesnt provide details of incident category, assignment group, state etc

Ex - Table - sys_journal_field

Element = work notes

name is incident

value is 'executed script' OR

value is 'ran the script'

Any better alternative , I want the complete record list view of all incident that have work notes as either of 'executed the script' or 'ran the script'. OOB reporting of ServiceNow isnt having any such capability.

[Abhishek_Thakur]

Hello @Snehal13 ,

Could you please mark this answer as accepted solution in order to close this thread.

[AndersBGS]

Hi @Abhishek_Thakur ,

Don’t ask him to close the question. You don’t know if the solution is sufficient. - this is just poor behavior.

/Anders

[Snehal13]

This one isnt useful Abhishek.

I am querying sys_journal field table and able to get incident records with ORing keywords in work notes

But this one doesnt provide details of incident category, assignment group, state etc

Ex - Table - sys_journal_field

Element = work notes

name is incident

value is 'executed script' OR

value is 'ran the script'

Any better alternative , I want the complete record list view of all incident that have work notes as either of 'executed the script' or 'ran the script'. OOB reporting of ServiceNow isnt having any such capability.

[Tsura Andreeva]

Hello, take a look at this one - https://www.servicenow.com/community/service-management-forum/create-report-using-worknotes-of-ticke...

Work Notes and Additional Comments are stored in a table named "sys_journal_field". You can report directly on that table, but for a more meaningful report, you can tie those comments to an incident, by creating a database view, joining the "task" table to "sys_journal_field" on element_ID = sys_id.

Then use your database view to report on your requirement.