Integrate Salesforce. EventTracker v8.x and above

Similar documents
Integrate Veeam Backup and Replication. EventTracker v9.x and above

Integrate Dell FORCE10 Switch

SECURE FILE TRANSFER PROTOCOL. EventTracker v8.x and above

Integrate Microsoft ATP. EventTracker v8.x and above

Integrate Palo Alto Traps. EventTracker v8.x and above

Integrate Symantec Messaging Gateway. EventTracker v9.x and above

Integrating Barracuda SSL VPN

Integrate Sophos Appliance. EventTracker v8.x and above

Integrate Bluecoat Content Analysis. EventTracker v9.x and above

Integrate Barracuda Spam Firewall

Integrate Microsoft Office 365. EventTracker v8.x and above

Integrate NGINX. EventTracker v8.x and above

Integrate Sophos UTM EventTracker v7.x

Integration of Phonefactor or Multi-Factor Authentication

Receive and Forward syslog events through EventTracker Agent. EventTracker v9.0

Integrate Saint Security Suite. EventTracker v8.x and above

Integrate Sophos Enterprise Console. EventTracker v8.x and above

Integrate HP ProCurve Switch

Integrating Imperva SecureSphere

Integrating Terminal Services Gateway EventTracker Enterprise

Integrate Microsoft Antimalware. EventTracker v8.x and above

Integrate Fortinet Firewall. EventTracker v8.x and above

Integrate Windows PowerShell

Integrate Akamai Web Application Firewall EventTracker v8.x and above

How To Embed EventTracker Widget to an External Site

Integrate EMC Isilon. EventTracker v8.x and above

Integrating Cisco Distributed Director EventTracker v7.x

Integrate IIS SMTP server. EventTracker v8.x and above

Integrate TippingPoint EventTracker Enterprise

Integrating Microsoft Forefront Unified Access Gateway (UAG)

Integrate F5 BIG-IP LTM

Integrate Cisco IronPort Security Appliance (ESA)

Port Configuration. Configure Port of EventTracker Website

Integrate pfsense EventTracker Enterprise

Integrate Malwarebytes EventTracker Enterprise

Integrate Cb Defense. EventTracker v8.x and above

Integrate Meraki WAP. EventTracker Enterprise. EventTracker 8815 Centre Park Drive Columbia MD

Product Update: ET82U16-029/ ET81U EventTracker Enterprise

Integrate Aventail SSL VPN

Integrate MySQL Server EventTracker Enterprise

Integrate VMware ESX/ESXi and vcenter Server

Integrating Cyberoam UTM

Integrate Juniper Secure Access VPN

Integrate Citrix NetScaler

Integrate Citrix Access Gateway

Integrate Viper business antivirus EventTracker Enterprise

Integrate Trend Micro InterScan Web Security

Integrate Microsoft Hyper-V Server

Integrate Cisco IOS Publication Date: April 15, 2016

EventTracker v7.x. Integrating Cisco Catalyst. EventTracker 8815 Centre Park Drive Columbia MD

8815 Centre Park Drive Columbia MD Publication Date: Dec 04, 2014

Integrate Check Point Firewall. EventTracker v8.x and above

Integrate A10 ADC Publication Date: September 3, 2015

Integrate McAfee Firewall Enterprise VPN

Geolocation and hostname resolution while Elasticsearch indexing. Update Document

Integrate Trend Micro Control Manager. EventTracker v8.x and above

Enhancement in Agent syslog collector to resolve sender IP Address EventTracker Enterprise

Enhancement in Network monitoring to monitor listening ports EventTracker Enterprise

Integrate Microsoft IIS

Integrate Cisco Sourcefire

How to Configure ASA 5500-X Series Firewall to send logs to EventTracker. EventTracker

Integrating Microsoft Forefront Threat Management Gateway (TMG)

Integrating LOGbinder SP EventTracker v7.x

Integrate Cisco VPN Concentrator

IIS Web Server Configuration Guide EventTracker v9.x

EventTracker Upgrade Guide. Upgrade to v9.0

Integrate APC Smart UPS

Integrate Apache Web Server

Integrate Cisco Switch

Service Pack ET90U Feature Document

Feature List. EventTracker v9.0

EventTracker v8.2. Install Guide for EventTracker Log Manager. EventTracker 8815 Centre Park Drive Columbia MD

Configuring TLS 1.2 in EventTracker v9.0

Agent Installation Using Smart Card Credentials Detailed Document

Event Correlator. EventTracker v8.x

Integrate Routing and Remote Access Service (RRAS) EventTracker v8.x and above

Feature List. EventTracker v7.6. EventTracker 8815 Centre Park Drive Columbia MD Publication Date: Sep 15, 2014

IIS Web Server Configuration Guide EventTracker v8.x

Secure IIS Web Server with SSL

Security Scorecard in Flex Dashboard

Integrate WatchGuard XTM. EventTracker Enterprise

Enable Auditing in Open LDAP on Linux Server

EventTracker: Backup and Restore Guide Version 9.x

Integrate Kaspersky Security Center

Installation Guide. EventTracker Enterprise. Install Guide Centre Park Drive Publication Date: Aug 03, U.S. Toll Free:

Monitoring SharePoint 2007/ 2010/ 2013 Server using EventTracker

Remote Indexing Feature Guide

Agent health check enhancements Detailed Document

Upgrade Guide. Upgrading to EventTracker v6.4 b50. Upgrade Guide Centre Park Drive Publication Date: Feb 17, 2010.

Installation Guide Install Guide Centre Park Drive Publication Date: Feb 11, 2010

Upgrade Guide. Upgrading to EventTracker v6.4 b50. Upgrade Guide Centre Park Drive Publication Date: Feb 17, 2010.

Upgrade Guide. Upgrading to EventTracker v7.1 Enterprise. Upgrade Guide Centre Park Drive Publication Date: Apr 11, 2011.

Upgrade Guide. Upgrading to EventTracker v6.4 b50. Upgrade Guide Centre Park Drive Publication Date: Feb 17, 2010.

Process Termination. Feature Guide

Agent Direct Log Archiver Configuration Guide

Integrate Clavister Firewall

Integrate Grizzly steppe attacks detection script

Configure Alerts. EventTracker v6.x. EventTracker 8815 Centre Park Drive Columbia MD Publication Date: Jun 12, 2009

EventVault Introduction and Usage Feature Guide Version 6.x

New Features Guide EventTracker v6.2

Transcription:

EventTracker v8.x and above Publication Date: March 27, 2019

Abstract This guide provides instructions to configure Salesforce, to report its logs to EventTracker Enterprise. Scope The configurations detailed in this guide are consistent with EventTracker Enterprise version 9.X and later, and Salesforce Lightning Platform. Audience Administrators, who wish to monitor Salesforce using EventTracker Enterprise. The information contained in this document represents the current view of Netsurion. on the issues discussed as of the date of publication. Because Netsurion must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Netsurion, and Netsurion cannot guarantee the accuracy of any information presented after the date of publication. This document is for informational purposes only. Netsurion MAKES NO WARRANTIES, EXPRESS OR IMPLIED, AS TO THE INFORMATION IN THIS DOCUMENT. Complying with all applicable copyright laws is the responsibility of the user. Without limiting the rights under copyright, this paper may be freely distributed without permission from Netsurion, if its content is unaltered, nothing is added to the content and credit to Netsurion is provided. Netsurion may have patents, patent applications, trademarks, copyrights, or other intellectual property rights covering subject matter in this document. Except as expressly provided in any written license agreement from Netsurion, the furnishing of this document does not give you any license to these patents, trademarks, copyrights, or other intellectual property. The example companies, organizations, products, people and events depicted herein are fictitious. No association with any real company, organization, product, person or event is intended or should be inferred. 1

2019 Netsurion. All rights reserved. The names of actual companies and products mentioned herein may be the trademarks of their respective owners. Table of Contents Abstract... 1 Scope... 1 Audience... 1 Overview... 4 Prerequisites... 4 Configure Salesforce to forward logs to EventTracker... 4 To configure the Salesforce to forward logs to a syslog server... 4 Creating Connected Apps... 4 To obtain a security token... 7 To configure Salesforce EventTracker Integrator... 8 EventTracker Knowledge Pack... 10 Flex Reports... 10 Alerts... 11 Knowledge Objects... 11 Import Salesforce knowledge pack into EventTracker... 11 Alerts... 12 Knowledge Objects... 13 Flex Reports... 14 Dashlets... 15 Verify Salesforce knowledge pack in EventTracker... 18 Alerts... 18 Knowledge Objects... 18 Flex Reports... 19 Dashlets... 19 Sample Dashboards... 20 2

3

Overview The Salesforce Lightning Platform delivers tools and services to automate your business processes, integrate with external applications, provide responsive layouts and more. From no-code builders to pro-code tools, the Lightning Platform's enterprise services and metadata-driven, multi-tenant cloud architecture means that you can focus on what makes your business better from the competition. EventTracker integrate and examines logs generated by Salesforce to help an administration to monitor Salesforce events. Prerequisites Administrative access to Salesforce Lightning Platform. PowerShell version 5.0 is required. Configure Salesforce to forward logs to EventTracker To configure the Salesforce to forward logs to a syslog server Creating Connected Apps In Lightning Experience, 1. Log into Salesforce. Click Settings > Setup in the upper right, next to your account name. Figure 1 4

2. Navigate to Platform Tools > Apps. Under App Manager, click New Connected App: Figure 2 3. While using Salesforce Classic, from Setup, enter Apps in the Quick Find box, then select Build > Create > Apps. Under Connected Apps, click New. 4. Enter the required basic information (Connected App Name, API Name and Contact Email). Connected App Name: Eventtracker Logger API Name: Eventtracker Logger Contact Email: (your email id) 5

Figure 3 5. Select Enable OAuth Settings under API (Enable OAuth Settings). 6. Enter your callback URL: (https://your_domain/login/callback) Example: (https://localhost/login/callback) 7. Access and manage your data (api) - Allows access to the logged-in user s account using APIs, such as REST API and Bulk API. This value also includes chatter api, which allows access to Chatter REST API resources. 8. When you are finished entering the information, click Save. You can now publish your app 9. Once your app is registered, the page will display your Consumer Key and Consumer Secret: Consumer Key: A value used by the consumer to identify itself to Salesforce, referred to as client_id 6

Consumer Secret: A secret used by the consumer to establish ownership of the consumer key, referred to as client_secret To obtain a security token Figure 4 1. In Lighting Experience. Go to Settings > My Personal Information > Reset My Security Token. Figure 5 2. Click Reset Security Token. The new security token is sent to the email address in your Salesforce personal settings. 7

Figure 6 NOTE: A new security token is emailed when password is reset, or the token can be reset separately. Once token is reset, old token cannot be used in API applications and desktop clients. To configure Salesforce EventTracker Integrator 1. Get salesforce integration from the EventTracker support. 2. Extract the salesforce_integration.zip in the folder. 3. Run SalesForce Integrator.exe with adminitrator privillage Figure 7 4. Select the location and click install to extract the files to system. 8

Figure 8 5. Fill the details in the Salesforce Integrator Form, which is shown below: Figure 9 5. Kindly fill the following details in integration form API Cliend ID is the Consumer Key we got from app creation API key is the Consumer Secret we got from app creation User name: user who privilege to view event Password: Password for the user Security code: we obtain from the previous methods 9

InstanceURL : example (https://example.my.salesforce.com) replace example.my.salesforce.com with your salesforce instance url System Name: Is the name of the system where salesforce logs will be collected under EventTracker. 6. Click OK button. 7. Once Salesforce is configured. You will get the message as shown in below image. EventTracker Knowledge Pack Figure 10 Once logs are received into EventTracker Categories, Alerts, Reports and Dashboards can be configured into EventTracker. The following Knowledge Packs are available in EventTracker to support Salesforce monitoring. Flex Reports Salesforce User Login Details This report provides information related to user login activities like (login success, failure and logout). Report Sample: Figure 11 10

Sample Log: Figure 12 Alerts Salesforce: User Login Failed - This alert is generated when user login failed events has been detected. Knowledge Objects Salesforce All Events - This knowledge object helps to analyze logs related to Salesforce Events which were generated. Import Salesforce knowledge pack into EventTracker NOTE: Import knowledge pack items in the following sequence: Alerts Knowledge Objects Flex Reports Dashboards 1. Launch EventTracker Control Panel. 11

2. Double click Export Import Utility. Figure 13 3. Click the Import tab. Alerts 1. Click Alert option, and then click the browse button. Figure 14 2. Locate Alert_ Salesforce.isalt file, and then click the Open button. 12

3. To import alerts, click the Import button. Figure 15 4. Click OK, and then click the Close button. Knowledge Objects 1. Click Knowledge objects under Admin option in the EventTracker manager page. 2. Locate the KO_ Salesforce.etko file. 3. Click the Upload option. 4. Now select all the check box and then click on Import option. Figure 16 5. Knowledge objects are now imported successfully. 13

Figure 17 6. Click OK, and then click the Close button. Flex Reports On EventTracker Control Panel, 1. Click Reports option, and select new (*.etcrx) from the option. Figure 18 2. Locate the Flex Report_ Salesforce.etcrx file and select all the check box. 14

Figure 19 3. Click the Import button to import the reports. EventTracker displays success message. 4. Click OK, and then click the Close button. Dashlets Figure 20 In EventTracker 9.0, we have added a new feature which will help to import/export of dashlet. Following is the procedure for the same: 1. Login into EventTracker Enterprise Web console. 15

Figure 21 2. Go to My Dashboard option. Figure 22 3. Click import button and select.etwd File. Figure 23 16

Figure 24 4. Click upload and select Dashboard which you want to import. Figure 25 5. Click Import button. It will upload all selected dashboards. 17

Verify Salesforce knowledge pack in EventTracker Alerts 1. In the EventTracker Enterprise web interface, click the Admin dropdown, and then click Alerts. 2. In search box, enter Salesforce and then click the Search button. EventTracker displays alert of Salesforce. Knowledge Objects Figure 26 1. In the EventTracker Enterprise web interface, click the Admin dropdown, and then click Knowledge Objects. 2. In the Knowledge Object tree, expand Salesforce group folder to view the imported Knowledge objects. Figure 27 18

Flex Reports 1. In the EventTracker Enterprise web interface, click the Reports menu, and then select Report Configuration. Figure 28 2. In Reports Configuration pane, select Defined option. 3. Click Salesforce group folder to view the imported Salesforce reports. Dashlets Figure 29 1. Logon to EventTracker Enterprise. 2. Click the Dashboard menu, and then My Dashboard. 3. Then click Customize Dashlet button and search for Salesforce 19

Figure 30 Sample Dashboards Title: Salesforce Event Details Figure 31 20

Title : Salesforce All Event Details Figure 32 Title : Salesforce User Login Details By Status Figure 33 21

Title: Salesforce User Login Details By URI Title : Salesforce User Login Details By Geo Location Figure 34 Figure 35 22