Hi sarweins, I have started implementing the Splunk App for our daily monitoring activities. I am quite confused on below point: Splunk Add-On : Under Configuration, I will give the domain(login.salesforce.com) ,as currently we are testing in Developer instance. Username & Password : will be specific to Salesforce Admin's details With these details configured, I can monitor the entire users Login activities. Dashboards: Only Admin's downloads and access is tracked. What should be done to track all users' activities. Can you help me on this.. Thanks Much!! ... View more

Did you get the SetUpAuditTrail logs to Splunk? I am facing the same issue ... View more