Hi there, I'm trying to get Salesforce Login History into the SIEM or at least into Logstash so I can ship it to Elasticsearch.
I notice Logstash has a Salesforce Plugin, do you know if that has the ability to ship Login History?
Any suggestion on how I would approach this would be great.
Hey there @involuntary-pretzel. So I'm not entirely sure if the Saleforce Logstash plugin will be able to bring those in for you, so you may just want to try and see, although it appears to be in maintenance mode at this point so it would be unlikely that support is added. I've reached out to our ingest folks to see if there any way of getting this data in via beats or other means, and will report back. 
Cheers!
Garrett
© 2020. All Rights Reserved - Elasticsearch
Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.