All Apps and Add-ons

Data is not fetching from salesforce to splunk using splunk add-on for salesforce app

New Member

I have installed the splunk add-on for salesforce and I have completed the configuration. I have received data until 19th september for "login history" object. I am using "sfdc" index only. Then data pulling is stopped after that. But there is a data until 4th oct in that object in slaesforce site. Why the data is not reflecting in splunk?

0 Karma


This happened to me as well.  It could be that your Splunk Integration User had "Manage Users" removed from it's permissions, which is needed to view the LoginHistory object.

Our workaround was to use the User object and LoginEvent to retrieve the same type of data.

0 Karma


@hariniramesh Could you please update the solution if any?

0 Karma
Get Updates on the Splunk Community!

Detecting Remote Code Executions With the Splunk Threat Research Team

WATCH NOWRemote code execution (RCE) vulnerabilities pose a significant risk to organizations. If exploited, ...

Enter the Splunk Community Dashboard Challenge for Your Chance to Win!

The Splunk Community Dashboard Challenge is underway! This is your chance to showcase your skills in creating ...

.conf24 | Session Scheduler is Live!!

.conf24 is happening June 11 - 14 in Las Vegas, and we are thrilled to announce that the conference catalog ...