--- schema_version: "1" id: 30a85d4ffcc4c0f3d7da3978083fb6470653529207fae5fbff55e377b4a99ee6 title: Store and Query Log Data with Event Log Objects collection: admin version: current locale: en-us portal_url: https://docs.salesforce.com/admin/current/en-us/xcloud/264-0-0/real_time_em_event_log_objects.md canonical_url: https://help.salesforce.com/s/articleView?id=xcloud.real_time_em_event_log_objects.htm&release=264.0.0&type=5 source_site: help.salesforce.com content_type: documentation content_hash: 19adfddf17df4ae331c3788bea3bab4beb870aa6d4c19c6a0851ce9d8a539e7b description: The Event Log Object framework surfaces event data stored in standard objects called Event Log Objects. They store critical event data that you can query via Salesforce Platform APIs. Event log objects contain many but not all events currently represented in the Event Log File framework. Unlike Event Log Files, which surface event data as CSV files, Event Log Objects allow querying of similar data via SOQL. products: - Salesforce Platform - Cross Cloud release: "264" --- # Store and Query Log Data with Event Log Objects The Event Log Object framework surfaces event data stored in standard objects called Event Log Objects. They store critical event data that you can query via Salesforce Platform APIs. Event log objects contain many but not all events currently represented in the Event Log File framework. Unlike Event Log Files, which surface event data as CSV files, Event Log Objects allow querying of similar data via SOQL. ![Note](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-xcloud-setup-264-0-0-production-enus/6f21df35-9ea0-4f53-ac94-45c3b5dfd5bc/images/icon_note.png) Note As of Spring 25’, the Event Log Object framework only supports SOQL queries. ![Important](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-xcloud-setup-264-0-0-production-enus/6f21df35-9ea0-4f53-ac94-45c3b5dfd5bc/images/icon_important.png) Important This feature is only available to Hyperforce customers. Log data is retained for up to 30 days.
Available in: Salesforce Classic (not available in all orgs), and Lightning Experience

Available in: Enterprise, Performance, and Unlimited Editions

Requires Salesforce Shield or Salesforce Event Monitoring add-on subscriptions.
User Permissions Needed

To query and view event log object data:

View Event Log Object Data
Event Log Object data is available with minimal delay, enabling earlier detection of security and performance incidents. Write advanced SOQL queries to filter or aggregate log data. Event Log Objects are also available to analyze in CRM Analytics using Salesforce Direct, so you can visualize data in a variety of chart types. Because you can access Event Log Objects via Salesforce Platform APIs, you can build custom applications in the Lightning UI for event specific use cases. ![Note](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-xcloud-setup-264-0-0-production-enus/6f21df35-9ea0-4f53-ac94-45c3b5dfd5bc/images/icon_note.png) Note Event Log Objects provide 30 days of historical data on the go-live date. Enable Event Log Objects through the Event Manager tab in Setup: 1. From Setup, in the Quick Find Box, enter Permission, and select **Permission Sets**. 2. Select **View Event Log Object Data** to access all Event Log Objects. You can alternatively select **Event Monitoring User** to gain access to all of your Event Monitoring data. ![Example](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-xcloud-setup-264-0-0-production-enus/6f21df35-9ea0-4f53-ac94-45c3b5dfd5bc/images/icon_example.png) Example Sample Queries by Use Case - Security Query: Which users are exporting the most rows via reports? `SELECT UserIdentifier, SUM(RowCount) FROM ReportEventLog WHERE Origin='ReportExported' AND DAY_ONLY(Timestamp) > LAST_N_DAYS:10 Group By UserIdentifier Order by SUM(RowCount) DESC` - APM Query: What is the number of unexpected apex exceptions grouped by Exception Category? `SELECT ExceptionCategory, COUNT(Timestamp) FROM ApexUnexpectedExcpEventLog WHERE DAY_ONLY(Timestamp) > LAST_N_DAYS:10 GROUP BY ExceptionCategory ORDER BY COUNT(Timestamp) DESC` - Product Intelligence Query: What are the most loaded lightning pages? `SELECT COUNT(Timestamp), PageUrl FROM LightningPageViewEventLog WHERE DAY_ONLY(Timestamp) > LAST_N_DAYS:10 GROUP BY PageUrl ORDER BY COUNT(Timestamp) DESC` ![Note](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-xcloud-setup-264-0-0-production-enus/6f21df35-9ea0-4f53-ac94-45c3b5dfd5bc/images/icon_note.png) Note Depending on event delivery and processing time, expect log data to be available to query within 25-45 minutes after the event is logged. ![Important](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-xcloud-setup-264-0-0-production-enus/6f21df35-9ea0-4f53-ac94-45c3b5dfd5bc/images/icon_important.png) Important You can only query 15 days of data at a time using the Timestamp column that’s present on all Event Log Objects. For more details on the limitations and valid formatting for this field see [Best Practices and Considerations for Leveraging Event Log Object Data](https://help.salesforce.com/s/articleView?id=xcloud.elo_best_practices.htm&release=264.0.0&type=5 "It’s important to understand the recommended practices and limitations for the Event Log Object framework to get the most out of your log data. Here are some tips to ensure your queries run smoothly."). For detailed information about each available Event Log Object, see these topics in the [Object Reference for the Salesforce Platform](https://developer.salesforce.com/docs/atlas.en-us.object_reference.meta/object_reference/sforce_api_objects_list.htm). ![Important](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-xcloud-setup-264-0-0-production-enus/6f21df35-9ea0-4f53-ac94-45c3b5dfd5bc/images/icon_important.png) Important Event log objects aren't available in Government Cloud instances. If your org migrates, there’s potential to lose access to event log object data after migration completion. Contact Salesforce for any issues related to org migration. ![Tip](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-xcloud-setup-264-0-0-production-enus/6f21df35-9ea0-4f53-ac94-45c3b5dfd5bc/images/icon_tip.png) Tip Debug and troubleshoot performance issues by correlating logs using the customizable Request Identifier field, available in all Event Monitoring logs. To correlate logs pertaining to an API request call, set the `X-SFDC-REQUEST-ID` header with a 32 character OTEL compatible TraceId or a 22 -character alphanumeric Id. Using SOQL, search for the Event Monitoring logs with this RequestId to correlate the logs and see the unit of work performed as a part of the API transaction. - [AnalyticsChangeEventLog](https://developer.salesforce.com/docs/atlas.en-us.object_reference.meta/object_reference/sforce_api_objects_analyticschangeeventlog.htm) - [AnalyticsDownloadEventLog](https://developer.salesforce.com/docs/atlas.en-us.object_reference.meta/object_reference/sforce_api_objects_analyticsdownloadeventlog.htm) - [AnalyticsInteractEventLog](https://developer.salesforce.com/docs/atlas.en-us.object_reference.meta/object_reference/sforce_api_objects_analyticsinteracteventlog.htm) - [AnalyticsPerfEventLog](https://developer.salesforce.com/docs/atlas.en-us.object_reference.meta/object_reference/sforce_api_objects_analyticsperfeventlog.htm) - [ApexCalloutEventLog](https://developer.salesforce.com/docs/atlas.en-us.object_reference.meta/object_reference/sforce_api_objects_apexcallouteventlog.htm) - [ApexExecutionEventLog](https://developer.salesforce.com/docs/atlas.en-us.object_reference.meta/object_reference/sforce_api_objects_apexexecutioneventlog.htm) - [ApexExtlCalloutEventLog](https://developer.salesforce.com/docs/atlas.en-us.object_reference.meta/object_reference/sforce_api_objects_apexextlcallouteventlog.htm) - [ApexRestApiEventLog](https://developer.salesforce.com/docs/atlas.en-us.object_reference.meta/object_reference/sforce_api_objects_apexrestapieventlog.htm) - [ApexSoapApiEventLog](https://developer.salesforce.com/docs/atlas.en-us.object_reference.meta/object_reference/sforce_api_objects_apexsoapapieventlog.htm) - [ApexTriggerEventLog](https://developer.salesforce.com/docs/atlas.en-us.object_reference.meta/object_reference/sforce_api_objects_apextriggereventlog.htm) - [ApexUnexpectedExcpEventLog](https://developer.salesforce.com/docs/atlas.en-us.object_reference.meta/object_reference/sforce_api_objects_apexunexpectedexcpeventlog.htm) - [ApiTotalUsageEventLog](https://developer.salesforce.com/docs/atlas.en-us.object_reference.meta/object_reference/sforce_api_objects_apitotalusageeventlog.htm) - [AsyncReportRunEventLog](https://developer.salesforce.com/docs/atlas.en-us.object_reference.meta/object_reference/sforce_api_objects_asyncreportruneventlog.htm) - [AttachmentEventLog](https://developer.salesforce.com/docs/atlas.en-us.258.0.object_reference.meta/object_reference/sforce_api_objects_attachmenteventlog.htm) - [AuraRequestEventLog](https://developer.salesforce.com/docs/atlas.en-us.258.0.object_reference.meta/object_reference/sforce_api_objects_aurarequesteventlog.htm) - [BlockedRedirectEventLog](https://developer.salesforce.com/docs/atlas.en-us.258.0.object_reference.meta/object_reference/sforce_api_objects_blockedredirecteventlog.htm) - [BulkApiEventLog](https://developer.salesforce.com/docs/atlas.en-us.258.0.object_reference.meta/object_reference/sforce_api_objects_bulkapieventlog.htm) - [BulkApi2EventLog](https://developer.salesforce.com/docs/atlas.en-us.258.0.object_reference.meta/object_reference/sforce_api_objects_bulkapi2eventlog.htm) - [BulkApiRequestEventLog](https://developer.salesforce.com/docs/atlas.en-us.258.0.object_reference.meta/object_reference/sforce_api_objects_bulkapirequesteventlog.htm) - [ChangeSetOperationEventLog](https://developer.salesforce.com/docs/atlas.en-us.258.0.object_reference.meta/object_reference/sforce_api_objects_changesetoperationeventlog.htm) - [ConcurApexLimitEventLog](https://developer.salesforce.com/docs/atlas.en-us.258.0.object_reference.meta/object_reference/sforce_api_objects_concurapexlimiteventlog.htm) - [ContentDistributionEventLog](https://developer.salesforce.com/docs/atlas.en-us.258.0.object_reference.meta/object_reference/sforce_api_objects_contentdistributioneventlog.htm) - [ContentDocLinkEventLog](https://developer.salesforce.com/docs/atlas.en-us.258.0.object_reference.meta/object_reference/sforce_api_objects_contentdoclinkeventlog.htm) - [ContentTransferEventLog](https://developer.salesforce.com/docs/atlas.en-us.258.0.object_reference.meta/object_reference/sforce_api_objects_contenttransfereventlog.htm) - [ContCalloutSummaryEventLog](https://developer.salesforce.com/docs/atlas.en-us.258.0.object_reference.meta/object_reference/sforce_api_objects_contcalloutsummaryeventlog.htm) - [CspViolationEventLog](https://developer.salesforce.com/docs/atlas.en-us.258.0.object_reference.meta/object_reference/sforce_api_objects_cspviolationeventlog.htm) - [DatabaseSaveEventLog](https://developer.salesforce.com/docs/atlas.en-us.258.0.object_reference.meta/object_reference/sforce_api_objects_databasesaveeventlog.htm) - [DocAtchDownloadEventLog](https://developer.salesforce.com/docs/atlas.en-us.258.0.object_reference.meta/object_reference/sforce_api_objects_docatchdownloadeventlog.htm) - [FlowNavMetricEventLog](https://developer.salesforce.com/docs/atlas.en-us.258.0.object_reference.meta/object_reference/sforce_api_objects_flownavmetriceventlog.htm) - [GroupMembershipEventLog](https://developer.salesforce.com/docs/atlas.en-us.258.0.object_reference.meta/object_reference/sforce_api_objects_groupmembershipeventlog.htm) - [InsufficientAccessEventLog](https://developer.salesforce.com/docs/atlas.en-us.258.0.object_reference.meta/object_reference/sforce_api_objects_insufficientaccesseventlog.htm) - [InvocableActionEventLog](https://developer.salesforce.com/docs/atlas.en-us.258.0.object_reference.meta/object_reference/sforce_api_objects_invocableactioneventlog.htm) - [KnowledgeArticleEventLog](https://developer.salesforce.com/docs/atlas.en-us.258.0.object_reference.meta/object_reference/sforce_api_objects_knowledgearticleeventlog.htm) - [LightningErrorEventLog](https://developer.salesforce.com/docs/atlas.en-us.258.0.object_reference.meta/object_reference/sforce_api_objects_lightningerroreventlog.htm) - [LightningLoggerEventLog](https://developer.salesforce.com/docs/atlas.en-us.258.0.object_reference.meta/object_reference/sforce_api_objects_lightningloggereventlog.htm) - [LightningPageViewEventLog](https://developer.salesforce.com/docs/atlas.en-us.258.0.object_reference.meta/object_reference/sforce_api_objects_lightningpagevieweventlog.htm) - [LightningPrfmEventLog](https://developer.salesforce.com/docs/atlas.en-us.258.0.object_reference.meta/object_reference/sforce_api_objects_lightningprfmeventlog.htm) - [LoginAsEventLog](https://developer.salesforce.com/docs/atlas.en-us.258.0.object_reference.meta/object_reference/sforce_api_objects_loginaseventlog.htm) - [LoginEventLog](https://developer.salesforce.com/docs/atlas.en-us.258.0.object_reference.meta/object_reference/sforce_api_objects_logineventlog.htm) - [LogoutEventLog](https://developer.salesforce.com/docs/atlas.en-us.258.0.object_reference.meta/object_reference/sforce_api_objects_logouteventlog.htm) - [MetadataApiOpEventLog](https://developer.salesforce.com/docs/atlas.en-us.258.0.object_reference.meta/object_reference/sforce_api_objects_metadataapiopeventlog.htm) - [NamedCredentialEventLog](https://developer.salesforce.com/docs/atlas.en-us.258.0.object_reference.meta/object_reference/sforce_api_objects_namedcredentialeventlog.htm) - [PackageInstallEventLog](https://developer.salesforce.com/docs/atlas.en-us.258.0.object_reference.meta/object_reference/sforce_api_objects_packageinstalleventlog.htm) - [PermissionUpdateEventLog](https://developer.salesforce.com/docs/atlas.en-us.258.0.object_reference.meta/object_reference/sforce_api_objects_permissionupdateeventlog.htm) - [QueuedExecutionEventLog](https://developer.salesforce.com/docs/atlas.en-us.258.0.object_reference.meta/object_reference/sforce_api_objects_queuedexecutioneventlog.htm) - [ReportEventLog](https://developer.salesforce.com/docs/atlas.en-us.258.0.object_reference.meta/object_reference/sforce_api_objects_reporteventlog.htm) - [ReportExportEventLog](https://developer.salesforce.com/docs/atlas.en-us.258.0.object_reference.meta/object_reference/sforce_api_objects_reportexporteventlog.htm) - [RestApiEventLog](https://developer.salesforce.com/docs/atlas.en-us.258.0.object_reference.meta/object_reference/sforce_api_objects_restapieventlog.htm) - [SalesforceLoginAsEventLog](https://developer.salesforce.com/docs/atlas.en-us.258.0.object_reference.meta/object_reference/sforce_api_objects_salesforceloginaseventlog.htm) - [SandboxStatusEventLog](https://developer.salesforce.com/docs/atlas.en-us.258.0.object_reference.meta/object_reference/sforce_api_objects_sandboxstatuseventlog.htm) - [SiteEventLog](https://developer.salesforce.com/docs/atlas.en-us.258.0.object_reference.meta/object_reference/sforce_api_objects_siteeventlog.htm) - [SearchEventLog](https://developer.salesforce.com/docs/atlas.en-us.258.0.object_reference.meta/object_reference/sforce_api_objects_searcheventlog.htm) - [SearchClickEventLog](https://developer.salesforce.com/docs/atlas.en-us.258.0.object_reference.meta/object_reference/sforce_api_objects_searchclickeventlog.htm) - [SoapApiEventLog](https://developer.salesforce.com/docs/atlas.en-us.258.0.object_reference.meta/object_reference/sforce_api_objects_soapapieventlog.htm) - [TransactionSecurityEventLog](https://developer.salesforce.com/docs/atlas.en-us.258.0.object_reference.meta/object_reference/sforce_api_objects_transactionsecurityeventlog.htm) - [UniqueQueryEventLog](https://developer.salesforce.com/docs/atlas.en-us.258.0.object_reference.meta/object_reference/sforce_api_objects_uniquequeryeventlog.htm) - [UriEventLog](https://developer.salesforce.com/docs/atlas.en-us.258.0.object_reference.meta/object_reference/sforce_api_objects_urieventlog.htm) - [UiAgentInteractionEventLog](https://developer.salesforce.com/docs/atlas.en-us.258.0.object_reference.meta/object_reference/sforce_api_objects_uiagentinteractioneventlog.htm) - [UiTelemetryNavTmEventLog](https://developer.salesforce.com/docs/atlas.en-us.258.0.object_reference.meta/object_reference/sforce_api_objects_uitelemetrynavtmeventlog.htm) - [UiTelemetryRsrcTmEventLog](https://developer.salesforce.com/docs/atlas.en-us.258.0.object_reference.meta/object_reference/sforce_api_objects_uitelemetryrsrctmeventlog.htm) - [VisualforceRequestEventLog](https://developer.salesforce.com/docs/atlas.en-us.258.0.object_reference.meta/object_reference/sforce_api_objects_visualforcerequesteventlog.htm) - **[Analyze Log Data with Salesforce Direct](https://help.salesforce.com/s/articleView?id=xcloud.real_time_em_elo_analytics.htm&release=264.0.0&type=5)** Transform your log data into clear, insightful visualizations. Explore Event Log Objects in CRM Analytics with Salesforce Direct using a variety of engaging chart types. - **[Best Practices and Considerations for Leveraging Event Log Object Data](https://help.salesforce.com/s/articleView?id=xcloud.elo_best_practices.htm&release=264.0.0&type=5)** It’s important to understand the recommended practices and limitations for the Event Log Object framework to get the most out of your log data. Here are some tips to ensure your queries run smoothly. - **[Event Log Objects Analytics](https://help.salesforce.com/s/articleView?id=xcloud.real_time_em_elo_dashboards.htm&release=264.0.0&type=5)** The new suite of analytic dashboards provide deep, actionable insights across the three critical sectors of an organization: Platform Performance, Data Security, and User Adoption. By providing unprecedented visibility into org activities, users can shift from reactive problem-solving to proactive platform management.