Skip to content

Commit c45ccf5

Browse files
srikarshastrySrikar Shastry
srikarshastry
and
Srikar Shastry
authored
[SalesforceAuditLogs] - v3.5.0 to promote connector to GA (#14750)
Co-authored-by: Srikar Shastry <Srikar.Sistla@microsoft.com>
1 parent 6e9fb4f commit c45ccf5

6 files changed

Lines changed: 27 additions & 26 deletions

File tree

‎Solutions/Salesforce Service Cloud/Data Connectors/SalesforceAuditLogsConnector_CCF/SalesforceAuditLogs_DataConnectorDefinition.json‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -26,7 +26,7 @@
2626
"sampleQueries": [
2727
{
2828
"description": "All Setup Audit Trail Events",
29-
"query": "{{graphQueriesTableName}}\n | take 10"
29+
"query": "SalesforceAuditTrail\n | take 10"
3030
},
3131
{
3232
"description": "All Login History Events",
@@ -49,7 +49,7 @@
4949
}
5050
],
5151
"availability": {
52-
"isPreview": true,
52+
"isPreview": false,
5353
"status": 1
5454
},
5555
"permissions": {

‎Solutions/Salesforce Service Cloud/Data Connectors/SalesforceAuditLogsConnector_CCF/SalesforceAuditLogs_PollingConfig.json‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -2,7 +2,7 @@
22
{
33
"type": "Microsoft.SecurityInsights/dataConnectors",
44
"apiVersion": "2024-09-01",
5-
"name": "SalesforceAuditTrailPoller",
5+
"name": "[[concat('parameters('workspace')', '/Microsoft.SecurityInsights/','SalesforceAuditTrail' , uniqueString(parameters('friendlyName')) )]",
66
"location": "[parameters('workspace-location')]",
77
"kind": "RestApiPoller",
88
"properties": {
@@ -67,7 +67,7 @@
6767
{
6868
"type": "Microsoft.SecurityInsights/dataConnectors",
6969
"apiVersion": "2024-09-01",
70-
"name": "SalesforceLoginHistoryPoller",
70+
"name": "[[concat('parameters('workspace')', '/Microsoft.SecurityInsights/','SalesforceLoginHistory' , uniqueString(parameters('friendlyName')) )]",
7171
"location": "[parameters('workspace-location')]",
7272
"kind": "RestApiPoller",
7373
"properties": {

‎Solutions/Salesforce Service Cloud/Data/Solution_TSalesforceCloudtemplateSpec.json‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -20,7 +20,7 @@
2020
"Workbooks/SalesforceServiceCloud.json"
2121
],
2222
"BasePath": "C:\\GitHub\\Azure-Sentinel\\Solutions\\Salesforce Service Cloud\\",
23-
"Version": "3.4.2",
23+
"Version": "3.5.0",
2424
"Metadata": "SolutionMetadata.json",
2525
"TemplateSpec": true,
2626
"Is1PConnector": false

‎Solutions/Salesforce Service Cloud/Package/3.5.0.zip‎

60.5 KB
Binary file not shown.

‎Solutions/Salesforce Service Cloud/Package/mainTemplate.json‎

Lines changed: 21 additions & 21 deletions
Original file line numberDiff line numberDiff line change
@@ -55,7 +55,7 @@
5555
"email": "support@microsoft.com",
5656
"_email": "[variables('email')]",
5757
"_solutionName": "Salesforce Service Cloud",
58-
"_solutionVersion": "3.4.2",
58+
"_solutionVersion": "3.5.0",
5959
"solutionId": "azuresentinel.azure-sentinel-solution-salesforceservicecloud",
6060
"_solutionId": "[variables('solutionId')]",
6161
"analyticRuleObject1": {
@@ -80,7 +80,7 @@
8080
"_analyticRulecontentProductId3": "[concat(take(variables('_solutionId'),50),'-','ar','-', uniqueString(concat(variables('_solutionId'),'-','AnalyticsRule','-','3094e036-e5ae-4d6e-8626-b0f86ebc71f2','-', '1.0.4')))]"
8181
},
8282
"workspaceResourceId": "[resourceId('microsoft.OperationalInsights/Workspaces', parameters('workspace'))]",
83-
"dataConnectorCCPVersion": "3.4.2",
83+
"dataConnectorCCPVersion": "3.5.0",
8484
"_dataConnectorContentIdConnectorDefinition1": "SalesforceServiceCloudCCPDefinition",
8585
"dataConnectorTemplateNameConnectorDefinition1": "[concat(parameters('workspace'),'-dc-',uniquestring(variables('_dataConnectorContentIdConnectorDefinition1')))]",
8686
"_dataConnectorContentIdConnections1": "SalesforceServiceCloudCCPDefinitionConnections",
@@ -122,7 +122,7 @@
122122
"[extensionResourceId(resourceId('Microsoft.OperationalInsights/workspaces', parameters('workspace')), 'Microsoft.SecurityInsights/contentPackages', variables('_solutionId'))]"
123123
],
124124
"properties": {
125-
"description": "Salesforce-BruteForce_AnalyticalRules Analytics Rule with template version 3.4.2",
125+
"description": "Salesforce-BruteForce_AnalyticalRules Analytics Rule with template version 3.5.0",
126126
"mainTemplate": {
127127
"$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#",
128128
"contentVersion": "[variables('analyticRuleObject1').analyticRuleVersion1]",
@@ -150,10 +150,10 @@
150150
"status": "Available",
151151
"requiredDataConnectors": [
152152
{
153+
"connectorId": "SalesforceServiceCloudCCPDefinition",
153154
"dataTypes": [
154155
"SalesforceServiceCloud"
155-
],
156-
"connectorId": "SalesforceServiceCloudCCPDefinition"
156+
]
157157
}
158158
],
159159
"tactics": [
@@ -174,8 +174,8 @@
174174
}
175175
],
176176
"customDetails": {
177-
"EventStartTime": "FailureStartTime",
178177
"IPAddresses": "IpAddresses",
178+
"EventStartTime": "FailureStartTime",
179179
"EventEndTime": "SuccessEndTime"
180180
}
181181
}
@@ -231,7 +231,7 @@
231231
"[extensionResourceId(resourceId('Microsoft.OperationalInsights/workspaces', parameters('workspace')), 'Microsoft.SecurityInsights/contentPackages', variables('_solutionId'))]"
232232
],
233233
"properties": {
234-
"description": "Salesforce-PasswordSpray_AnalyticalRules Analytics Rule with template version 3.4.2",
234+
"description": "Salesforce-PasswordSpray_AnalyticalRules Analytics Rule with template version 3.5.0",
235235
"mainTemplate": {
236236
"$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#",
237237
"contentVersion": "[variables('analyticRuleObject2').analyticRuleVersion2]",
@@ -259,10 +259,10 @@
259259
"status": "Available",
260260
"requiredDataConnectors": [
261261
{
262+
"connectorId": "SalesforceServiceCloudCCPDefinition",
262263
"dataTypes": [
263264
"SalesforceServiceCloud"
264-
],
265-
"connectorId": "SalesforceServiceCloudCCPDefinition"
265+
]
266266
}
267267
],
268268
"tactics": [
@@ -338,7 +338,7 @@
338338
"[extensionResourceId(resourceId('Microsoft.OperationalInsights/workspaces', parameters('workspace')), 'Microsoft.SecurityInsights/contentPackages', variables('_solutionId'))]"
339339
],
340340
"properties": {
341-
"description": "Salesforce-SigninsMultipleCountries_AnalyticalRules Analytics Rule with template version 3.4.2",
341+
"description": "Salesforce-SigninsMultipleCountries_AnalyticalRules Analytics Rule with template version 3.5.0",
342342
"mainTemplate": {
343343
"$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#",
344344
"contentVersion": "[variables('analyticRuleObject3').analyticRuleVersion3]",
@@ -366,10 +366,10 @@
366366
"status": "Available",
367367
"requiredDataConnectors": [
368368
{
369+
"connectorId": "SalesforceServiceCloudCCPDefinition",
369370
"dataTypes": [
370371
"SalesforceServiceCloud"
371-
],
372-
"connectorId": "SalesforceServiceCloudCCPDefinition"
372+
]
373373
}
374374
],
375375
"tactics": [
@@ -6600,7 +6600,7 @@
66006600
"sampleQueries": [
66016601
{
66026602
"description": "All Setup Audit Trail Events",
6603-
"query": "{{graphQueriesTableName}}\n | take 10"
6603+
"query": "SalesforceAuditTrail\n | take 10"
66046604
},
66056605
{
66066606
"description": "All Login History Events",
@@ -6623,7 +6623,7 @@
66236623
}
66246624
],
66256625
"availability": {
6626-
"isPreview": true,
6626+
"isPreview": false,
66276627
"status": 1
66286628
},
66296629
"permissions": {
@@ -6998,7 +6998,7 @@
69986998
"sampleQueries": [
69996999
{
70007000
"description": "All Setup Audit Trail Events",
7001-
"query": "{{graphQueriesTableName}}\n | take 10"
7001+
"query": "SalesforceAuditTrail\n | take 10"
70027002
},
70037003
{
70047004
"description": "All Login History Events",
@@ -7021,7 +7021,7 @@
70217021
}
70227022
],
70237023
"availability": {
7024-
"isPreview": true,
7024+
"isPreview": false,
70257025
"status": 1
70267026
},
70277027
"permissions": {
@@ -7432,7 +7432,7 @@
74327432
}
74337433
},
74347434
{
7435-
"name": "[[concat(parameters('innerWorkspace'),'/Microsoft.SecurityInsights/', 'SalesforceAuditTrailPoller', parameters('guidValue'))]",
7435+
"name": "[[concat('parameters('workspace')', '/Microsoft.SecurityInsights/','SalesforceAuditTrail' , uniqueString(parameters('friendlyName')) )]",
74367436
"apiVersion": "2023-02-01-preview",
74377437
"type": "Microsoft.OperationalInsights/workspaces/providers/dataConnectors",
74387438
"location": "[parameters('workspace-location')]",
@@ -7497,7 +7497,7 @@
74977497
"condition": "[[contains(parameters('selectedDataTypes'), 'setupAuditTrail')]"
74987498
},
74997499
{
7500-
"name": "[[concat(parameters('innerWorkspace'),'/Microsoft.SecurityInsights/', 'SalesforceLoginHistoryPoller', parameters('guidValue'))]",
7500+
"name": "[[concat('parameters('workspace')', '/Microsoft.SecurityInsights/','SalesforceLoginHistory' , uniqueString(parameters('friendlyName')) )]",
75017501
"apiVersion": "2023-02-01-preview",
75027502
"type": "Microsoft.OperationalInsights/workspaces/providers/dataConnectors",
75037503
"location": "[parameters('workspace-location')]",
@@ -11694,7 +11694,7 @@
1169411694
"[extensionResourceId(resourceId('Microsoft.OperationalInsights/workspaces', parameters('workspace')), 'Microsoft.SecurityInsights/contentPackages', variables('_solutionId'))]"
1169511695
],
1169611696
"properties": {
11697-
"description": "SalesforceServiceCloud Data Parser with template version 3.4.2",
11697+
"description": "SalesforceServiceCloud Data Parser with template version 3.5.0",
1169811698
"mainTemplate": {
1169911699
"$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#",
1170011700
"contentVersion": "[variables('parserObject1').parserVersion1]",
@@ -11826,7 +11826,7 @@
1182611826
"[extensionResourceId(resourceId('Microsoft.OperationalInsights/workspaces', parameters('workspace')), 'Microsoft.SecurityInsights/contentPackages', variables('_solutionId'))]"
1182711827
],
1182811828
"properties": {
11829-
"description": "SalesforceServiceCloud Workbook with template version 3.4.2",
11829+
"description": "SalesforceServiceCloud Workbook with template version 3.5.0",
1183011830
"mainTemplate": {
1183111831
"$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#",
1183211832
"contentVersion": "[variables('workbookVersion1')]",
@@ -11910,7 +11910,7 @@
1191011910
"apiVersion": "2023-04-01-preview",
1191111911
"location": "[parameters('workspace-location')]",
1191211912
"properties": {
11913-
"version": "3.4.2",
11913+
"version": "3.5.0",
1191411914
"kind": "Solution",
1191511915
"contentSchemaVersion": "3.0.0",
1191611916
"displayName": "Salesforce Service Cloud",

‎Solutions/Salesforce Service Cloud/ReleaseNotes.md‎

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,6 @@
11
| **Version** | **Date Modified (DD-MM-YYYY)** | **Change History** |
22
|-------------|--------------------------------|--------------------------------------------------------------------|
3+
| 3.5.0 | 23-07-2026 | Marked Salesforce Audit Logs connector as GA and made poller resource names unique per connection. |
34
| 3.4.2 | 22-07-2026 | Updated **SalesforceRTEM connector** to use SELECT FIELDS(STANDARD) with corresponding DCR updates. |
45
| 3.4.1 | 22-07-2026 | Added SecureConnectionStart column to **Salesforce event log file CCP data connector** table schema and DCR transform. |
56
| 3.4.0 | 26-05-2026 | Added new **Real time event monitoring data connector** with 19 event types |

0 commit comments

Comments
 (0)