Transaction Security Event Type

Transaction Security events contain details about policy execution. This event type is supported in API version 55.0 and later.

For details about event monitoring, see the Trailhead Event Monitoring module or REST API Developer’s Guide.

Fields 

BOT_IDENTIFIER 

• Type: String
• Description: The ID of the bot.

BOT_SESSION_IDENTIFIER 

• Type: String
• Description: The bot session ID.

CLIENT_IP 

• Type: String
• Description: The IP address of the client that is using Salesforce services. A Salesforce internal IP, such as a login from AppExchange, is shown as “Salesforce.com IP”.
• Example: 96.43.144.26

CPU_TIME 

• Type: Number
• Description: The CPU time in milliseconds used to complete the request. This field indicates the amount of activity taking place in the app server layer.

EVALUATION_TIME_MS 

• Type: Number
• Description: The time in milliseconds used to evaluate the policy.

EVENT_TIMESTAMP 

• Type: String
• Description: The time at which the Transaction Security event was generated in ISO8601-compatible format (YYYY-MM-DDTHH:MM:SS.sssZ). This value can be earlier than TIMESTAMP_DERIVED by the amount of time taken to log the event.
• Example: 2015-07-27T11:32:59.555Z

EVENT_TYPE 

• Type: String
• Description: The type of event. The value is always TransactionSecurity.

LOGIN_KEY 

• Type: String
• Description: The string that ties together all events in a given user’s login session. It starts with a login event and ends with either a logout event or the user session expiring.
• Example: GeJCsym5eyvtEK2I

ORGANIZATION_ID 

• Type: ID
• Description: The 15-character ID of the organization.
• Example: 00D000000000123

PLANNER_IDENTIFIER 

• Type: String
• Description: The ID of the agent planner.

POLICY_ID 

• Type: ID
• Description: The 15-character ID of the policy being evaluated.
• Example: 00530000009M943

POLICY_ID_DERIVED 

• Type: ID
• Description: The 18-character case-insensitive ID of the policy being evaluated.
• Example: 00590000000I1SNIA0

REQUEST_ID 

• Type: String
• Description: The unique ID of a single transaction. A transaction can contain one or more events. Each event in a given transaction has the same REQUEST_ID.
• Example: 3nWgxWbDKWWDIk0FKfF5DV

RESULT 

• Type: String
• Description: The outcome of evaluating the policy.
• Examples: TRIGGEREDzzz, NOT TRIGGERED

RUN_TIME 

• Type: Number
• Description: The amount of time that the request took in milliseconds.

SESSION_KEY 

• Type: String
• Description: The user’s unique session ID. You can use this value to identify all user events within a session. When a user logs out and logs in again, a new session is started.
• Example: d7DEq/ANa7nNZZVD

TIMESTAMP 

• Type: String
• Description: The access time of Salesforce services in GMT.
• Example: 20130715233322.670

TIMESTAMP_DERIVED 

• Type: DateTime
• Description: The access time of Salesforce services in ISO8601-compatible format (YYYY-MM-DDTHH:MM:SS.sssZ). The timezone is GMT.
• Example: 2015-07-27T11:32:59.555Z

URI 

• Type: String
• Description: The URI of the page that’s receiving the request.
• Example: /home/home.jsp

URI_ID_DERIVED 

• Type: ID
• Description: The 18-character case-insensitive ID of the URI of the page that’s receiving the request.

USER_ID 

• Type: ID
• Description: The 15-character ID of the user who is using Salesforce services through the UI or the API.
• Example: 00530000009M943

USER_ID_DERIVED 

• Type: ID
• Description: The 18-character case-insensitive ID of the user who is using Salesforce services through the UI or the API.
• Example: 00590000000I1SNIA0