how to track a user's activity in servicenow

[RBlor]

Is there a way to track a users activity in servicenow? I was asked to see what a user was doing,  especially kb viewing and editing, and logins. 

[Mark Roethof]

Hi there,

Several possibilities. For example logins / impersonations > Events table. Behavior on the Service Portal > sp_log table. Short term navigation history platform UI > History. Etc..

If my answer helped you in any way, please then mark it as helpful.

Kind regards,
Mark
2020 ServiceNow Community MVP
2020 ServiceNow Developer MVP

---

LinkedIn
Community article list

[RBlor]

would this work for KB viewing/editing?

[Jackson12]

Some companies use a solution that implements "Privileged Account Management". As part of that, you can session record what someone does, search the sessions or even prevent something from being done in real-time. Maybe overkill for you, but it depends on your need and related risk. Perhaps you already have a PAM product? If so, it would be (should be) easy to add this use case. (e.g. Cyberark)

I used to work at a company that built this kind of a solution: https://www.oneidentity.com/products/one-identity-safeguard-for-privileged-sessions/ 

[Adam Stout · Accepted solution]

For Knowledge views, check out the table kb_use.  For report viewing, there is an event that is fired every time a report is viewed called report.view.  That can be used to track that as well.

Here is some more info on using report views: https://community.servicenow.com/community?id=community_blog&sys_id=274796dfdb23c49414d6fb2439961975