How to track which “modules/tables” were assessed/modified by a user in last 30 days?

[Rameswarv990717]

✅ Requirement

I want to capture user activity like:

• Navigator Modules (Application Menu → Modules) changes
• Configuration/Development artifacts modified by the user (e.g., Business Rules, Client Scripts, UI Policies, Script Includes, ACLs, etc.)
• Preferably, a single place/report to see “what the user edited”

[Nilesh Pol]

Hi @Rameswarv990717 ServiceNow provides audit logs to track changes made to records, including who made the changes and when. e.g. 

1. Navigate to System Definition → Dictionary.
2. Search for the table you want to track.
3. Open the table's dictionary entry and ensure the Audit checkbox is enabled.
4. Save the changes.

then Navigate to Reports → Create New. on sys_audit table.

You Use Customer Update table to Track Configuration Changes.

You can create report on sys_update_set table as per requirement in conditions filter.

[Mark Manders]

All of that is tracked in the sys_update_xml table, but don't report on these kinds of tables. 

What is your use case? Why do you want to see this? 

[Tanushree Maiti]

Hi @Rameswarv990717 

1. You can view the Audit History or Versions related list on any specific Module or Menu record to see who modified it and when.

2. To centrally capture and review all user activities related to Navigator Modules and configuration artifacts such as Business Rules or Client Scripts,

the most effective approach is to use System Update Sets or the Customer Updates [sys_update_xml] table.

3.  Admins can query the sys_audit table directly. Because of its large size, filter by the specific Table Name and Document key (sys_id). 

Helpful Article on this : Identify changes to OOTB/baseline records