Querying Activities using REST API

kcwong — Wed, 27 May 2026 01:43:13 GMT

I'm trying to use REST API to pull data from ServiceNow, particularly the data shown in Activities section for the incidents/changes/requests I have. I'm using the table API (/api/now/v1/table/:table_name?sysparm_query=xxx) to find and retrieve data.

So far I've identified:

sys_journal_field. This contains work notes/comments/approval history. element = comments|work_notes|approval_history, element_id=master record's sys_id

sys_audit. This contains the audit trace. tablename, documentkey, newvalue, oldvalue are the key attributes.

sys_email. This contains the email received/sent entries. target_table points to the master record table, while instance.value in the JSON points to the master record.

Questions:
1. Are there more types of activities I do not know about? Where can I find documentation for them?
2. How do you use sysparm_query to search a nested JSON value, like for sys_email's instance.value?

3. How is email stored in sys_email if there are attachments? Because of question 2, I am unable to locate an example in my ServiceNow instance.

Re: Querying Activities using REST API

Tanushree Maiti — Wed, 27 May 2026 03:19:55 GMT

Hi @kcwong

When I have been working on e-bonding projects, I created scripted Rest API and using script retrieved the Journal field values.

Try with this:

https://www.servicenow.com/community/developer-forum/scripted-rest-api-to-retrieve-work-notes-of-an-incident-for/td-p/1593888

Retrieve journal entries using direct web services

question Querying Activities using REST API in Community Central forum

Querying Activities using REST API

Re: Querying Activities using REST API