All Apps and Add-ons

Salesforce Add-on for Splunk Event logs indexing logs daily instead of hourly.


Hello Splunkers,

We are using "Splunk Add-on for Salesforce" to pull the SalesForce event logs from SalesForce.
Logs are updated hourly and daily at the SalesForce. At Splunk Heavy Forwarder, inputs are configured with interval of 1 hour (3600 seconds). But Splunk is receiving those logs on a daily basis only even though it is configured to receive hourly.
Not sure what the problem is.

0 Karma

Splunk Employee
Splunk Employee

Hi mayurr98

The problem you described is a know issue and you can get a patch to fix the problem.
Contact Splunk support and get a patch for Salesforce Add on to fix data collection issue.

Hope this helps.

0 Karma
Don’t Miss Global Splunk
User Groups Week!

Free LIVE events worldwide 2/8-2/12
Connect, learn, and collect rad prizes
and swag!