topic Re: Organization Unit (OU) Needed in All Apps and Add-ons

Organization Unit (OU) Needed

vnguyen46 — Thu, 25 Apr 2019 13:35:29 GMT

Hi Everyone,

I already installed this app along with the TA and it seems working okay with not many visio displays, but that's alright.
The issue is that there is no where in the log I can find the organization unit (OU) where a user belongs to.

Anyone knows how/where I can find the OU names?
Thanks,

Re: Organization Unit (OU) Needed

alacercogitatus — Fri, 26 Apr 2019 20:40:25 GMT

This is not currently available. I wrote some code really quick, and in v1.3.2 ( or v1.4.0 not sure on version yet) I will have a new sourcetype "gapps:admin:directory:users" that will list all of the user information, including org. Be careful though, this may expose PII into your Splunk environment. But the option is there.

Re: Organization Unit (OU) Needed

alacercogitatus — Fri, 26 Apr 2019 20:42:24 GMT

If you want a beta build, hit me up on Slack (splk.it/slack)

Re: Organization Unit (OU) Needed

vnguyen46 — Mon, 29 Apr 2019 12:41:20 GMT

v1.3.1 is the latest on Splunkbase and not extracting OUs. I am looking forward to the newer version with the field name.
Thanks,

Re: Organization Unit (OU) Needed

vnguyen46 — Mon, 29 Apr 2019 12:45:13 GMT

I already once signed up for this group, but now I don't know where to login.
Can you share me the login page?

Thanks,

Re: Organization Unit (OU) Needed

vnguyen46 — Wed, 01 May 2019 12:55:19 GMT

Can you give a time window when the newer version with OU pulling is available?
Thanks,

Re: Organization Unit (OU) Needed

alacercogitatus — Wed, 01 May 2019 12:57:19 GMT

Once I nail down the BigQuery inputs for Gmail Headers, I'll release v1.4.0 (or maybe v1.3.2 not sure yet)