Our next-gen architecture is built to help you make sense of your ever-growing data. Watch a 4-min demo video!

Back to All Docs

Salesforce Salesforce

Last Updated: Jun. 06, 2024


Salesforce is a cloud-based CRM platform that empowers businesses to manage their sales operations, enhance customer engagement, and drive sales growth.

Integrate Salesforce with Coralogix to gain enhanced visibility and real-time monitoring of system events and logs. Salesforce generates detailed logs encompassing system activities, user interactions, and data changes, thereby offering valuable insights into the platform’s operations. By leveraging this integration, you can actively monitor your Salesforce environment, optimize its performance, and ensure adherence to security and compliance standards.

Users can choose which types of logs to monitor from a comprehensive list of options, including Platform Event logs and Event Log File logs. This customization empowers organizations to tailor their monitoring strategy according to their specific requirements, ensuring that critical events are promptly detected and addressed.


To proceed with the integration, you must have Salesforce administrator permissions.

For Platform Event logs, both of the following permissions are required:

  • Salesforce Shield or Salesforce Event Monitoring add-on subscription
  • View Real-Time Event Monitoring Data

For EventLogFile logs, you need both of the following permissions:

  • View Event Log Files or View All Data
  • API Enabled

Required Permissions

To configure this integration, users must have all of the following permissions:

integrationsReadConfigView Deployed IntegrationsView deployed integration packages.
integrationsManageManage IntegrationsDeploy, undeploy, and update integrations.

Find out more about roles and permissions here.


STEP 1. From your Coralogix toolbar, navigate to Data Flow > Integrations. Select Salesforce. Click Connect.

STEP 2. Click Add New.

STEP 3. Input the integration Settings, including the integration name, application, and subsystem name. By default, all logs for Platform Events and Event Log Files are selected to be sent to Coralogix. Remove those events you do not wish to monitor to avoid unnecessary costs.

STEP 4. Click Authorize. You will be redirected to the Salesforce portal, where you should save the settings and authorize the integration. Make sure to have the required Salesforce administrator permissions defined in the Prerequisites.

STEP 5. Revert back to the integration. Click Complete & Authorize.


Explore Salesforce activities by a specific user

Track all activities that a specific user performed in Salesforce to check for unexpected activity based on the user’s role.

In the Explore screen, follow these steps to explore all Salesforce activities done by a specific user:

  • Filter the logs by Subsystem = “Salesforce”.
  • Apply the query: Username:”john@bank.com”

Set alerts to detect suspicious activity

Set alerts and be notified of potential suspicious activity in Salesforce, which may violate the organization’s policy.

When setting up an alert, define the criteria for triggering it based on your organization’s Salesforce policy. For instance, assume that, on average, a salesperson is assigned to 5 customer accounts. Set an alert if one user accesses more than 20 different customer accounts in Salesforce within 1 day.


Refresh times for platform and log file events are 5 minutes and 60 minutes, respectively.


Need help?

Our world-class customer success team is available 24/7 to walk you through your setup and answer any questions that may come up.

Feel free to reach out to us via our in-app chat or by sending us an email to support@coralogix.com.

On this page