search

elastic / integrations

Elastic Integrations
https://www.elastic.co/integrations
Other
194 stars 421 forks source link

[Salesforce] Support Additional Log Types #7506

Open SpencerLN opened 1 year ago

SpencerLN commented 1 year ago

Currently, the Salesforce integration only supports Apex, Login, Logout, and Setup Trail events, but Salesforce contains many other event types that are required for Security use-cases: https://developer.salesforce.com/docs/atlas.en-us.object_reference.meta/object_reference/sforce_api_objects_eventlogfile_supportedeventtypes.htm

In particular, we are interested in the below events, with AuraRequest being the highest priority item for us at the moment as it is not supported by the Salesforce Real Time Event Monitoring feature:

"API",
"ApexCallout",
"ApexExecution",
"ApexRestApi",
"ApexTrigger",
"ApexUnexpectedException",
"ApiTotalUsage",
"AsyncReportRun",
"AuraRequest",
"BulkApi",
"BulkApi2",
"Console",
"ContentDistribution",
"ContentDocumentLink",
"ContentTransfer",
"Dashboard",
"DocumentAttachmentDownloads",
"ExternalODataCallout",
"FlowExecution",
"KnowledgeArticleView",
"LightningError",
"LightningInteraction",
"LightningPageView",
"Login",
"LoginAs",
"Logout",
"MetadataApiOperation",
"MultiBlockReport",
"NamedCredential",
"OneCommerceUsage",
"PlatformEncryption",
"QueuedExecution",
"Report",
"ReportExport",
"RestApi",
"Sandbox",
"Search",
"SearchClick",
"Sites",
"TimeBasedWorkflow",
"TransactionSecurity",
"URI",
"VisualforceRequest"
elasticmachine commented 1 year ago

Pinging @elastic/security-external-integrations (Team:Security-External Integrations)

lalit-satapathy commented 1 year ago

CC: @SubhrataK to help clarify the plan.

botelastic[bot] commented 2 weeks ago

Hi! We just realized that we haven't looked into this issue in a while. We're sorry! We're labeling this issue as Stale to make it hit our filters and make sure we get back to it as soon as possible. In the meantime, it'd be extremely helpful if you could take a look at it as well and confirm its relevance. A simple comment with a nice emoji will be enough :+1. Thank you for your contribution!