question Recover deleted attachments from an Incident record. in Community Central forum

Recover deleted attachments from an Incident record.

MThomas1 — Fri, 13 Feb 2026 20:33:36 GMT

Hello,

Situation:

Release "Y"

Incident - Attachments deleted.

Tech does not have the file name.

How to recover the deleted attachments?

Thank you .

Tanushree Maiti — Sun, 15 Feb 2026 04:03:41 GMT

If your sys_attachment is audited ( OOB - it is not audited), in that case-

Navigate to All > System Definition > Deleted Records.
Search for the Table SysID of the incident under "Payload" to identify which attachments were attached to it.
Open the deleted record that you want to restore.
Note:
You can only restore one deleted record and its associated references at a time.
Click Restore deleted record.
A Progress page shows the progress of the restore process, and shows a count of the references restored.

Ankur Bawiskar — Sun, 15 Feb 2026 07:19:40 GMT

Out of the box sys_attachment and sys_attachment_doc table is not enabled for audit so you can't recover that

once you enable the audit of delete on those 2 tables, then you can try to see if you can recover

💡 If my response helped, please mark it as correct ✅ and close the thread 🔒— this helps future readers find the solution faster! 🙏