Audit history for a deleted record

Not applicable

I have found that some of our Business Services are being deleted, and would like to track down the offender. however, once a record has been deleted, how can I view an audit history?

I have tried to look in the logs, but don't know what to look for. Is there an audit history at table level?

Thanks,

Jenny.

8 REPLIES 8

brozi
ServiceNow Employee
ServiceNow Employee

Have you checked out deleted records? It is located System Definition > Deleted records, you may need to turn it on. Once in there, you can add the created by field to the list, and that should be the person who deleted it.

You can also undelete it there as well 😄


Not applicable

Too easy!

Thx muchly


Not applicable

OK, now how do I prevent endusers from deleting business services?
Is there a way to turn of the checkbox in the list view? I suspect this may be the culprit...and it's very confusing when they are presented with a select list with a checkbox - instinct says to use the checkbox, not the link...


brozi
ServiceNow Employee
ServiceNow Employee

Using System Security you could create a delete operation against the cmdb_ci table and only allow admins or a role such as config admin (you would have to create) the ability to delete.

Here's some more info... Contextual Security