--- schema_version: "1" id: 1b86233f3badc95e473363a3c89c62e41ab43c991c1ca991c628da7cf0a919c0 title: TenantSecurityAnomaly collection: legacydeveloper version: current locale: en-us portal_url: https://docs.salesforce.com/legacydeveloper/current/en-us/object_reference/sforce_api_objects_tenantsecurityanomaly.md canonical_url: https://developer.salesforce.com/docs/atlas.en-us.object_reference.meta/object_reference/sforce_api_objects_tenantsecurityanomaly.htm source_site: developer.salesforce.com content_type: documentation content_hash: 1bc9840ef499b79bdc5c6b37f68f6c96c83b01d404b2e779596136d3fc3ff247 description: Stores detected anomalies. This object is available in API version 64.0 and later. --- # TenantSecurityAnomaly Stores detected anomalies. This object is available in API version 64.0 and later. ## Supported Calls describeSObjects(), getDeleted(), getUpdated(), query(), retrieve() ## Fields | Field | Details | | --- | --- | | DetailIdentifier | Type string Properties Filter, Group, idLookup, Sort Description The ID of the individual detail record. This field is unique across all tenants. | | EventDate | Type dateTime Properties Filter, Nillable, Sort Description The time when the anomaly was reported. For example, 2020-01-20T19:12:26.965Z. The most granular setting is milliseconds. | | EventDetails | Type textarea Properties Create Description JSON text that contains the details for the unsubscribe all event, such as the timestamp for when the event happened. | | EventIdentifier | Type string Properties Filter, Group, idLookup, Nillable, Sort Description The unique ID of the event, which is shared with the corresponding storage object. | | EventName | Type string Properties Filter, Group, idLookup, Nillable, Sort Description The name of the event, which is Api Anomaly. | | MetricIdentifier | Type string Properties Filter, Group, Sort Description The ID of the type of metric counted. This field is unique within your organization. | | MetricsType | Type picklist Properties Filter, Group, Restricted picklist, Sort Description The type of feature collected by this metric. | | Name | Type string Properties Filter, Group, idLookup, Sort Description The name of the feature for which data is being collected. | | Score | Type double Properties Filter, idLookup, Nillable, Sort Description A number from 0 through 100 that represents the anomaly score for the API execution or export tracked by this event. The anomaly score shows how the current API activity differs from the user’s typical activity. A low score indicates that the user’s current API activity is similar to the usual activity, and a high score indicates that it’s different. | | Summary | Type textarea Properties Nillable Description A text summary of the API anomaly that caused this event. | | Tenant | Type string Properties Filter, Group, idLookup, Sort Description The ID of the tenant where the feature was applied. | | TenantName | Type string Properties Filter, Group, Nillable, Sort Description The name of the connected tenant where the feature was enabled or disabled. | | UserIdentifier | Type string Properties Filter, Group, Nillable, Sort Description The origin user’s unique ID. | | Username | Type string Properties Filter, Group, idLookup, Nillable, Sort Description The origin username in the format of user@company.com at the time that the event was created. | ## Associated Objects This object has the following associated objects. If the API version isn’t specified, they’re available in the same API versions as this object. Otherwise, they’re available in the specified API version and later. [TenantSecurityFeatureChangeEvent](https://developer.salesforce.com/docs/atlas.en-us.object_reference.meta/object_reference/sforce_api_associated_objects_change_event.htm "A ChangeEvent object is available for each object that supports Change Data Capture. You can subscribe to a stream of change events using Change Data Capture to receive data tied to record changes in Salesforce. Changes include record creation, updates to an existing record, deletion of a record, and undeletion of a record. A change event isn’t a Salesforce object—it doesn’t support CRUD operations or queries. It’s included in the object reference so you can discover which Salesforce objects support change events.") Change events are available for the object. [TenantSecurityFeatureFeed](https://developer.salesforce.com/docs/atlas.en-us.object_reference.meta/object_reference/sforce_api_associated_objects_feed.htm "StandardObjectNameFeed is the model for all feed objects associated with standard objects. These objects represent the posts and feed-tracked changes of a standard object.") Feed tracking is available for the object. [TenantSecurityFeatureHistory](https://developer.salesforce.com/docs/atlas.en-us.object_reference.meta/object_reference/sforce_api_associated_objects_history.htm "StandardObjectNameHistory is the model for all history objects associated with standard objects. These objects represent the history of changes to the values in the fields of a standard object.") History is available for tracked fields of the object. [TenantSecurityFeatureOwnerSharingRule](https://developer.salesforce.com/docs/atlas.en-us.object_reference.meta/object_reference/sforce_api_associated_objects_ownersharingrule.htm "StandardObjectNameOwnerSharingRule is the model for all owner sharing rule objects associated with standard objects. These objects represent a rule for sharing a standard object with users other than the owner.") Sharing rules are available for the object. [TenantSecurityFeatureShare](https://developer.salesforce.com/docs/atlas.en-us.object_reference.meta/object_reference/sforce_api_associated_objects_share.htm "StandardObjectNameShare is the model for all share objects associated with standard objects. These objects represent a sharing entry on the standard object.") Sharing is available for the object.