All Apps and Add-ons

Can we fix a Google Workspace Alert Center ingestion delay?

kimberlytrayson
Path Finder

Hello!

Trying to collect Google Workspace Alert Center events using this app https://splunkbase.splunk.com/app/5556

 

Input for the alert center successfully connects to the API but it is a very strange significant delay (few hours) between alert entry in Google and its ingestion to the our Splunkcloud.
From what I can see in app logs - app works correctly and successfully querying API each 300 seconds.

Now I've enabled debug logging, maybe it will help to understand what goes wrong.

Any ideas on troubleshooting are appreciated.


Second question, there is an ADDON-61892 issue (GWS Alert Center: 'Gmail Phishing' source inputs not working as expected) mentioned in the release notes.
Is it possible to get more information on this issue or Splunk issue tracker is private?

Labels (1)
0 Karma
Get Updates on the Splunk Community!

Splunk Lantern | Getting Started with Edge Processor, Machine Learning Toolkit ...

Splunk Lantern is Splunk’s customer success center that provides advice from Splunk experts on valuable data ...

Enterprise Security Content Update (ESCU) | New Releases

In the last month, the Splunk Threat Research Team (STRT) has had 2 releases of new security content via the ...

Announcing the 1st Round Champion’s Tribute Winners of the Great Resilience Quest

We are happy to announce the 20 lucky questers who are selected to be the first round of Champion's Tribute ...