Salesforce Service Cloud needs table name updated

[sshockley]

Describe the bug
The Salesforce Service Cloud solution has been updated to use a table name of SalesforceServiceCloudV2_CL, but the workbook expects SalesforceServiceCloud_CL and the analytic rules look for SalesforceServiceCloud.

To Reproduce
Steps to reproduce the behavior:
Install the solution from the Content Hub
Connect it to Salesforce
Populate some logs to create the table
Analytic rules and workbook can't be created without manual editing

Expected behavior
Updating the solution is appreciated, but please test it on an empty workspace before distribution.

Thanks!

[v-utpalkumar]

Hello @sshockley, thanks for flagging this issue. We will investigate this issue and get back to you with some updates. Thanks!

[sshockley]

Thanks! A couple of other notes, now that I've used it some.

It looks like the User field is now UserName.

In the "User Sign in from different countries" analytics rule there's not a lot of information to work with. We get a username, hour, and number of countries, but that's not enough to know if it's suspicious. It'd be better if it returned which countries and IP addresses rather than making us search manually. I toyed with it some but I'm not caffeinated enough to get a subselect like that working right now, and I haven't used partition before.

I sometimes get out of memory errors running the "different countries" query manually. It might be because the query loads geoip data from github.com/datasets/geoip2-ipv4, which is somewhat large. Would the query work better using geo_info_from_ip_address() and geo_distance_2points()? That might give fewer false positives for dense areas like Europe and won't be limited to IPv4 only.

[sshockley]

The memory error I get is:
Partial query failure: Low memory condition (E_LOW_MEMORY_CONDITION). (message: 'hr: '2161770503' 'Engine under memory pressure, context: sequence datum materialize': ', details: 'StgError { kind: HResult(2161770503, "Engine under memory pressure, context: sequence datum materialize"), source: None }')

This is running the "different countries" query on the past 12 hours of data.

[v-rusraut]

Hi @sshockley

The CCF connector ingests data into the SalesforceServiceCloudV2_CL table, while the Function App connector ingests data into the SalesforceServiceCloud_CL table. The SalesforceServiceCloud parser has been updated to work with both tables. All analytical rules and workbook in this solution rely on the parser, not on a specific table.

After installing the solution, please share the error you encounter when creating an analytical rule or workbook. Also, confirm which table contains data in your workspace.

[v-utpalkumar]

Hello @sshockley, we have shared our analysis and are looking forward to your feedback on this issue. If you would like to keep it active, please reply within the next couple of days. If we do not hear back by the specified timeline, the issue will be closed. Thank you!

[sshockley]

Hoping to review this today, thanks for your patience.

[sshockley]

Sorry, hoping to review this today. If not I'll close and re-open when I can pay more attention to it.