Get Event Monitoring Content from a Record

Use the SObject Blob Retrieve resource to retrieve BLOB data for a given record.

Example

You can use Workbench to retrieve BLOB data for event monitoring. In the Execute text box, use a GET request similar to this: /services/data/v32.0/sobjects/EventLogFile/0ATD000000000pyOAA/LogFile.

Example response body

Event monitoring content is returned in binary form. Note that the response content type won’t be JSON or XML because the returned data is binary.

1HTTP/1.1 200 OK
2Date: Tue, 06 Aug 2013 16:46:10 GMT
3Sforce-Limit-Info: api-usage=135/5000
4Content-Type: application/octetstream
5Transfer-Encoding: chunked
6"EVENT_TYPE", "ORGANIZATION_ID", "TIMESTAMP","USER_ID", "CLIENT_IP",
7"URI", "REFERRER_URI", "RUN_TIME"
8"URI", "00DD0000000K5xD", "20130728185606.020", "005D0000001REDy",
9"10.0.62.141", "/secur/contentDoor", "https-//login-salesforce-com/",
10"11"
11"URI", "00DD0000000K5xD", "20130728185556.930", "005D0000001REI0",
12"10.0.62.141", "/secur/logout.jsp", "https-//na1-salesforce-com/00O/o",
13"54"
14"URI", "00DD0000000K5xD", "20130728185536.725", "005D0000001REI0",
15"10.0.62.141", "/00OD0000001ckx3",
16"https-//na1-salesforce-com/00OD0000001ckx3", "93"