I'm working with the latest version of the Splunk Add-on for Salesforce, and I have multiple instances of Salesforce to connect to. There doesn't seem to be a way to adjust the URL in the version 1.0.0.
Is there a way to do this that I'm unaware of?
I ended up editing the inputs.conf
account = eventlog
endpoint = xxxxx.my.salesforce.com
sourcetype = sfdc:logfile
index = devidx
interval = 86400
View solution in original post