Thank you Euroa for your quick response. I have done everything that you had mentioned, but unfortunately the add-on for salesforce is not pulling any data from salesforce, but the input job runs successfully. Upon searching the log, found 500 error on Salesforce call- The response status=500 for request which url=https://login.salesforce.com/services/Soap/u/39.0/ and method=POST. Checked with Salesforce support and found that Salesforce is not getting any hit/request from Splunk. I followed the documentation and installed the TA as instructed. If you have 5 mins, can we do a live meeting? ... View more

Thank you Euroa! Are you using the Clound or the On-Prem version? Could you please throw more light on TA? I checked the credential from logging into the browser and salesforce dataloader - both works fine. In Splunk input config, Is the Security token is simply the token or the concatenation of Password and the security token? Also how can I test the salesforce credential in the Splunk add-on for salesforce? Don't seem to find that. Appreciate all your help! -Francis ... View more

Hi Euroa, We are using the Splunk Cloud and getting the following error - any idea? The response status=500 for request which url=https://login.salesforce.com/services/Soap/u/39.0/ and method=POST. Thanks, -Francis ... View more