How do i get the data from EventlogFile object, can any one help me the configuration part

[ManaswineeM]

Please post all product and debugging questions on our forum. Your questions will reach our wider community members there, and if we confirm that there is a bug, then we can open a new issue here.

For all general issues, please provide the following details for fast resolution:

• Version:
• Operating System:
• Config File (if you have sensitive info, please remove it):
• Sample Data:
• Steps to Reproduce:

[krishnaprasadhg]

Hello,

I'm able to get EventLogFile object data with the below configs. Can somebody help me how to get the logfile data? filter section is getting with 401 error since this requires bearer token.

input { salesforce { client_id => 'abcd' client_secret => 'fghjkl' username => 'fghjk' password => 'dfghjk' security_token => 'dfghjk' sfdc_object_name => 'EventLogFile' use_test_sandbox => 'true' api_version => '49.0' } } filter { rest { request => { url => "https://xyz.my.salesforce.com%{LogFile}" } target => 'rest' } } output { stdout { codec => rubydebug } }

[mkreth]

This is obviously late, but still: the data in Salesforce EventLogFiles is available after two Salesforce API calls, both of which need to be authenticated. The authentication is handled by the logstash-input-salesforce plugin in your first call of course, but the call in the filter is lacking the authentication. I don't know of a way to achieve this with this input plugin. You could however look at the community contribution https://github.com/abisek/logstash-input-sfdc_elf which aims to make EventLogFile data available.