can we have multiple salesforce connections to single instance of SPLUNK Cloud

[satyatej18]

Hi Team.

We are planning to use SPLUNK Cloud for reporting on Event Logs from Salesforce.

I would like to understand if we can use single SPLUNK cloud instance sourcing data from multiple Salesforce sandboxes.

Please let us know if this is possible.

Regards,
Satya

[esix_splunk]

The Salesforce TA has the ability to have multiple inputs, which are tied to your SFDC api key. So yes, you should be able to query multiple accounts and see them. You may need to adjust the sourcetype definition so they all don't come in as the default sourcetype. (I cant say Ive seen this done before though.)

[satyatej18]

Hi esix,

I am not sure if I understand.

Let me rephrase my query.

I have 3 different salesforce environments and have only one splunk cloud instance. Can I load event logs from all the 3 Salesforce environments and report onto SPLUNK?

Attaching the screenshot for the SFDC app on SPLUNK Cloud. [I cannot see multiple setups here]

Regards,
Satya