Get Event Monitoring Content from a Record

Use the sObject Blob Retrieve resource to retrieve BLOB data for a given record.

Example

You can use REST API to retrieve BLOB data for event monitoring. Use a GET request similar to this:

1curl https://MyDomainName.my.salesforce.com/services/data/v68.0/sobjects/EventLogFile/0ATD000000000pyOAA/LogFile -H "Authorization: Bearer token"

Example response body

Event monitoring content is returned in binary form. Note that the response content type won’t be JSON or XML because the returned data is binary.

1HTTP/1.1 200 OK
2Date: Tue, 06 Aug 2013 16:46:10 GMT
3Sforce-Limit-Info: api-usage=135/5000
4Content-Type: application/octetstream
5Transfer-Encoding: chunked
6"EVENT_TYPE", "ORGANIZATION_ID", "TIMESTAMP","USER_ID", "CLIENT_IP",
7"URI", "REFERRER_URI", "RUN_TIME"
8"URI", "00DD0000000K5xD", "20130728185606.020", "005D0000001REDy",
9"10.0.62.141", "/secur/contentDoor", "https-//login-salesforce-com/",
10"11"
11"URI", "00DD0000000K5xD", "20130728185556.930", "005D0000001REI0",
12"10.0.62.141", "/secur/logout.jsp", "https-//MyDomainName-my-salesforce-com/00O/o",
13"54"
14"URI", "00DD0000000K5xD", "20130728185536.725", "005D0000001REI0",
15"10.0.62.141", "/00OD0000001ckx3",
16"https-//MyDomainName-my-salesforce-com/00OD0000001ckx3", "93"