InsightIDR: Google Workspace Logs

mmur_gt4e · October 15, 2024, 8:12am

Hey,

We´re trying to get Google Workspace logs to the SIEM, NOT Google Apps nor Google Cloud.
It should be something like this: Google Workspace/Google Suite integration · Issue #10776 · wazuh/wazuh (github.com)

Please, Has anyone go through this?

Thanks in advance

testuser · October 15, 2024, 1:59pm

Hi Mike,

You can use Google Cloud Platform as Event source with OAuth. I did that almost 1 month ago and it works.

mmur_gt4e · October 15, 2024, 2:12pm

Hey testuser, thanks for replying, but we actually need to get Workspace logs, not Cloud. Are we talking about the same?

testuser · October 18, 2024, 9:31am

This documents may help you.