| Field |
Details |
| AVERAGE_ROW_SIZE |
- Type
- Number
- Description
- The average row size of all rows in the Report event, in bytes. A
large average size, coupled with a high
ROW_COUNT, can indicate that a user is
downloading information for fraudulent purposes. For example, a
salesperson who downloads all sales leads before departing for a
competitor.
- Example
- 700
|
| CLIENT_IP |
- Type
- String
- Description
- The IP address of the client that’s
using Salesforce services. A Salesforce internal IP
(such as a login from Salesforce Workbench or
AppExchange) is shown as “Salesforce.com IP”.
- Example
- 96.43.144.26
|
| CPU_TIME |
- Type
- Number
- Description
- The CPU time in milliseconds used to complete the request.
This field indicates the amount of activity taking place in
the app server layer.
|
| DB_BLOCKS |
- Type
- Number
- Description
- Indicates how much activity is occurring in the database. A
high value for this field suggests that adding indexes or
filters on your queries would benefit performance.
|
| DB_CPU_TIME |
- Type
- Number
- Description
- The CPU time in milliseconds to complete the request.
Indicates the amount of activity taking place in the
database layer during the request.
|
| DB_TOTAL_TIME |
- Type
- Number
- Description
- The time in nanoseconds for a database round trip. Includes
time spent in the JDBC driver, network to the database, and
DB_CPU_TIME. Compare this field to
CPU_TIME to determine whether
performance issues are occurring in the database layer or in
your own code.
|
| DISPLAY_TYPE |
- Type
- String
- Description
- The report display type, indicating the run mode of the
report.
- Possible Values
-
-
D:
Dashboard
-
S: Show
Details
-
H: Hide
Details
|
| ENTITY_NAME |
- Type
- String
- Description
- The name of the object affected by the trigger.
|
| EVENT_TYPE |
- Type
- String
- Description
-
The type of event. The value is
always Report.
|
| LOGIN_KEY |
- Type
- String
- Description
- The string that ties together all
events in a given user’s login session. It starts with a
login event and ends with either a logout event or the
user session expiring.
- Example
- GeJCsym5eyvtEK2I
|
| NUMBER_BUCKETS |
- Type
- Number
- Description
- The number of buckets that were used in the report.
|
| NUMBER_COLUMNS |
- Type
- Number
- Description
- The number of columns in the report.
|
| NUMBER_EXCEPTION_FILTERS |
- Type
- Number
- Description
- The number of exception filters that are used in the
report.
|
| ORGANIZATION_ID |
- Type
- Id
- Description
- The 15-character ID of the
organization.
- Example
- 00D000000000123
|
| ORIGIN |
- Type
- String
- Description
- The context in which the report executed, such as from a UI
(Classic, Lightning, Mobile), through an API (synchronous,
asynchronous, Apex), or through a dashboard.
- Possible Values
-
-
ReportOpenedFromMobileDashboard: Report executed
when a user clicked a dashboard component on a mobile device
and drilled down to a report.
-
DashboardComponentUpdated: Report executed when
a user refreshed a dashboard component.
-
DashboardComponentPreviewed: Report executed
from a Lightning dashboard component preview.
-
ReportRunUsingSynchronousApi: Report executed
from a synchronous API.
-
ReportRunUsingAsynchronousApi: Report executed
from an asynchronous API.
-
ReportRunUsingApexSynchronousApi: Report
executed from the synchronous Apex API.
-
ReportRunUsingApexAsynchronousApi: Report
executed from the asynchronous Apex API.
-
ReportExported: Report
executed from a printable view or report export that was not
asynchronous nor an API export.
-
ReportRunFromClassic:
Report executed from the Run Report option of Salesforce
Classic.
-
ReportRunFromMobile:
Report executed from the Run Report option of the mobile
Salesforce app.
-
ReportRunFromLightning:
Report executed from the Run option in Lightning Experience
from a non-mobile browser.
-
ReportRunFromRestApi:
Report executed from the REST API.
-
ReportPreviewed: Report
executed when a user got preview results while using the
report builder.
-
ReportScheduled: Report
was scheduled.
-
ProbeQuery: Report
executed from a probe query.
-
ReportRunFromReportingSnapshot: Report executed
through Snapshot Analytics.
-
ReportExportedAsynchronously: Report was
exported asynchronously.
-
ReportExportedUsingExcelConnector: Report was
exported using the Excel connector.
-
ChartRenderedOnVisualforcePage: Report executed
from a rendered chart on a VisualForce Page.
-
ChartRenderedInEmbeddedAnalyticsApp: Report
executed from a rendered chart in an embedded Analytics
app.
-
ReportRunAndNotificationSent: Report executed
through the notifications API.
-
ChartRenderedOnHomePage: Report executed from a
rendered chart on the home page.
-
ReportResultsAddedToWaveTrending: Report
executed when a user trended a report in Einstein Analytics.
-
ReportAddedToCampaign:
Report was added from an Add to Campaign action.
-
ReportResultsAddedToEinsteinDiscovery: Report
executed synchronously from Einstein Discovery.
-
Unknown: Report
execution origin is unknown.
-
Test: Report execution
resulted from a test.
|
| RENDERING_TYPE |
- Type
- String
- Description
- The report rendering type, describing the format of the
report output.
- Possible Values
-
-
W: Web
(HTML)
-
E: Email
-
P:
Printable
-
X: Excel
-
C:
Comma-separated values (CSV)
-
J: JavaScript
Object Notation (JSON)
-
D: Dummy
data
|
| REPORT_ID |
- Type
- Id
- Description
- The 15-character ID of the report that was run.
|
| REPORT_ID_DERIVED |
- Type
- Id
- Description
- The 18-character case insensitive ID of the report that was
run.
|
| REQUEST_ID |
- Type
- String
- Description
- The unique ID of a single
transaction. A transaction can contain one or more
events. Each event in a given transaction has the same
REQUEST_ID.
- Example
- 3nWgxWbDKWWDIk0FKfF5DV
|
| REQUEST_STATUS |
- Type
- String
- Description
- The status of the request for a page view or user interface
action.
- Possible Values
-
-
S: Success.
Salesforce handled the request successfully. If an
Apex controller throws an exception, this status is
also returned.
-
F: Failure.
Typically 4xx or 5xx HTTP codes, such as no
permission to view page, page took too long to
render, page is read-only.
-
U:
Undefined
-
A:
Authorization Error
-
R: Redirect.
Typically a 3xx HTTP code, possibly initiated by an
Apex controller in a Visualforce page.
-
N: Not Found.
404 error.
|
| ROW_COUNT |
- Type
- Number
- Description
- The number of rows that were processed in the Report event. High
row counts, coupled with a high
AVERAGE_ROW_SIZE, can indicate that a user
is downloading information for fraudulent purposes. For example, a
salesperson who downloads all sales leads before departing for a
competitor.
- Example
- 150
|
| RUN_TIME |
- Type
- Number
- Description
- The amount of time that the request
took in milliseconds.
|
| SESSION_KEY |
- Type
- String
- Description
- The user’s unique session ID. You
can use this value to identify all user events within a
session. When a user logs out and logs in again, a new
session is started.
- Example
- d7DEq/ANa7nNZZVD
|
| SORT |
- Type
- String
- Description
- The sort column and order that was used in the report.
|
| TIMESTAMP |
- Type
- String
- Description
- The access time of Salesforce
services.
- Example
- 20130715233322.670
|
| TIMESTAMP_DERIVED |
- Type
- DateTime
- Description
- The access time of Salesforce services in ISO8601-compatible
format (YYYY-MM-DDTHH:MM:SS.sssZ).
- Example
- 2015-07-27T11:32:59.555Z
|
| URI |
- Type
- String
- Description
- The URI of the page that’s receiving the request.
- Example
- /home/home.jsp
|
| URI_ID_DERIVED |
- Type
- ID
- Description
- The 18-character case insensitive ID of the URI of the page
that’s receiving the request.
|
| USER_ID |
- Type
- Id
- Description
- The 15-character ID of the user who’s
using Salesforce services through the UI or the
API.
- Example
- 00530000009M943
|
| USER_ID_DERIVED |
- Type
- Id
- Description
- The 18-character case insensitive ID of the user who’s using
Salesforce services through the UI or the API.
- Example
- 00590000000I1SNIA0
|
j