Does ServiceNow have System Logs for Data Export?

[Tom Sienkiewicz]

Hi, I cannot fing any logs related to exporting data from the platform.

For example, if an admin goes to the sys_user table and exports the data as XML or Excel or otherwise, I would like to see a log confirming that activity. I don't think there is anything like that out of the box, is there?

Or perhaps there is a specific type of Transaction which captures exactly that? I need to know the timestamp, user who exported data and preferably also any query/filter to indicate which records' data was exported.

Many thanks!

[Tom Sienkiewicz]

Hi, nope I think I marked the correct answer as correct, the "sys_poll" part seems to be important here. But I marked yours as helpful as well 🙂

[Jaspal Singh · Accepted solution]

Hi Tomasz,

If I understand you are looking for what & who exported from ServiceNow. If so you can look in the event logs, table. 

The event name is attachment.read, Param1 will tell you the file name and filter Param2 to sys_poll.  You can then use the created by to match against the sys_attachment table to get the file.

[hanaphouse]

How do I create a daily report for this?

[Jaspal Singh]

Unfortunately ServiceNow restricts reporting on certain system table & seems Event log table is one of those.

Kindly refer link for additiona checks on permitted tables for reporting.

[hanaphouse]

Is there a way to send an email to users with an admin role whenever data is exported? This is important for data extraction controls.