Team, let me know what actions needs to be performed in the Salesforce Marketing Cloud wherein those actions can get captured in the Event Log File which is available on the FTP.

Currently, when I tried changing the Session Timeout Value in the Security Settings of the SFMC. Then, it got captured in the Activity Log file instead of the Event Log file.

Can any one help me with the actions that will get captured in the Event Log File ?


As per the documentation, here are the events captured in the Security Event Audit Log:

1   Login Attempted
2   Security Question Answered  
3   Password Changed    
4   Administrator Access (Support person has impersonated into the user account.)
5   Administrator Unlock (Logged when Administrator unlocks a user.)
6   Redirect (For users provisioned with IMH Redirect flow, this means that the user is redirected to CAS pages and they try to login from Members.)
7   Security Setting Changed Impersonation
8   Logout  
9   Request Authorization Code  
10  Request Token


| improve this answer | |
  • Okay... So may I know like once I will do the modifications mentioned by you then when that is supposed to get reflected/captured in the file on the FTP ? (i.e., how much duration it will take to get reflected in the file) Consider, today I changed the password at 2:00 PM (IST). Then, when should we expect the outcome of that change in the event log file on the FTP ? Thanks in Advance... – Salesforce Developer Jul 30 at 19:34
  • How often are you running the extract? And you would need to run it at the EID level – EazyE Aug 3 at 1:41

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.