Salesforce

Overview

Salesforce provides a customer relationship management service and also provides a complementary suite of enterprise applications focused on customer service, marketing automation, analytics, and application development.

Integrate Salesforce with Datadog to:

  • View and parse your logs using Datadog Log Management.
  • Set monitors on events from your Salesforce Platform.
  • Leverage the Datadog Security Platform to monitor and detect threats across your Salesforce Platform.
  • Monitor your Salesforce API usage to ensure you are operating under API limits.

Setup

Installation

No installation is required.

Configuration

To configure Salesforce to send data to Datadog, you need to have access to Salesforce Event Monitoring, enable storage on your Salesforce events, and connect your Salesforce org to Datadog.

Permissions

If you are using Salesforce Shield, you have the required permissions for all events. If you do not have Shield, you need the Event Monitoring add-on.

Enabling event storage

If you plan on using the platform or real-time events, you need to set this up in the Event Manager. This step is not required for event log file events.

  1. Log into your Salesforce account (using the Lightning interface).
  2. Search for Event Manager.
  3. On the Event Manager page, for each event you want to crawl, click the right arrow and select Enable Storage. You do not need to Enable Streaming.
NameSubscription ChannelTypeDescriptionStreaming DataStoring Data
API Anomaly Event/event/ApiAnomalyEventEvent MonitoringTrack anomalies in how users make API calls
API Event/event/ApiEventStreamEvent MonitoringTrack user API queries in your org
Bulk API Result Event/event/BulkApiResultEventEvent MonitoringTrack when a user downloads the results of a Bulk API request
Concurrent Long Running Apex Error Event/event/ConcurLongRunApexErrEventEvent MonitoringTrack when a Concurrent Long Running Apex error has occurred
Credential Stuffing Event/event/CredentialStuffingEventEvent MonitoringTrack when a user successfully logs in to Salesforce during an identified credential stuffing attack
Identify Provider Event/event/IdentityProviderEventEvent MonitoringTrack identity provider activities
Identify Verification Event/event/IdentityVerificationEventEvent MonitoringTrack when users verify their identity
Lightning URI Event/event/LightningUriEventStreamEvent MonitoringTrack when a user creates, accesses, updates, or deletes a record in Salesforce Lightning
List View Event/event/ListViewEventStreamEvent MonitoringTrack when a user accesses data with list views
Login Event/event/LoginEventStreamEvent MonitoringTrack when a user logs in to your org
LoginAs Event/event/LoginAsEventStreamEvent MonitoringTrack when an admin logs in to your org as another user
Logout Event/event/LogoutEventStreamEvent MonitoringTrack when a user clicks Log Out in the Salesforce UI
Permission Set Event (Beta)/event/PermissionSetEventEvent MonitoringTrack when users are assigned the Modify All Data or View All Data permission
Report Anomaly Event/event/ReportAnomalyEventEvent MonitoringTrack anomalies in how users run or export reports
Report Event/event/ReportEventStreamEvent MonitoringTrack when a user accesses or exports data with reports
Session Hijacking Event/event/SessionHijackingEventEvent MonitoringTrack when an unauthorized user gains ownership of a Salesforce user’s session with a stolen session
URI Event/event/UriEventStreamEvent MonitoringTrack when a user creates, accesses, updates, or deletes a record in Salesforce Classic

Connecting your org

  1. Create a unique system account in your Salesforce org.

  2. Click New Production Org or New Sandbox Org in the Configuration tab of the Salesforce Integration tile.

  3. Set any custom tags you want to attach to these events as a comma-separated list. You can choose which events to enable.

    The success screen when you have successfully configured your Salesforce org on Datadog
  4. Click Save. This prompts you to log into your Salesforce account and grant Datadog access permissions.

  5. Once you have completed the login flow, return to the Salesforce Integration tile in Datadog. Your org includes out-of-the-box default tags.

    The success screen when you have successfully configured your Salesforce org on Datadog
  6. Select the tags you want to use and click Connect.

  7. Repeat these steps to connect your remaining organizations. You must have access to the organizations you are trying to add.

Note: A default tag is added with your Salesforce org ID, but you can edit the tags with something more meaningful to your company.

Results

After some time, logs appear under the salesforce source. It may take up to an hour for event log file-based events to appear.

Data Collected

Metrics

salesforce.limits.max
(gauge)
The maximum limit for this resource
salesforce.limits.remaining
(gauge)
The remaining limit for this resource

Events

For the full list of Log events, see Real-Time Event Monitoring Data Storage and EventLogFile Events.

Service Checks

The Salesforce integration does not include any service checks.

Troubleshooting

If you encounter an The authenticated connection does not have access error in the Configuration tab, you may be missing permissions to access requested events. You can temporarily enable admin permissions for the Datadog role in Salesforce to confirm any missing access permissions.

Need help? Contact Datadog support.