---
schema_version: "1"
id: 2dcbd120b0c0d2e074e3ab7425d0e9330aa79af1b407c84c7a9f07460c5241fa
title: Event Monitoring
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/release-notes/260-0-0/rn_security_em.md
canonical_url: https://help.salesforce.com/s/articleView?id=release-notes.rn_security_em.htm&release=260&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: 6a5348cf45287510276d9e25942c042b82958a6e130a22e6d2928b54281b47da
description: Strengthen your security posture with automatic data storage by default for Report, ListView, Login, LoginAs, and Logout events, ensuring critical audit data is available from day one. Additionally, the Operation field in ApiEvent now tracks delete activities, providing deeper insight into critical data changes.
products:
  - Cross Cloud Packages Solutions
release: "260"
---
# Event Monitoring

Strengthen your security posture with automatic data storage by default for Report, ListView, Login, LoginAs, and Logout events, ensuring critical audit data is available from day one. Additionally, the Operation field in ApiEvent now tracks delete activities, providing deeper insight into critical data changes.

- **[APIEvent Record IDs](https://help.salesforce.com/s/articleView?id=release-notes.rn_security_em_apievent_record_id.htm&release=260&type=5)**  
    The APIEvent Record field has been updated for all operations. This field captures record IDs with the total record count.
- **[Automatic Storage for Select Real-Time Events](https://help.salesforce.com/s/articleView?id=release-notes.rn_security_em_automatic_storage_real-time_events.htm&release=260&type=5)**  
    Data storage is now enabled by default for Report Event, ListView Event, Login Event, LoginAs Event and Logout Event. This ensures that critical security and audit event data is captured automatically from day one.
- **[Track Grant Login Access Activity With Login As Event](https://help.salesforce.com/s/articleView?id=release-notes.rn_security_em_grant_login_access_event.htm&release=260&type=5)**  
    To help protect sensitive data in production and sandbox environments, you can now monitor when users provide login access using the Grant Account Login Access setting. This can be tracked using the Login As event and trigger Transaction Security Policies that automatically alert your admins or block access.
- **[Delete Operation Tracking for ApiEvent](https://help.salesforce.com/s/articleView?id=release-notes.rn_security_em_new_delete_operation_tracking_apievent.htm&release=260&type=5)**  
    ApiEvent now tracks delete operations. The Operation field has been expanded to capture these critical activities for improved security monitoring.
- **[Universal Anomaly Event](https://help.salesforce.com/s/articleView?id=release-notes.rn_security_em_universal_anomaly_event.htm&release=260&type=5)**  
    The Universal Anomaly Event provides a standardized way to identify and categorize anomaly threat detection events across multiple domains.