Hi charlespalma,
Whenever a user downloads an attachment, the action writes an attachment.read event record to the event log. The parameters passed on contains the name of the file being downloaded and the table name from where the attachment is being downloaded. For example - If the attachment is in a particular record of knowledge table, then the "file name" and "kb_knowledge"(table name) is passed as parameters. You can use this event in a script action to query attachment table and fetch the sys_id of the record from where the attachment is being downloaded.
Further, maintain a separate field on the table(kb_knowledge) which will increment by one whenever the event is fired based on above. You can then have a track of times the record is being downloaded.
Mark Correct if it solved your issue or hit Like and Helpful if you find my response worthy.
Regards,
Ravi Kumar
Service Now Developer
Tata Consultancy Services
