MCAS Salesforce

[VijaySrrie]

Hi,

How to ingest MCAS Salesforce logs into splunk.

[VijaySrrie]

@Roy_9 

NOTE:  We have separate add-on in splunk to ingest salesforce and MCAS logs into splunk

Logs from Salesforce goes to MCAS --->  It has to be ingested into splunk--> To ingest that particular (salesforce MCAS ) logs into splunk, do we have any add-on?

or any setting at MCAS is needed to ingest that particular Salesforce MCAS logs?

[Roy_9]

@VijaySrrie No, there isn't an add-on available but you can monitor those files by installing an agent on MCAS or if it supports HEC, you can configure to send this logs by creating a HEC input.

[VijaySrrie]

Ok. I will try and let you know.

[Roy_9]

hello,

try to explore splunk add-on for salesforce/HEC/polling salesforce API

Hope this helps.

thanks