https://community.splunk.com/t5/Getting-Data-In/Input-Google-Workspace-logs-of-specific-users/m-p/694823#M115437 <P>Yes, this is possible. I can add the filter, but it will be 1to1, so 1 input per user to monitor. If you have 100s of users to monitor, that will become cumbersome to manage.</P><P>Did you have an idea on how multiple users would be configured in the UI?</P> Wed, 31 Jul 2024 13:12:51 GMT alacercogitatus 2024-07-31T13:12:51Z https://community.splunk.com/t5/Getting-Data-In/Input-Google-Workspace-logs-of-specific-users/m-p/694644#M115425 <P>The GWS is running for the whole company.</P><P>Is it possible to only input a part of users' logs into Splunk, using add-on for GWS or some filter function somewhere?</P><P>If I only want to monitor members from a specific department of my organization, how can I filter on GWS?</P><P>I think logs could be filtered while sending to Splunk by GCP, but what about directly using GWS add-on?</P><P>Maybe this question is more about Google Service....</P><P>Anyone familiar please kindly help, thank you!&nbsp;</P> Tue, 30 Jul 2024 07:29:45 GMT https://community.splunk.com/t5/Getting-Data-In/Input-Google-Workspace-logs-of-specific-users/m-p/694644#M115425 yanjingz 2024-07-30T07:29:45Z https://community.splunk.com/t5/Getting-Data-In/Input-Google-Workspace-logs-of-specific-users/m-p/694823#M115437 <P>Yes, this is possible. I can add the filter, but it will be 1to1, so 1 input per user to monitor. If you have 100s of users to monitor, that will become cumbersome to manage.</P><P>Did you have an idea on how multiple users would be configured in the UI?</P> Wed, 31 Jul 2024 13:12:51 GMT https://community.splunk.com/t5/Getting-Data-In/Input-Google-Workspace-logs-of-specific-users/m-p/694823#M115437 alacercogitatus 2024-07-31T13:12:51Z