How to report on Archived incidents sent with Attachments?

Content

Hi everyone, wishing you a nice weekend. I have a requirement to report on all Incidents sent from OSvC with an attachment in January 2017.

I checked and the Archived Incidents has a column called File Directory (file_dir) which is supposed to show: "The name of the directory the incident's file attachments are stored in." With this however, I still seem to be getting all incidents, not just the ones with an attachment and the directory look something like 2017/212aa/16.5.0.1.0.**** - not sure what that stands for.

When I add a column from the File Attachments (fattach) table the Archived incidents report does not return anything at all.