Azure-Sentinel
Azure-Sentinel copied to clipboard
Salesforce connector - Azure Function Select query from Salesforce env is not working
Describe the bug
TimerInterval set by default as hourly,
The Azure Function have condition:
if interval == 'hourly':
query = "/services/data/v44.0/query?q=SELECT+Id+,+EventType+,+Interval+,+LogDate+,+LogFile+,+LogFileLength" +
"+FROM+EventLogFile" +
f"+WHERE+Interval+=+'Hourly'+and+CreatedDate+>+{past_time}"
elif interval == 'daily':
query = "/services/data/v44.0/query?q=SELECT+Id+,+CreatedDate+,+EventType+,+LogDate+,+LogFile+,+LogFileLength" + \
"+FROM+EventLogFile" + \
f"+WHERE+LogDate+>+{past_time}"
The salesforce env doesnt have Interval, so the Select with the interval==hourly not working and we get error back. When we changed the TimerInterval to daily, the select worked, and the Azure Function return success. Please note, the same connector with Salesforce Dev env, and hourly interval: worked. Please note, the same connector with Salesforce Enterprise/Prod env, and hourly interval: didnt worked.
To Reproduce Steps to reproduce the behavior:
- Go to Sentinel -> Connectors -> Salesforce and install Salesforce connector (remain with default setup)
- Go to Azure Functions-> Functions -> SalesforceSentinelConnector -> Monitor -> and check the status of the calls
- If error 400 exits, with sytext: File list getting failed
- Go to Function->Configuration-> Application Settings-> check the status of timeIntervl
Expected behavior The Function will connect without errors
Screenshots
If applicable, add screenshots to help explain your problem.
Additional context
Add any other context about the problem here.
Thank you for submitting an Issue to the Azure Sentinel GitHub repo! You should expect an initial response to your Issue from the team within 5 business days. Note that this response may be delayed during holiday periods. For urgent, production-affecting issues please raise a support ticket via the Azure Portal.
Thank you for submitting an Issue to the Azure Sentinel GitHub repo! You should expect an initial response to your Issue from the team within 5 business days. Note that this response may be delayed during holiday periods. For urgent, production-affecting issues please raise a support ticket via the Azure Portal.
Thank you for submitting an Issue to the Azure Sentinel GitHub repo! You should expect an initial response to your Issue from the team within 5 business days. Note that this response may be delayed during holiday periods. For urgent, production-affecting issues please raise a support ticket via the Azure Portal.