diff --git a/packages/salesforce/changelog.yml b/packages/salesforce/changelog.yml
index 6d18f1f9d20..8c8ec522f08 100644
--- a/packages/salesforce/changelog.yml
+++ b/packages/salesforce/changelog.yml
@@ -1,4 +1,9 @@
 # newer versions go on top
+- version: "1.4.1"
+  changes:
+    - description: Fix query cursor for `setupaudittrail`
+      type: bugfix
+      link: https://github.com/elastic/integrations/pull/15762
 - version: "1.4.0"
   changes:
     - description: Improve documentation
diff --git a/packages/salesforce/data_stream/setupaudittrail/agent/stream/salesforce.yml.hbs b/packages/salesforce/data_stream/setupaudittrail/agent/stream/salesforce.yml.hbs
index 158bba7ed2f..62f80c2b804 100644
--- a/packages/salesforce/data_stream/setupaudittrail/agent/stream/salesforce.yml.hbs
+++ b/packages/salesforce/data_stream/setupaudittrail/agent/stream/salesforce.yml.hbs
@@ -25,7 +25,7 @@ event_monitoring_method:
       default: SELECT FIELDS(STANDARD) FROM SetupAuditTrail{{#if initial_interval}} WHERE CreatedDate > [[ (formatTime (now.Add (parseDuration "-{{initial_interval}}")) "2006-01-02T15:04:05.000Z0700") ]]{{/if}} ORDER BY CreatedDate ASC NULLS FIRST
       value: SELECT FIELDS(STANDARD) FROM SetupAuditTrail WHERE CreatedDate > [[ .cursor.object.last_event_time ]] ORDER BY CreatedDate ASC NULLS FIRST
     cursor:
-      field: "EventDate"
+      field: "CreatedDate"
 tags:
 {{#if preserve_original_event}}
   - preserve_original_event
diff --git a/packages/salesforce/manifest.yml b/packages/salesforce/manifest.yml
index 95c0d1d5346..e5ec1d856be 100644
--- a/packages/salesforce/manifest.yml
+++ b/packages/salesforce/manifest.yml
@@ -1,7 +1,7 @@
 format_version: 3.0.2
 name: salesforce
 title: Salesforce
-version: "1.4.0"
+version: "1.4.1"
 description: |
   Collect logs from Salesforce instances using the Elastic Agent. This integration enables monitoring and analysis of various Salesforce logs, including Login, Logout, Setup Audit Trail, and Apex execution logs. Gain insights into user activity, security events, and application performance.
 type: integration