I am trying to ingest logs from Salesforce into Splunk using REST API Modular add-on. I am not sure how to customize authhandlers.py and responsehandlers.py to authenticate and pass the access_token. Does anyone have any idea how to do it?
From my experience, the Salesforce access token expires, and you will need to request a new access token. You'll probably want to write a authhandler to use the username-password Salesforce REST Oauth authentication flow.