--- schema_version: "1" id: 329f2010a444260d5df3fce5b838ee9ce051e6b5bca5f992d161d53ab0ccea20 title: LoginEventLog collection: legacydeveloper version: current locale: en-us portal_url: https://docs.salesforce.com/legacydeveloper/current/en-us/object_reference/sforce_api_objects_logineventlog.md canonical_url: https://developer.salesforce.com/docs/atlas.en-us.object_reference.meta/object_reference/sforce_api_objects_logineventlog.htm source_site: developer.salesforce.com content_type: documentation content_hash: 4b63d8d263da01c10a12d204af362373c343cc06bd992322fb8f0d68c9a7cf22 description: Login event logs contain details about your Salesforce org's user login history. This object is available in API version 61.0 and later. --- # LoginEventLog Login event logs contain details about your Salesforce org's user login history. This object is available in API version 61.0 and later. ![Note](https://developer.salesforce.com/docs/atlas.en-us.object_reference.meta/object_reference/images/icon_note.png) #### Note This object stores event data that's queryable from platform APIs. For event data stored in event log files, see [EventLogFile](https://developer.salesforce.com/docs/atlas.en-us.264.0.object_reference.meta/object_reference/sforce_api_objects_eventlogfile.htm). ## Supported Calls describeSObjects(), query() ## Special Access Rules To access this object, you must have the View Event Log Object Data user permission. ## Fields | Field | Details | | --- | --- | | ApiType | Type string Properties Filter, Group, Nillable, Sort Description The type of API request. Possible values are: - D—Apex Class - E—SOAP Enterprise - I—SOAP Cross Instance - M—SOAP Metadata - O—Old SOAP - P—SOAP Partner - S—SOAP Apex - T—SOAP Tooling - X—XmlRPC - f—Feed - l—Live Agent - p—SOAP ClientSync | | ApiVersion | Type int Properties Filter, Group, Nillable, Sort Description The version of the API that’s being used. For example: 36.0. | | AuthenticatedMethodReference | Type string Properties Filter, Group, Nillable, Sort Description The authentication method used by a third-party identification provider for an OpenID Connect single sign-on protocol. | | AuthenticationServiceIdentifier | Type string Properties Filter, Group, Nillable, Sort Description The authentication service used for single sign-on. | | BrowserType | Type string Properties Filter, Group, Nillable, Sort Description The identifier string returned by the browser used at login. Example values are: - Go-http-client/1.1 - Mozilla/5.0 (Macintosh; Intel Mac OS X 10.12; rv%3A50.0) Gecko/20100101 Firefox/50.0 - Mozilla/5.0 (Macintosh; Intel Mac OS X 10\_11\_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36 | | CipherSuite | Type string Properties Filter, Group, Nillable, Sort Description The TLS cipher suite used for the login. Values are OpenSSL-style cipher suite names, with hyphen delimiters. For more information, see [OpenSSL Cryptography and SSL/TLS Toolkit](https://www.openssl.org/source/ "HTML (New Window)"). | | ClientIp | Type string Properties Filter, Group, Nillable, Sort Description The IP address of the client that’s using Salesforce services. A Salesforce internal IP (such as a login from AppExchange) is shown as “Salesforce.com IP”. For example: 96.43.144.26. | | CountryCode | Type string Properties Filter, Group, Nillable, Sort Description A regional identifier for the login event. | | CpuTime | Type double Properties Filter, Nillable, Sort Description The CPU time in milliseconds used to complete the request. This field indicates the amount of activity taking place in the app server layer. | | DatabaseTotalTime | Type double Properties Filter, Nillable, Sort Description The time in nanoseconds for a database round trip. Includes time spent in the JDBC driver, network to the database, and DatabaseTotalTime. Compare this field to CpuTime to determine whether performance issues are occurring in the database layer or in your own code. | | ForwardedForIp | Type string Properties Filter, Group, Nillable, Sort Description Reserved for future use. | | HttpReferer | Type string Properties Filter, Group, Nillable, Sort | | LoginKey | Type string Properties Filter, Group, Nillable, Sort Description The string that ties together all events in a given user’s login session. It starts with a login event and ends with either a logout event or the user session expiring. For example: GeJCsym5eyvtEK2I. | | LoginStatus | Type string Properties Filter, Group, Nillable, Sort Description The status of the login attempt. For successful logins, the value is LOGIN\_NO\_ERROR. All other values indicate errors or authentication issues. For details, see [Login Event Type — LOGIN\_STATUS Values](https://developer.salesforce.com/docs/atlas.en-us.object_reference.meta/object_reference/sforce_api_objects_eventlogfile_login_status.htm "When users attempt to log in to your org, the success or failure of their login attempts is tracked in event log file data. Specifically, the LOGIN_STATUS field in the Login event type contains the result of these login attempts. The data in LOGIN_STATUS can help you determine whether your users’ login attempts were successful. This field is available in the Login event type in the EventLogFile object in API version 39.0 and later."). | | LoginSubType | Type string Properties Filter, Group, Nillable, Sort Description The type of login flow used. Possible values are: - uiup—UI Username-Password - oauthpassword—OAuth Username-Password - oauthtoken—OAuth User-Agent - oauthhybridtoken—OAuth User-Agent for Hybrid Apps - oauthtokenidtoken—OAuth User-Agent with ID Token - oauthclientcredential—OAuth Client Credential - oauthcode—OAuth Web Server - oauthhybridauthcode—OAuth Web Server for Hybrid Apps | | LoginType | Type string Properties Filter, Group, Nillable, Sort Description The type of login used to access the session. Possible values are: - 7—AppExchange - A—Application - s—Certificate-based login - k—Chatter Communities External User - n—Chatter Communities External User Third Party SSO - r—Employee Login to Community - z—Lightning Login - l—Networks Portal API Only - 6—Remote Access Client - i—Remote Access 2.0 - I—Other Apex API - R—Partner Product - w—Passwordless Login - 3—Customer Service Portal - q—Partner Portal Third-Party SSO - 9—Partner Portal - 5—SAML Idp Initiated SSO - m—SAML Chatter Communities External User SSO - b—SAML Customer Service Portal SSO - c—SAML Partner Portal SSO - h—SAML Site SSO - 8—SAML Sfdc Initiated SSO - E—SelfService - j—Third Party SSO | | RequestIdentifier | Type string Properties Filter, Group, Nillable, Sort Description The unique ID of a single transaction. A transaction can contain one or more events. Each event in a given transaction has the same RequestIdentifier. For example: 3nWgxWbDKWWDIk0FKfF5DV. | | RequestStatus | Type string Properties Filter, Group, Nillable, Sort Description The status of the request for a page view or user interface action. Possible values are: - S—Success. Salesforce handled the request successfully. If an Apex controller throws an exception, this status is also returned. - F—Failure. Typically 4xx or 5xx HTTP codes, such as no permission to view page, page took too long to render, page is read-only. - U—Undefined - A—Authorization Error - R—Redirect. Typically a 3xx HTTP code, possibly initiated by an Apex controller in a Visualforce page. - N—Not Found. 404 error. | | RunTime | Type double Properties Filter, Nillable, Sort Description The amount of time that the request took in milliseconds. | | SessionKey | Type string Properties Filter, Group, Nillable, Sort Description The user’s unique session ID. You can use this value to identify all user events within a session. When a user logs out and logs in again, a new session is started. For Login Event Type, this field is usually null because the event is captured before a session is created. For example: d7DEq/ANa7nNZZVD. | | SourceIp | Type string Properties Filter, Group, Nillable, Sort Description The source IP of the login request. | | Timestamp | Type dateTime Properties Filter, Nillable, Sort Description The access time of Salesforce services in GMT. For example, 2020-01-20T19:12:26.965Z. Milliseconds are the most granular setting. | | TransportLayerSecurityProtocol | Type string Properties Filter, Group, Nillable, Sort Description The TLS protocol used for the login. Possible values are: - 1.0 - 1.1 - 1.2 | | Uri | Type string Properties Filter, Group, Nillable, Sort Description The URI of the page that’s receiving the request. For example: /home/home.jsp. | | UseApiToken | Type string Properties Filter, Group, Nillable, Sort | | UserIdentifier | Type string Properties Filter, Group, Nillable, Sort Description The 15-character ID of the user who’s using Salesforce services through the UI or the API. For example: 00530000009M943. | | Username | Type string Properties Filter, Group, Nillable, Sort Description The username that’s used for login. | | UserType | Type string Properties Filter, Group, Nillable, Sort Description The category of user license. Possible values are: - CsnOnly—Users whose access to the application is limited to Chatter. This user type includes Chatter Free and Chatter moderator users. - CspLitePortal—CSP Lite Portal license. Users whose access is limited because they’re organization customers and access the application through a customer portal or an Experience Cloud site. - CustomerSuccess—Customer Success license. Users whose access is limited because they’re organization customers and access the application through a customer portal. - Guest—Users whose access is limited so that your customers can view and interact with your site without logging in. - PowerCustomerSuccess—Power Customer Success license. Users whose access is limited because they’re organization customers and access the application through a customer portal. Users with this license type can view and edit data they directly own or data owned by or shared with users below them in the customer portal role hierarchy. - PowerPartner—Power Partner license. Users whose access is limited because they’re partners and typically access the application through a partner portal or site. - SelfService—Users whose access is limited because they’re organization customers and access the application through a self-service portal. - Standard—Standard user license. This user type also includes Salesforce Platform and Salesforce Platform One user licenses, and admins for this org. |