--- schema_version: "1" id: 3b5e33312311c26a4d8e5730edd22ece7ba34b28a27a2c785ef7dba0ae0fb29a title: NamedCredentialEventLog collection: legacydeveloper version: current locale: en-us portal_url: https://docs.salesforce.com/legacydeveloper/current/en-us/object_reference/sforce_api_objects_namedcredentialeventlog.md canonical_url: https://developer.salesforce.com/docs/atlas.en-us.object_reference.meta/object_reference/sforce_api_objects_namedcredentialeventlog.htm source_site: developer.salesforce.com content_type: documentation content_hash: eb07efac2371c702652cd5732826abacc1d83fcf550ed87074876c0f10814475 description: The Named Credential event type captures information about Apex callouts that use named credentials as their endpoints. Use this event type to audit the installed managed packages that use named credentials. If you don’t recognize the package namespace in the named credential event log file, then you can investigate whether a security breach has occurred. This object is available in API version 65.0 and later. --- # NamedCredentialEventLog The Named Credential event type captures information about Apex callouts that use named credentials as their endpoints. Use this event type to audit the installed managed packages that use named credentials. If you don’t recognize the package namespace in the named credential event log file, then you can investigate whether a security breach has occurred. This object is available in API version 65.0 and later. ## Supported Calls describeSObjects(), query() ## Special Access Rules To access this object, you must have the View Event Log Object Data user permission. ## Fields | Field | Details | | --- | --- | | BotIdentifier | Type string Properties Filter, Group, Nillable, Sort Description The ID of the bot. | | BotSessionIdentifier | Type string Properties Filter, Group, Nillable, Sort Description The bot session ID. | | CallerPackageNamespace | Type string Properties Filter, Group, Nillable, Sort Description If an Apex callout using a Named Credential endpoint is initiated from a package, then this field contains the package’s namespace. If the callout isn’t initiated from a package, then this field is empty. | | ClientIp | Type string Properties Filter, Group, Nillable, Sort Description The IP address of the client that is using Salesforce services. A Salesforce internal IP (such as a login from AppExchange) is shown as “Salesforce.com IP”. | | CpuTime | Type double Properties Filter, Nillable, Sort Description The CPU time in milliseconds used to complete the request. This field indicates the amount of activity taking place in the app server layer. | | LoginKey | Type string Properties Filter, Group, Nillable, Sort Description The string that ties together all events in a given user’s login session. It starts with a login event and ends with either a logout event or the user session expiring. | | NamedCredentialName | Type string Properties Filter, Group, Nillable, Sort Description The name of the named credential that’s the endpoint of the Apex callout. | | PlannerIdentifier | Type string Properties Filter, Group, Nillable, Sort Description The ID of the agent planner. | | RequestIdentifier | Type string Properties Filter, Group, Nillable, Sort Description The unique ID of a single transaction. A transaction can contain one or more events. Each event in a given transaction has the same REQUEST\_ID. | | RunTime | Type double Properties Filter, Nillable, Sort Description The amount of time that the request took in milliseconds.. | | SessionKey | Type string Properties Filter, Group, Nillable, Sort Description The user’s unique session ID. You can use this value to identify all user events within a session. When a user logs out and logs in again, a new session is started. | | Timestamp | Type dateTime Properties Filter, Nillable, Sort Description The access time of Salesforce services in GMT. | | Uri | Type string Properties Filter, Group, Nillable, Sort Description The URI of the page that’s receiving the request. | | UserIdentifier | Type string Properties Filter, Group, Nillable, Sort Description The 15-character ID of the user who is using Salesforce services through the UI or the API. |