question Re: ServiceNow Administration in Common Service Data Model forum

ServiceNow Administration

vidyajadhav — Fri, 27 Jun 2025 08:54:40 GMT

As an admin, I want to automate auditing on key tables so that all changes are tracked for compliance and troubleshooting. Where this option of making auditing enable I can find in ServiceNow

Re: ServiceNow Administration

GlideFather — Fri, 27 Jun 2025 09:14:49 GMT

Olá @vidyajadhav,

It is important to define what do you mean "key tables" - is it task, cmdb, some of their child tables, some custom tables or what exactly?
What is your ambition to find in the audit, there is the table [sys_audit] in ServiceNow where you can find some interesting details, but I do not know what is your expectation to find out.
What is the desired outcome from the audit - an excel sheet, or a graphical representation in a dashboard, email notification...
Also, do you want to perform the audit just once and you are good or do you aim to do it regularly (weekly, monthly, half-yearly, once a 100 years).

Please, try to think of the details and then we can help you build it, but your question is too abstract lacking some real use case. Thank you very much.

EDIT: another useful tables for you might be:
[sys_history_set]
[sys_history_line]

Re: ServiceNow Administration

vidyajadhav — Fri, 27 Jun 2025 09:24:41 GMT

Hi Kamil,

Thank you for your response. Actually we want to enable auditing on table like sys_user_group so that if any changes are being done by developers, we can track those.

Re: ServiceNow Administration

GlideFather — Fri, 27 Jun 2025 09:39:27 GMT

Alright @vidyajadhav!

Then please update the URI below and navigate to system dictionary, filter Type: Collection for the particualr table (in this case sys_user_group) and mark the Audit field to TRUE:

https://your-instance.service-now.com/sys_dictionary_list.do?sysparm_query=internal_type%3Dcollection%5Ename%3Dsys_user_group&sysparm_view=

From that moment, changes made to records from that table (e.g. Group renaming, activation or deactivation will be available in the sys_audit table).

Sys Audit table with all the changes made (to be filtered):

Or the one particular record:

It does not work retrospectively, so changes made before marking the Audit true will not be trackable, only afterwards.

And from that point you can create a report or any other method to see the changes.

Please, let me know if this helped to solve your issue and if possible Accept as solution. Thank you

Re: ServiceNow Administration

Mark Manders — Fri, 27 Jun 2025 09:41:35 GMT

Open the 'Collection' dictionary entry of the table and set 'audit' to true. Your table will be audited and you can track it in the history of the table/records.

Re: ServiceNow Administration

Ankur Bawiskar — Fri, 27 Jun 2025 10:17:08 GMT

@vidyajadhav

Why do you wish to audit sys_user_group ?

Doesn't look like a valid business requirements.

Usually groups are import from DEV to PROD and rarely change. there might be changes to group manager etc but not that many changes occur.

If my response helped please mark it correct and close the thread so that it benefits future readers.

Re: ServiceNow Administration

vidyajadhav — Fri, 27 Jun 2025 14:10:01 GMT

Hi @Mark Manders

Thank you for your help. I am able to get audit option in the collection of dictionery entry. I am unable to find the Table/records. Where i can find the audited records

Re: ServiceNow Administration

GlideFather — Fri, 27 Jun 2025 14:23:40 GMT

@vidyajadhav Type to the application navigator sys_audit.list and press enter.

But you will see only the record updated AFTER the Audit was enabled, not historically before that...

Please see my comment above, there is explanation with screenshots