Splunk Add-on for Salesforce - Ingestion Problem with query limit

[agabrielli]

Hi guys,

I'm having an issue while ingesting records from Salesforce.

The connector retrieves only up 2000 records. I've configured both "Order By" and "Query Start Date Parameters" = 10000 but it doesn't work.

It doesn't handle the pagination of the records if the query returns more than 2000 items.

I got the issue with any kind of data (i.e. Account) or events.

Which configuration do I need to perform to be sure to retrieves all records?

Thanks

[slnsalim]

agabrielli

This is a Salesforce limitation so nothing Splunk can do about it

https://help.salesforce.com/s/articleView?id=000332074&type=1

It's also not a good idea to get all records all the time. Can you not rely on the OrderBy LastModifiedDate field to return the latest records?