Overview

Salesforce provides a customer relationship management service and a complementary suite of enterprise applications focused on customer service, marketing automation, analytics, and application development.

Integrate Salesforce with Datadog to:

• View and parse your Salesforce user activity, platform access activity, and security logs using Datadog Log Management.
• Set monitors on events from your Salesforce Platform.
• Leverage the Datadog Security Platform to monitor and detect threats across your Salesforce Platform.
• Monitor your Salesforce API usage to ensure you are operating under API limits.

Setup

Installation

No installation is required.

Configuration

To configure Salesforce to send data to Datadog, you need to have access to Salesforce Event Monitoring, enable storage on your Salesforce events, and connect your Salesforce org to Datadog.

Permissions

If you are using Salesforce Shield, you have the required permissions for all events. If you do not have Shield, you need the Event Monitoring add-on.

Enabling event storage

If you plan on using the platform or real-time events, you need to set this up in the Event Manager. This step is not required for event log file events.

1. Log into your Salesforce account (using the Lightning interface).
2. Search for Event Manager.
3. On the Event Manager page, for each event you want to crawl, click the right arrow and select Enable Storage. You do not need to Enable Streaming. The list of supported events can be found under the Platform Events section in the Configuration tab of the Salesforce Integration tile.

Connecting your org

1. Create a unique system account in your Salesforce org.

2. Click New Production Org or New Sandbox Org in the Configuration tab of the Salesforce Integration tile.

3. Set any custom tags you want to attach to these events as a comma-separated list. You can choose which events to enable.

4. Click Save. This prompts you to log into your Salesforce account and grant Datadog access permissions.

5. Once you have completed the login flow, return to the Salesforce Integration tile in Datadog. Your org includes out-of-the-box default tags.

6. Select the tags you want to use and click Connect.

7. Repeat these steps to connect your remaining organizations. You must have access to the organizations you are trying to add.

Note: A default tag is added with your Salesforce org ID, but you can edit the tags with something more meaningful to your company.

Results

After some time, logs appear under the salesforce source. Salesforce writes the event log files infrequently, so it may take an hour or more for event log file-based events to appear in Datadog.

Data Collected

Metrics

Events

For the full list of Log events, see Real-Time Event Monitoring Data Storage and EventLogFile Events.

Service Checks

The Salesforce integration does not include any service checks.

Troubleshooting

If you encounter an The authenticated connection does not have access error in the Configuration tab, you may be missing permissions to access requested events. You can temporarily enable admin permissions for the Datadog role in Salesforce to confirm any missing access permissions.

At a minimum, the user must have the following permissions:

• API Enabled
• View Setup and Configuration
• View Real-Time Event Monitoring Events
• View Event Log Files
• View Threat Detection Events

The user must also have read permission on any underlying event objects that are selected in the configuration.

Need help? Contact Datadog support.

Further reading

Additional helpful documentation, links, and articles:

Monitor Salesforce logs with DatadogBLOG