Splunk Enterprise Security

Salesforce splunk integration- Why don't we see any logs?

rajwdc
New Member

We are configuring salesforce splunk integration in our salesforce sandbox. We followed the documentation provided by splunk and have added the Salesforce add and was able to authenticate successfully.  We have configured the inputs with the oAuth authentication and validated successfully.  However we do not see any logs captured in our splunk and additionally we see the following in the logs, 

Splunk Log : 2022-10-10 20:54:56,778 INFO pid=28611 tid=MainThread file=input_module_sfdc_event_log.py:collect_events:333 | [stanza_name=Test_Event_Logs] Collecting events started.
2022-10-10 20:54:56,779 WARNING pid=28611 tid=MainThread file=sfdc_common.py:key_configured:223 | [stanza_name=Test_Event_Logs] Salesforce refresh_token is not configured for account "Sandbox_POC". Add-on is going to exit.

any advice is greatly appreciated

0 Karma

sekhar463
Path Finder

hai  did you got any solution.

we are planning t integrate to pull data from salesforce

can you let me know he process or is it by add on

0 Karma
Get Updates on the Splunk Community!

[Puzzles] Solve, Learn, Repeat: Dynamic formatting from XML events

This challenge was first posted on Slack #puzzles channelFor a previous puzzle, I needed a set of fixed-length ...

Your Guide to Splunk Digital Experience Monitoring

A flawless digital experience isn't just an advantage, it's key to customer loyalty and business success. But ...

Data Management Digest – November 2025

  Welcome to the inaugural edition of Data Management Digest! As your trusted partner in data innovation, the ...