# How to find if any ticket logged from which host?

**URL:** <https://community.sapphireims.com/t/how-to-find-if-any-ticket-logged-from-which-host/851>\
**Category:** Incident Management\
**Created:** [January 5, 2024, 12:35pm UTC](https://community.sapphireims.com/t/how-to-find-if-any-ticket-logged-from-which-host/851 "2024-01-05T12:35:40Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![mayurs](https://avatars.discourse-cdn.com/v4/letter/m/34f0e0/32.png) [@mayurs](https://community.sapphireims.com/u/mayurs)\
**Post date:** [January 5, 2024, 12:35pm UTC](https://community.sapphireims.com/t/how-to-find-if-any-ticket-logged-from-which-host/851/1 "2024-01-05T12:35:40Z")

</div>

One of my customers, claims that randomly they are getting 8-10 tickets from Submitter as ‘System’. Client said that, there is no ongoing API testing at their end.

I need to check orginality of unusual ticket logging, so would preferring the Host name or any unique value which will help to find the origin of it.  
Thanks.

---

<div class="post-metadata">

**Author:** ![Sofan](https://avatars.discourse-cdn.com/v4/letter/s/48db29/32.png) [@Sofan](https://community.sapphireims.com/u/Sofan)\
**Post date:** [January 17, 2024, 4:09pm UTC](https://community.sapphireims.com/t/how-to-find-if-any-ticket-logged-from-which-host/851/2 "2024-01-17T16:09:09Z")

</div>

Hi Mayur,

Three possibilities exist in this situation.

1. There may be scheduled tickets that can be configured using system ID.
2. It’s possible that there’s a post-action or RPA rule that creates a ticket based on logic or a specific state.
3. There might be an API-based ticket creation, the case if you create a ticket using API and don’t send user information, the ticket will be created using a system account.

Regards