TELEMETRY PIPELINE
Google Workspace Audit

Google Workspace Audit Logs source plugin

The Google Workspace Audit Logs source plugin lets you retrieve data from Google Workspace and ingest it into Chronosphere Telemetry Pipeline.

This plugin doesn't support the use of a descriptive metadata name in the Pipeline Builder interface.

Supported telemetry types

This plugin supports these telemetry types:

LogsMetricsTraces

Configuration parameters

Use the parameters in this section to configure your plugin. The Telemetry Pipeline web interface uses the values in the Name column to describe the parameters. Items in the Key column are the YAML keys to use in pipeline configuration files.

API Key

NameKeyDescriptionDefault
API Keyaccess_tokenEither an API key or a service account file for authentication.none

Options

NameKeyDescriptionDefault
Enable TelemetrytelemetryIf true, enables telemetry through the Google API. Accepted values: true, false.false
Pull Intervalpull_intervalThe time between calls to the Google API. Minimum of 1s.30s
Data Directorydata_dirThe storage path to allow resuming data collection./data/storage/gsuite-reporter
Application Nameapplication_nameThe application name you want to get reports from. See ApplicationName (opens in a new tab).admin
User Keyuser_keyThe user you want to get reports from.all