You can configure collecting Salesforce logs and data using a standard collector, content pack integration (onboarded prior to July 26, 2026), or connector:
| Collection Method | Description |
| --------------------------------------------------------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| Standard collector overview | <p>Ingests Audit Trail and Security Monitoring event logs, including:</p><ul><li>Login history</li><li>Setup audit trail</li><li>Flow Execution events</li><li>Transaction Security events</li><li>Content Distribution events</li><li>Package Install events</li></ul> |
| Link to standard collector | [Ingest logs and data from Salesforce](salesforce/ingest-logs-and-data-from-salesforce) |
| Link to content pack/integration details (onboarded prior to July 26, 2026) | <p>Includes the:</p><ul><li><a href="https://cortex.marketplace.pan.dev/marketplace/details/SalesforceV2/">SalesforceV2</a> content pack, which provides CRM services and automations and contains the Salesforce v2 (Community Contribution) integration.</li><li><a href="https://cortex.marketplace.pan.dev/marketplace/details/SalesforceFusion/">Salesforce Fusion</a> content pack, which executes CRUD operations for employee lifecycle processes and contains the Salesforce Fusion IAM integration.</li></ul> |
| Link to connector | <p><a href="salesforce/ingest-and-run-salesforce-automation-and-remediation">Salesforce connector</a>: Uses the <a href="https://cortex.marketplace.pan.dev/marketplace/details/Salesforce/">Salesforce</a> content pack to provide full CRM services for data security, automation and remediation, security posture, and identity posture. Includes the following integrations:</p><ul><li>Salesforce IAM: Performs Identity Lifecycle Management operations.</li><li>Salesforce: Provides CRM services.</li></ul> |