Salesforce

The out of the box Salesforce dashboard in Datadog

Overview

Salesforce provides a customer relationship management service and a complementary suite of enterprise applications focused on customer service, marketing automation, analytics, and application development.

Integrate Salesforce with Datadog to:

  • View and parse your Salesforce user activity, platform access activity, and security logs using Datadog Log Management.
  • Set monitors on events from your Salesforce Platform.
  • Leverage the Datadog Security Platform to monitor and detect threats across your Salesforce Platform.
  • Monitor your Salesforce API usage to ensure you are operating under API limits.

Setup

Installation

No installation is required.

Configuration

To configure Salesforce to send data to Datadog, you need to have access to Salesforce Event Monitoring, enable storage on your Salesforce events, and connect your Salesforce org to Datadog.

Permissions

If you are using Salesforce Shield, you have the required permissions for all events. If you do not have Shield, you need the Event Monitoring add-on.

Enabling event storage

If you plan on using the platform or real-time events, you need to set this up in the Event Manager. This step is not required for event log file events.

  1. Log into your Salesforce account (using the Lightning interface).
  2. Search for Event Manager.
  3. On the Event Manager page, for each event you want to crawl, click the right arrow and select Enable Storage. You do not need to Enable Streaming. The list of supported events can be found under the Platform Events section in the Configuration tab of the Salesforce Integration tile.

Connecting your org

  1. Create a unique system account in your Salesforce org.

  2. Click New Production Org or New Sandbox Org in the Configuration tab of the Salesforce Integration tile.

  3. Set any custom tags you want to attach to these events as a comma-separated list. You can choose which events to enable.

    The success screen when you have successfully configured your Salesforce org on Datadog

  4. Click Save. This prompts you to log into your Salesforce account and grant Datadog access permissions.

  5. Once you have completed the login flow, return to the Salesforce Integration tile in Datadog. Your org includes out-of-the-box default tags.

    The success screen when you have successfully configured your Salesforce org on Datadog

  6. Select the tags you want to use and click Connect.

  7. Repeat these steps to connect your remaining organizations. You must have access to the organizations you are trying to add.

Note: A default tag is added with your Salesforce org ID, but you can edit the tags with something more meaningful to your company.

Adding Salesforce Custom Objects

Salesforce Custom Objects can be ingested into Datadog:

  1. On the Salesforce integration tile, open the Custom Objects section.
  2. Add one or more Custom Objects, in the Salesforce API format (CustomObject__c), separated by commas (CustomObject1__c, CustomObject2__c).
  3. Enable or disable these Custom Objects as you would other Salesforce events.

Custom Objects are ingested as logs, based on modification date. All Custom Object logs are automatically tagged with salesforce_custom_object:true.

Results

After some time, logs appear under the salesforce source. Salesforce writes the event log files infrequently, so it may take an hour or more for event log file-based events to appear in Datadog.

The Salesforce Log Stream widget in the out of the box Salesforce dashboard

Data Collected

Metrics

salesforce.limits.max
(gauge)		The maximum limit for this resource
salesforce.limits.remaining
(gauge)		The remaining limit for this resource

Logs

This integration will allow you to view logs generated from Salesforce user activity, platform access activity, and security using Datadog Log Management. For the full list of supported activity, see Real-Time Event Monitoring Data Storage and EventLogFile Events." This information can also be found on the Data Collected tab of your Salesforce Integration Tile.

Service Checks

The Salesforce integration does not include any service checks.

Events

This integration does not include any events.

Troubleshooting

If you encounter an The authenticated connection does not have access error in the Configuration tab, you may be missing permissions to access requested events. You can temporarily enable admin permissions for the Datadog role in Salesforce to confirm any missing access permissions.

At a minimum, the user must have the following permissions:

  • API Enabled
  • View Setup and Configuration
  • View Real-Time Event Monitoring Events
  • View Event Log Files
  • View Threat Detection Events

The user must also have read permission on any underlying event objects that are selected in the configuration.

Need help? Contact Datadog support.

Further reading

Additional helpful documentation, links, and articles:

Monitor Salesforce logs with DatadogBLOG more more