to see list of viewer in incident record

[mallappa athani]

A security incident has been created, and the ABC team updated credential-related information in the work notes. We now need to identify which users have viewed this record and obtain a list of those users.

[Chaitanya ILCR]

Hi @mallappa athani ,

1. you can go the event log table and filter using name=user.view

and table=Your table name

and instance = sysid of that record in the selected table

or

you can check the logs and transaction log information and node logs information to find this info

Please mark my answer as helpful/correct if it resolves your query.

Regards,
Chaitanya

[OlaN]

Hi,

Do you have some kind of monitoring or event trigger when a record is being viewed? 
In that case you just need to store those events so that they can be viewed somewhere.

In case you don't have a event monitoring in place you'll need to review the transaction logs and see who has triggered a transaction of viewing that record.