Welcome to the new Splunkbase! To return to the old Splunkbase, click here.
CCX Extensions for Salesforce app icon

CCX Extensions for Salesforce

About Us: CyberCX is Australia’s greatest force of cyber security experts. Our highly skilled professional services team operates a 24x7 on-shore security operations centre (SOC) servicing corporate and public sector organisations across Australia and New Zealand, specialising in Security Operations services leveraging Splunk.

splunk product badge

Latest Version 1.0.6
August 24, 2025
Compatibility
Not Available
Platform Version: 10.0, 9.4, 9.3, 9.2, 9.1
CIM Version: 6.x, 5.x
Rating

0

(0)

Log in to rate this app
Support
CCX Extensions for Salesforce support icon
Developer Supported addon
About Us: CyberCX is Australia’s greatest force of cyber security experts. Our highly skilled professional services team operates a 24x7 on-shore security operations centre (SOC) servicing corporate and public sector organisations across Australia and New Zealand, specialising in Security Operations services leveraging Splunk. Description: The CCX Extensions for Salesforce looks to provide additional field extraction and CIM compliance for for Salesforce log sources captured via the Add-ons Splunk Add-on for Salesforce or Splunk Add-on for Salesforce Streaming API. This Technical Add-on does not replace the public Splunk Add-on for for Salesforce (https://splunkbase.splunk.com/app/3549) or Splunk Add-on for Salesforce Streaming API (https://splunkbase.splunk.com/app/5689) but works as an additonal extension to be deployed on Search Heads (only). Currently this add-on provides additional extraction and CIM compliance for sourcetypes: - sfdc:loginhistory - sfdc:setupaudittrail - sfdc:logfile - sfdc-streaming-api-events:login - sfdc-streaming-api-events:report - sfdc-streaming-api-events:security Fully compatible with Splunk Enterprise and Splunk Cloud, built by an Ops team for Ops teams. Features: - This TA currently supports logtypes for Splunk Add-on for Salesforce tagged under the following CIM datamodels: Alerts, Authentication, Change, Data Access, and Web - This TA currently supports logtypes for Splunk Add-on for Salesforce Streaming API tagged under the following CIM datamodels: Alerts, Authentication, Data Access, and Instrusion Detection (IDS)

Categories

Created By

Henrique Linsmeyer

Type

addon

Downloads

449

Resources

Log in to report this app listing