--- schema_version: "1" id: 57122fd8bb123c3a535d829967036b9417fb41f5b85f2a2244bc94aa2c693b86 title: TransactionSecurityEventLog collection: legacydeveloper version: current locale: en-us portal_url: https://docs.salesforce.com/legacydeveloper/current/en-us/object_reference/sforce_api_objects_transactionsecurityeventlog.md canonical_url: https://developer.salesforce.com/docs/atlas.en-us.object_reference.meta/object_reference/sforce_api_objects_transactionsecurityeventlog.htm source_site: developer.salesforce.com content_type: documentation content_hash: f778807dc5ede921249409ae11e3401e40e432a3505f3b982b40c527f790b201 description: Transaction Security event logs contain details about policy execution. Legacy transaction security policy details are supported in API version 38.0 and later. Enhanced transaction security policy details are supported in API version 61.0 and later. --- # TransactionSecurityEventLog Transaction Security event logs contain details about policy execution. Legacy transaction security policy details are supported in API version 38.0 and later. Enhanced transaction security policy details are supported in API version 61.0 and later. ![Note](https://developer.salesforce.com/docs/atlas.en-us.object_reference.meta/object_reference/images/icon_note.png) #### Note This object stores event data that's queryable from platform APIs. For event data stored in event log files, see [EventLogFile](https://developer.salesforce.com/docs/atlas.en-us.264.0.object_reference.meta/object_reference/sforce_api_objects_eventlogfile.htm). ## Supported Calls describeSObjects(), query() ## Special Access Rules To access this object, you must have the View Event Log Object Data user permission. ## Fields | Field | Details | | --- | --- | | ApexIdentifier | Type String Properties Filter, Group, Nillable, Sort Description The ID of the Apex code used to evaluate the policy. | | BotIdentifier | Type String Description The ID of the bot. | | BotSessionIdentifier | Type String Description The bot session ID. | | ClientIp | Type String Properties Filter, Group, Nillable, Sort Description The IP address of the client that is using Salesforce services. A Salesforce internal IP, such as a login from AppExchange, is shown as “Salesforce.com IP”. For example: 96.43.144.26. | | CpuTime | Type Double Properties Filter, Nillable, Sort Description The CPU time in milliseconds used to complete the request. This field indicates the amount of activity taking place in the app server layer. | | EvaluationTime | Type Double Properties Filter, Nillable, Sort Description The time in milliseconds used to evaluate the policy. | | EventName | Type String Properties Filter, Group, Nillable, Sort Description The name of the event, which is Transaction Security Event. | | FlowIdentifier | Type String Properties Filter, Group, Nillable, Sort Description The ID of the flow used to evaluate the policy. | | LoginKey | Type String Properties Filter, Group, Nillable, Sort Description The string that ties together all events in a given user’s login session. It starts with a login event and ends with either a logout event or the user session expiring. For example: GeJCsym5eyvtEK2I. | | PlannerIdentifier | Type String Description The ID of the agent planner. | | PolicyIdentifier | Type String Properties Filter, Group, Nillable, Sort Description The 15-character ID of the policy being evaluated. For example: 00530000009M943. | | PolicyOutcome | Type String Properties Filter, Group, Nillable, Sort Description The result of the transaction policy. Possible values are: - Error—The policy caused an undefined error when it executed. - ExemptNoAction—The user is exempt from transaction security policies, so the policy didn’t trigger. - MeteringBlock—The policy took longer than 3 seconds to process, so the user was blocked from performing the operation. - MeteringNoAction—The policy took longer than 3 seconds to process, but the user isn't blocked from performing the operation. - NoAction—The policy didn't trigger. - Notified—A notification was sent to the recipient. | | PolicyType | Type String Properties Filter, Group, Nillable, Sort Description The real time action selected for the policy. | | RequestIdentifier | Type String Properties Filter, Group, Nillable, Sort Description Globally unique id for a given request. For example: 3nWgxWbDKWWDIk0FKfF5DV. | | RunTime | Type Double Properties Filter, Nillable, Sort Description The amount of time that the request took in milliseconds. | | SendEmailNotification | Type Boolean Properties Defaulted on create, Filter, Group, Sort Description Indicates whether to send an email notification. The default value is false. | | SendInAppNotification | Type Boolean Properties Defaulted on create, Filter, Group, Sort Description Indicates whether to send an in-app notification. The default value is false. | | SessionKey | Type String Properties Filter, Group, Nillable, Sort Description The user’s unique session ID. You can use this value to identify all user events within a session. When a user logs out and logs in again, a new session is started. For example: d7DEq/ANa7nNZZVD. | | Timestamp | Type DateTime Properties Filter, Nillable, Sort Description The access time of Salesforce services in GMT. For example, 2020-01-20T19:12:26.965Z. Milliseconds are the most granular setting. | | TriggeredTimestamp | Type String Properties Filter, Group, Nillable, Sort Description The time at which the Transaction Security event was generated in ISO8601-compatible format. For example: 2015-07-27T11:32:59.555Z. | | Uri | Type String Properties Filter, Group, Nillable, Sort Description The URI of the page that’s receiving the request. For example: /home/home.jsp. | | UserIdentifier | Type String Properties Filter, Group, Nillable, Sort Description The 15-character ID of the user who is using Salesforce services through the UI or the API. For example: 00530000009M943. |