For the complete documentation index, see llms.txt. This page is also available as Markdown.

Salesforce

Configure the Salesforce data source and connector for Cortex XSIAM.

You can configure collecting Salesforce logs and data using a standard collector, content pack integration (onboarded prior to July 26, 2026), or connector:

Collection Method
Description

Standard collector overview

Ingests Audit Trail and Security Monitoring event logs, including:

  • Login history

  • Setup audit trail

  • Flow Execution events

  • Transaction Security events

  • Content Distribution events

  • Package Install events

Link to standard collector

Link to content pack/integration details (onboarded prior to July 26, 2026)

Includes the:

  • SalesforceV2 content pack, which provides CRM services and automations and contains the Salesforce v2 (Community Contribution) integration.

  • Salesforce Fusion content pack, which executes CRUD operations for employee lifecycle processes and contains the Salesforce Fusion IAM integration.

Link to connector

Salesforce connector: Uses the Salesforce content pack to provide full CRM services for data security, automation and remediation, security posture, and identity posture. Includes the following integrations:

  • Salesforce IAM: Performs Identity Lifecycle Management operations.

  • Salesforce: Provides CRM services.

Last updated

Was this helpful?