Major Incidents

[Nomava Ntaka]

Dear Community

I have been tasks to report on major incidents that have been down - graded. How can I do this? which field can I use to show these?

thank you in advance

Mava

[asifnoor]

Hi Nomava,

Let me know if the script has worked for you. If yes, would request you to mark the comment as a correct answer.

[Nomava Ntaka]

Hey Asifnoor

I have created the scrip but struggling to use it in a report of indicator.

What do I need to do first in order to archive any results.

I am properly thinking it, what type of indicator do I need and from what type of source?

hope you can assist

[Jason Monzo]

Hi asifnoor,

While the data required in this case may be in sys_audit, it is not recommended that users query this table for reporting purposes.  See the link below.

https://docs.servicenow.com/bundle/london-performance-analytics-and-reporting/page/use/reporting/con...

From the link above:

The net result is you will be asking the database to table scan a multiple gigabyte file, which is bad for these reasons:

- It is slow, so your report will take an unacceptably long time to run.

- While the database is scanning your table, your instance will slow down or even become unavailable because other queries cannot get the resources they need.

This is why I recommend the use of metrics in this case.

Regards,

Jason Monzo

[asifnoor]

Hi Jason,

My idea is to store the data of that table into a custom table (after running the query) and ran the report on the custom table. 

Ofcourse, you cannot create a report from sys_audit table as it is not visible and also hits the performance 

Anyways, thanks for the information.

[Jason Monzo]

Hi asifnoor,

Whether you are copying data to another table, or using it in a report, you are stilling running a query against the table, which carries a much greater risk than querying the metric_instance table.

Regards,

Jason Monzo