Splunk Enterprise Security

Salesforce splunk integration- Why don't we see any logs?

rajwdc
New Member

We are configuring salesforce splunk integration in our salesforce sandbox. We followed the documentation provided by splunk and have added the Salesforce add and was able to authenticate successfully.  We have configured the inputs with the oAuth authentication and validated successfully.  However we do not see any logs captured in our splunk and additionally we see the following in the logs, 

Splunk Log : 2022-10-10 20:54:56,778 INFO pid=28611 tid=MainThread file=input_module_sfdc_event_log.py:collect_events:333 | [stanza_name=Test_Event_Logs] Collecting events started.
2022-10-10 20:54:56,779 WARNING pid=28611 tid=MainThread file=sfdc_common.py:key_configured:223 | [stanza_name=Test_Event_Logs] Salesforce refresh_token is not configured for account "Sandbox_POC". Add-on is going to exit.

any advice is greatly appreciated

0 Karma

sekhar463
Path Finder

hai  did you got any solution.

we are planning t integrate to pull data from salesforce

can you let me know he process or is it by add on

0 Karma
Get Updates on the Splunk Community!

Congratulations to the 2025-2026 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...

[Puzzles] Solve, Learn, Repeat: Nested loops in Event Conversion

This challenge was first posted on Slack #puzzles channelFor a previous puzzle, I needed a set of fixed-length ...

Your Guide to Splunk Digital Experience Monitoring

A flawless digital experience isn't just an advantage, it's key to customer loyalty and business success. But ...