Salesforce

You can configure collecting Salesforce logs and data using a standard collector, content pack integration (onboarded prior to July 26, 2026), or connector:

Collection Method Description
Standard collector overview <p>Ingests Audit Trail and Security Monitoring event logs, including:</p><ul><li>Login history</li><li>Setup audit trail</li><li>Flow Execution events</li><li>Transaction Security events</li><li>Content Distribution events</li><li>Package Install events</li></ul>
Link to standard collector Ingest logs and data from Salesforce
Link to content pack/integration details (onboarded prior to July 26, 2026) <p>Includes the:</p><ul><li>SalesforceV2 content pack, which provides CRM services and automations and contains the Salesforce v2 (Community Contribution) integration.</li><li>Salesforce Fusion content pack, which executes CRUD operations for employee lifecycle processes and contains the Salesforce Fusion IAM integration.</li></ul>
Link to connector <p>Salesforce connector: Uses the Salesforce content pack to provide full CRM services for data security, automation and remediation, security posture, and identity posture. Includes the following integrations:</p><ul><li>Salesforce IAM: Performs Identity Lifecycle Management operations.</li><li>Salesforce: Provides CRM services.</li></ul>