Thank you for your feedback.
Form temporarily unavailable. Please try again or contact docfeedback@servicenow.com to submit your comments.

Sys Audit and Audit Relationship Change tables

Log in to subscribe to topics and get notified when content changes.

Sys Audit and Audit Relationship Change tables

The Now Platform tracks inserts changes to audited records in the Sys Audit (sys_audit) and Audit Relationship Change (sys_audit_relation) tables.

The Now Platform tracks audits tables for which you selected the Audit check box in the dictionary record. By default, it does not audit records from system tables, such as update sets tables.

Note: To prevent performance issues and infinite loops, the system skips any business rule or workflow triggered by inserts to the Sys Audit table.

Sys audit table columns

The following columns display in sys_audit table records:
Field Description
Table Name Table that the audit record is for (for example, "incident")
Field Name Column in the table that the audit record is for (for example, "assigned_to")
Document Key Sys ID (Unique Record Identifier) for the originating record associated with the audit record.
Old Value

Old value of the field change represented by this sys_audit record.

  • Reference fields: Displays the unique sys_id value of the changed record.
  • Date and time fields: Displays the value in Coordinated Universal Time (UTC) as stored in the database.
New Value

New value of the field change represented by this sys_audit record.

  • Reference fields: Displays the unique sys_id value of the changed record.
  • Date and time fields: Displays the value in Coordinated Universal Time (UTC) as stored in the database.

How the Audit Relationship Change (sys_audit_relation) table works

The sys_audit table records tracks activity in tables that flagged for auditing. This activity includes journal field entries and history sets. The Audit Relationship Change (sys_audit_relation) table changes in the relationships between records in the sys_audit table, the source tables audit records originate from, and also tracks when a record may have been deleted.

  • Whenever you audit any record in a table, a relationship is created between the various originating tables to the store that records data. This relationship information is saved in sys_history_set, sys_history_line, and sys_journal tables.
  • If you delete a field that is related to an audit table record, the deletion is recorded in the sys_audit_relation table. In other words, any time you change an audited record, the past history elements are first deleted, and a new relationship is created in the sys_audit_relation table with new document IDs.
Feedback