Auditing

Auditing provides information about use of the system, which can be critical in diagnosing potential or real security issues. Salesforce auditing features don't secure your org by themselves. Have someone from your org perform regular audits to detect potential abuse.

To verify that your system is secure, monitor for unexpected changes or usage trends.

Auditing Feature	Description
Record Modification Fields	All objects include fields to store the name of the user who created the record and who last modified the record. These fields provide basic auditing information.
Login History	Review a list of successful and failed login attempts to your org for the past 6 months.
Field History Tracking	You can enable auditing for individual fields, which automatically track any changes in the values of selected fields. Although auditing is available for all custom objects, only some standard objects allow field-level auditing.
Setup Audit Trail	Salesforce admins can view the Setup Audit Trail, which logs modifications made to your Salesforce configuration.

To monitor your org in real time, retain audit data longer, and enforce security policies automatically, add Salesforce Shield, an add-on subscription. Shield includes these auditing and monitoring features.

Salesforce Shield Feature	Description
Event Monitoring	Track detailed performance, security, and usage data across your Salesforce apps, including who accessed data, when, and from where.
Real-Time Events	Subscribe to events published by Salesforce to monitor activity in your org as it happens, and store the event data for auditing or reporting.
Transaction Security	Enforce security policies in real time. When a request meets a policy's conditions, the policy can block the action, require multi-factor authentication (MFA), or send a notification.
Field Audit Trail	Extend Field History Tracking so that you can retain archived field history data indefinitely, rather than for the standard 18–24 months.