What kind of metadata changes can Splunk for Salesforce track?

[bswain]

I want to get a better understanding for what types of configuration changes are tracked in Splunk for Salesforce. Are changes tracked just at the change set level? Does Splunk track smaller configuration changes such as Custom Field changes and page layouts? Can it capture the who, what, and when the changes were made?

[MarshallCG]

I work with the poster above and we have a quick clarification on the question. We're wondering about setup/configuration changes (metadata) like new field creation, profile updates, or Apex class updates, and whether Splunk can show who made the change and when, akin to the Setup Audit Log within Salesforce. This is separate from record data updates that would be captured in field history tracking.

[ehaddad_splunk]

Hi

You can track any field exposed by field history. Additionally, if you purchased field audit trail:
http://releasenotes.docs.salesforce.com/en-us/spring15/release-notes/rn_forcecom_data_field_audit_tr...
you get the ability to track additional fields including custom ones (you might want to check with Salesforce on the capabilities on that front). Because all this data is exposed via rest API, you can collect that data in Splunk using the Salesforce App and build your own vizualization/reports and alerts.
Let us know if you like to have a discussion around that.