All Apps and Add-ons

Salesforce Add-on for Splunk Event logs indexing logs daily instead of hourly.

mayurr98
Super Champion

Hello Splunkers,

We are using "Splunk Add-on for Salesforce" to pull the SalesForce event logs from SalesForce.
Logs are updated hourly and daily at the SalesForce. At Splunk Heavy Forwarder, inputs are configured with interval of 1 hour (3600 seconds). But Splunk is receiving those logs on a daily basis only even though it is configured to receive hourly.
Not sure what the problem is.

0 Karma

jelee_splunk
Splunk Employee
Splunk Employee

Hi mayurr98

The problem you described is a know issue and you can get a patch to fix the problem.
Contact Splunk support and get a patch for Salesforce Add on to fix data collection issue.

Hope this helps.

0 Karma
Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...