packages/salesforce: add dashboards

packages/salesforce/changelog.yml

@@ -1,9 +1,12 @@
 # newer versions go on top
-- version: "0.15.0-next"
+- version: "0.15.0"
   changes:
-    - description: Revamp Salesforce integration to use new filebeat Salesforce input.
+    - description: Revamp Salesforce integration.
       type: enhancement
       link: https://github.com/elastic/integrations/pull/9629
+    - description: Add dashboards for the salesforce integration.
+      type: enhancement
+      link: https://github.com/elastic/integrations/pull/10341
 - version: "0.14.1"
   changes:
     - description: Update README with reindexing steps.

packages/salesforce/data_stream/logout/_dev/test/pipeline/test-logout-eventlogfile.log-expected.json

@@ -12,7 +12,7 @@
                 ],
                 "code": "4exLFFQZNa5xxFl1cJNwOV",
                 "dataset": "salesforce.logout",
-                "ingested": "2024-06-21T17:00:25.297824969Z",
+                "ingested": "2024-07-03T08:42:24.177314592Z",
                 "kind": "event",
                 "module": "salesforce",
                 "original": "{\"EVENT_TYPE\":\"Logout\",\"TIMESTAMP\":\"20211019050707.13\",\"REQUEST_ID\":\"4exLFFQZNa5xxFl1cJNwOV\",\"ORGANIZATION_ID\":\"00D5j000000VI3n\",\"USER_ID\":\"0056j000000utlQAAR\",\"USER_TYPE\":\"X\",\"SESSION_TYPE\":\"C\",\"SESSION_LEVEL\":\"1\",\"BROWSER_TYPE\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/94.0.4606.81 Safari/537.36\",\"PLATFORM_TYPE\":\"1015\",\"RESOLUTION_TYPE\":\"9999\",\"APP_TYPE\":\"1000\",\"CLIENT_VERSION\":\"9998\",\"API_TYPE\":\"fo\",\"API_VERSION\":\"54.0\",\"USER_INITIATED_LOGOUT\":\"1\",\"SESSION_KEY\":\"/b1/C123g6WXplkT\",\"LOGIN_KEY\":\"OK123uSUIZVr9YzF\",\"TIMESTAMP_DERIVED\":\"2021-10-19T05:07:07.128Z\",\"USER_ID_DERIVED\":\"0056j000000utlQAAR\",\"CLIENT_IP\":\"175.16.199.0\"}",
@@ -50,7 +50,7 @@
                         ]
                     },
                     "user_id": "0056j000000utlQAAR",
-                    "user_initiated_logout": "1"
+                    "user_initiated_logout": true
                 }
             },
             "source": {

packages/salesforce/data_stream/logout/_dev/test/pipeline/test-logout-object.log-expected.json

@@ -12,7 +12,7 @@
                 ],
                 "created": "2021-10-19T11:38:54.000Z",
                 "dataset": "salesforce.logout",
-                "ingested": "2024-06-21T17:00:25.429890746Z",
+                "ingested": "2024-07-03T08:42:24.226370926Z",
                 "kind": "event",
                 "module": "salesforce",
                 "original": "{\"EventDate\":\"2021-10-19T11:38:54Z\",\"EventIdentifier\":\"06ce4a9d-8d6b-4a71-aad8-04d28c9a43df\",\"SourceIp\":\"89.160.20.112\",\"CreatedById\":\"0055j000000q9s7AAA\",\"Username\":\"user.name@email.com\",\"UserId\":\"0056j000000utlQAAR\",\"RelatedEventIdentifier\":null,\"SessionKey\":\"6/HAElgoPCwskqBU\",\"CreatedDate\":\"2021-10-19T11:38:54Z\",\"LoginKey\":\"CuRVtbMjat6xxbTH\",\"SessionLevel\":\"STANDARD\"}",

packages/salesforce/data_stream/logout/elasticsearch/ingest_pipeline/eventlogfile.yml

@@ -175,10 +175,12 @@ processors:
       target_field: salesforce.logout.api.version
       ignore_missing: true
       ignore_failure: true
-  - rename:
-      field: json.USER_INITIATED_LOGOUT
-      target_field: salesforce.logout.user_initiated_logout
-      ignore_missing: true
+  - script:
+      lang: painless
+      source: >
+        if (ctx.json?.USER_INITIATED_LOGOUT != null) {
+          ctx.salesforce.logout.user_initiated_logout = ctx.json.USER_INITIATED_LOGOUT == '1';
+        }
       ignore_failure: true
   - rename:
       field: json.LOGIN_KEY

packages/salesforce/data_stream/logout/fields/fields.yml

@@ -84,9 +84,9 @@
             The 18-character case-safe ID of the user who's using Salesforce services through the UI or the API.
 
         - name: user_initiated_logout
-          type: keyword
+          type: boolean
           description: >
-            The value is 1 if the user intentionally logged out of the organization by clicking the Logout button. If the user's session timed out due to inactivity or another implicit logout action, the value is 0.
+            The value is true if the user intentionally logged out of the organization by clicking the Logout button. If the user's session timed out due to inactivity or another implicit logout action, the value is false.
 
         - name: user.roles
           type: keyword

packages/salesforce/docs/README.md

@@ -745,7 +745,7 @@ An example event for `logout` looks as following:
 | salesforce.logout.user.roles | The roles of the user who's using Salesforce services through the UI or the API. | keyword |
 | salesforce.logout.user_id | The 15-character ID of the user who's using Salesforce services through the UI or the API. | keyword |
 | salesforce.logout.user_id_derived | The 18-character case-safe ID of the user who's using Salesforce services through the UI or the API. | keyword |
-| salesforce.logout.user_initiated_logout | The value is 1 if the user intentionally logged out of the organization by clicking the Logout button. If the user's session timed out due to inactivity or another implicit logout action, the value is 0. | keyword |
+| salesforce.logout.user_initiated_logout | The value is true if the user intentionally logged out of the organization by clicking the Logout button. If the user's session timed out due to inactivity or another implicit logout action, the value is false. | boolean |
 
 
 ### SetupAuditTrail