I am trying to ingest logs from Salesforce into Splunk using REST API Modular add-on. I am not sure how to customize authhandlers.py and responsehandlers.py to authenticate and pass the access_token. Does anyone have any idea how to do it?
From my experience, the Salesforce access token expires, and you will need to request a new access token. You'll probably want to write a authhandler to use the username-password Salesforce REST Oauth authentication flow.
Do you have anything that was already written by Splunk and could be shared in here?