--- schema_version: "1" id: 8e0dc28200533036f860e5d049ffcdcb8488df563f12881cce988f685d5ffa0c title: Transaction Security Event Type collection: legacydeveloper version: current locale: en-us portal_url: https://docs.salesforce.com/legacydeveloper/current/en-us/object_reference/sforce_api_objects_eventlogfile_transaction.md canonical_url: https://developer.salesforce.com/docs/atlas.en-us.object_reference.meta/object_reference/sforce_api_objects_eventlogfile_transaction.htm source_site: developer.salesforce.com content_type: documentation content_hash: 803b70fd2bc0e0162c72ed7b36b12f3f5907e559e787f4d67f9354ba488e3ef6 description: Transaction Security events contain details about policy execution. This event type is supported in API version 55.0 and later. --- # Transaction Security Event Type Transaction Security events contain details about policy execution. This event type is supported in API version 55.0 and later. For details about event monitoring, see the [Trailhead Event Monitoring module](https://trailhead.salesforce.com/en/modules/event_monitoring/units/event_monitoring_intro "HTML (New Window)") or [REST API Developer’s Guide](https://developer.salesforce.com/docs/atlas.en-us.264.0.api_rest.meta/api_rest/using_resources_event_log_files.htm "HTML (New Window)"). ## Fields
FieldDetails
BOT_IDENTIFIER
Type
String
Description
The ID of the bot.
BOT_SESSION_IDENTIFIER
Type
String
Description
The bot session ID.
CLIENT_IP
Type
String
Description
The IP address of the client that is using Salesforce services. A Salesforce internal IP, such as a login from AppExchange, is shown as “Salesforce.com IP”.
For example: 96.43.144.26
CPU_TIME
Type
Number
Description
The CPU time in milliseconds used to complete the request. This field indicates the amount of activity taking place in the app server layer.
EVALUATION_TIME_MS
Type
Number
Description
The time in milliseconds used to evaluate the policy.
EVENT_TIMESTAMP
Type
String
Description
The time at which the Transaction Security event was generated in ISO8601-compatible format (YYYY-MM-DDTHH:MM:SS.sssZ). This value can be earlier than TIMESTAMP_DERIVED by the amount of time taken to log the event.
For example: 2015-07-27T11:32:59.555Z
EVENT_TYPE
Type
String
Description
The type of event. The value is always TransactionSecurity.
LOGIN_KEY
Type
String
Description
The string that ties together all events in a given user’s login session. It starts with a login event and ends with either a logout event or the user session expiring.
For example: GeJCsym5eyvtEK2I
ORGANIZATION_ID
Type
ID
Description
The 15-character ID of the organization.
For example: 00D000000000123
PLANNER_IDENTIFIER
Type
String
Description
The ID of the agent planner.
POLICY_ID
Type
ID
Description
The 15-character ID of the policy being evaluated.
For example: 00530000009M943
POLICY_ID_DERIVED
Type
ID
Description
The 18-character case-insensitive ID of the policy being evaluated.
For example: 00590000000I1SNIA0
REQUEST_ID
Type
String
Description
The unique ID of a single transaction. A transaction can contain one or more events. Each event in a given transaction has the same REQUEST_ID.
For example: 3nWgxWbDKWWDIk0FKfF5DV
RESULT
Type
String
Description
The outcome of evaluating the policy.
For example: TRIGGEREDzzz or NOT TRIGGERED
RUN_TIME
Type
Number
Description
The amount of time that the request took in milliseconds.
SESSION_KEY
Type
String
Description
The user’s unique session ID. You can use this value to identify all user events within a session. When a user logs out and logs in again, a new session is started.
For example: d7DEq/ANa7nNZZVD
TIMESTAMP
Type
String
Description
The access time of Salesforce services in GMT.
For example: 20130715233322.670
TIMESTAMP_DERIVED
Type
DateTime
Description
The access time of Salesforce services in ISO8601-compatible format (YYYY-MM-DDTHH:MM:SS.sssZ).
For example: 2015-07-27T11:32:59.555Z. Timezone is GMT.
URI
Type
String
Description
The URI of the page that’s receiving the request.
For example: /home/home.jsp
URI_ID_DERIVED
Type
ID
Description
The 18-character case insensitive ID of the URI of the page that’s receiving the request.
USER_ID
Type
ID
Description
The 15-character ID of the user who is using Salesforce services through the UI or the API.
For example: 00530000009M943
USER_ID_DERIVED
Type
ID
Description
The 18-character case insensitive ID of the user who is using Salesforce services through the UI or the API.
For example: 00590000000I1SNIA0
#### See Also - [EventLogFile Supported Event Types](https://developer.salesforce.com/docs/atlas.en-us.object_reference.meta/object_reference/sforce_api_objects_eventlogfile_supportedeventtypes.htm "The EventType field in the EventLogFile object supports these events. Some common fields, such as CPU_TIME and RUN_TIME, can have null or zero values depending on how the events are generated for a given feature. Sometimes, three quotation marks appear around event data containing special characters in the CSV file. The third quotation mark is necessary for tools and applications to parse the field data at the correct field value boundary.") - [EventLogFile](https://developer.salesforce.com/docs/atlas.en-us.object_reference.meta/object_reference/sforce_api_objects_eventlogfile.htm "Represents event log files generated by Event Monitoring. Use event log file data to analyze usage trends and user behavior in your Salesforce org. This object is available in API version 32.0 and later. The Interval and Sequence fields are available only in API version 37.0 and later.")