OBLYTECH Logo
OBLYTECH Logo

ServiceNow / Practical guide

ServiceNow Known Errors: Connect Investigation to Action

ServiceNow known errors give support teams a controlled way to recognise a recurring issue, use an approved workaround, and understand what investigation or correction remains. The record is useful only when its symptoms, scope, evidence, owner, and next decision are clear.

For problem managers and support leads deciding whether recurring incidents need a documented known-error path..

ServiceNow known errorsknown error databaseproblem investigation

Guide map

Make known-error handling a repeatable review.

Decide when a recurring issue needs a known-error record

Use a record when the same symptom keeps returning.

Capture symptoms, scope, and evidence

Record what users see and what was checked.

Separate workaround from permanent correction

Keep the temporary step and the lasting fix on separate lines.

The practical framework

Manage ServiceNow known errors with evidence, symptoms, workarounds, affected services, ownership, risk, review triggers, and permanent fixes.

Decide when a recurring issue needs a known-error record

Look for repeated incidents with a recognisable pattern, a temporary response, unresolved cause, or a business decision that support teams need to make consistently. Do not create a record merely because incidents share a label. The relationship should be supported by symptoms, affected service, evidence, and investigation.

The ServiceNow problem-management route is the relevant internal destination when recurrence needs structured investigation.

Capture symptoms, scope, and evidence

Describe what users observe, when it occurs, which service or configuration is involved, how the issue is recognised, and what evidence has been checked. Record uncertainty as uncertainty. A useful known-error record helps the next analyst avoid repeating an investigation without presenting an unproven cause as fact.

The ServiceNow CMDB service route provides context when affected configuration items or service relationships matter.

Separate workaround from permanent correction

State the workaround, prerequisites, limits, side effects, and verification step. Then state the permanent-correction question separately: what change, design decision, data correction, or supplier action might remove the underlying condition. A workaround can restore service while leaving the problem open.

The ServiceNow change-management route is the appropriate path when a correction requires controlled implementation.

Give the record an owner and review trigger

Assign the group that owns the investigation and the person responsible for reviewing the workaround. Add triggers such as a related change, new evidence, a repeated incident, a service-impact change, or a decision that makes the workaround unsafe. Ownership should remain visible after the initial incident is closed.

The ServiceNow health-check route supports follow-up when recurrence reveals a process or design improvement.

Close the loop with incident and change work

Link the known-error reasoning to the incidents it helps resolve and the change or improvement that addresses the condition. At closure, record evidence that the permanent action worked, or explain why the known error remains open. Do not use a status change as a substitute for a conclusion.

The ServiceNow incident-management route gives an internal route for keeping support response aligned with investigation.

Common questions

Questions teams ask about known errors

Is a workaround the same as a fix?

No. A workaround reduces the immediate effect or guides the response. A fix changes the condition that caused the issue or provides evidence that the condition no longer exists. Both should be described separately.

When should a known error be retired?

Retire it when the underlying condition is corrected, the service or process no longer exists, or the workaround is no longer valid and a replacement record is available. Record the reason and any destination that support teams should use instead.

The research-grounded boundary

A known-error record helps only when the workaround, its limits, and the open cause are stated plainly. Support teams benefit from a short entry that says what the workaround changes, what it does not fix, and who will review it. Without that, a temporary step tends to become the standing answer and the underlying condition goes unexamined.

Open a known error when a workaround is what people need

A known error record exists for one practical reason: service desk staff need a consistent answer to an issue whose root cause is not yet fixed. That makes the problem manager’s first decision a practical one, and the known error concepts define what the record holds. Is the recurring issue stable enough to describe, and is there a workaround that can safely be given to users in the meantime? If the answer to either question is no, the work belongs in problem investigation, not in the known error database. Raising known errors too early fills the database with speculation. Raising them too late leaves the service desk improvising the same workaround differently on every shift.

The states a known error moves through

StageWhat must be trueWho signs the change
SuspectedIncidents share a symptom and a service, but no cause is confirmedProblem manager
Known error, workaround onlyCause is identified or strongly indicated, and a workaround has been testedProblem manager with the service owner
Known error, fix plannedA change exists with a named owner and a place in the release planChange manager
RetiredThe fix is live and affected incidents have stopped, or the service has been withdrawnProblem manager

The table separates two things teams often merge: a workaround that is safe to publish, and a cause that is confirmed. A workaround can be approved for use while the cause is still open, but the record should say so, and the approval should name the service owner who accepts the residual risk.

Write the workaround as an instruction a tired agent can follow

A workaround that depends on a senior engineer being available is not a workaround. Write each step so an agent can follow it on a difficult shift, with the expected result of each step and the point at which the agent should stop and escalate. Attach the condition that makes the workaround applicable, such as an affected client version or a specific queue, so it is not applied to incidents it was never tested against. For live faults that need several teams at once, the ServiceNow incident swarming guide covers bringing specialists together when a single queue or resolver cannot make the next useful decision alone.

Linking incidents to the record properly

Known errors are only useful if incidents reach them. The problem record concepts explain how a problem, which investigates a root cause, differs from an incident. Check that the configuration item, the service and the symptom on each incident match what the known error describes. Teams often link a new incident by reference but never update the known error’s list of affected services, so the record looks complete while it misses part of the population. Review those links after the first weeks of use, as part of the incident and problem management review and again after each change to the affected service.

Where a known error goes wrong

  1. The workaround is published to the knowledge base, but the known error is later retired and the article is left without an owner.
  2. The record describes one symptom, and a second symptom with a different cause is linked to it because the wording looked similar.
  3. A risk the workaround introduces, such as a manual data correction that has to be reversed, is not written down, so it is repeated indefinitely.
  4. The fix is delivered, but nobody checks whether the incidents have stopped, so the record stays open long after its purpose has ended.

How to tell it is working

A known error is working when agents apply the same workaround to the same symptom, when linked incidents fall after the fix or while the workaround is in use, and when problem managers can explain why each open record remains open. Review open records on a fixed cadence. The ServiceNow problem management and recurrence guide covers working on recurrence rather than treating every incident as an isolated event. A record that has not moved for a long time without a stated reason should be escalated, not left in place.

When not to create one

Do not create a known error for a single incident, for a symptom with no reproducible pattern, or for an issue whose workaround would expose data to people who should not see it. In those cases the problem record and the incident notes are the right place, and a publication decision can wait until there is evidence to support it.

Known error questions from the service desk

Who approves a workaround for publication to the service desk?

The service owner accepts the operational risk and the problem manager confirms the steps. Where the workaround touches security or customer data, the security or privacy owner should also sign before frontline staff receive it.

What if the cause sits in a third-party product?

Keep the known error open against your own service and record the vendor reference in the notes. Track the vendor’s fix separately, and do not retire your record until your own workaround or configuration is no longer needed.

Should open known errors feed change planning?

Yes. Each open known error with a fix in progress should be visible to the change board, because a change to the same configuration item can either resolve the error or reintroduce it.

Next step for known error handling

If your service desk is applying different workarounds to the same symptom, the states and ownership of the known error are the first things to check.

Discuss a known error record you are unsure about, starting from the symptom, the workaround and the list of linked incidents.

A practical next step

Need a clearer ServiceNow operating model?

OBLYTECH can discuss the questions raised by this guide and the next review step. See the ServiceNow consulting services page for the commercial route.

Useful starting pointBring the current question, scope, ownership concerns, and evidence needs into the first review conversation.

ServiceNow guides on this topic

Guides from the Oblytech ServiceNow library that explain the practice behind this page.

More from the blog