All Apps and Add-ons

Can we fix a Google Workspace Alert Center ingestion delay?

kimberlytrayson
Path Finder

Hello!

Trying to collect Google Workspace Alert Center events using this app https://splunkbase.splunk.com/app/5556

 

Input for the alert center successfully connects to the API but it is a very strange significant delay (few hours) between alert entry in Google and its ingestion to the our Splunkcloud.
From what I can see in app logs - app works correctly and successfully querying API each 300 seconds.

Now I've enabled debug logging, maybe it will help to understand what goes wrong.

Any ideas on troubleshooting are appreciated.


Second question, there is an ADDON-61892 issue (GWS Alert Center: 'Gmail Phishing' source inputs not working as expected) mentioned in the release notes.
Is it possible to get more information on this issue or Splunk issue tracker is private?

Labels (1)

aldente
Engager

Hi, almost a year late to this thread, but experiencing the same. Has there been any resolution for you?

 

Thanks

0 Karma
Get Updates on the Splunk Community!

Stay Connected: Your Guide to November Tech Talks, Office Hours, and Webinars!

🍂 Fall into November with a fresh lineup of Community Office Hours, Tech Talks, and Webinars we’ve ...

Transform your security operations with Splunk Enterprise Security

Hi Splunk Community, Splunk Platform has set a great foundation for your security operations. With the ...

Splunk Admins and App Developers | Earn a $35 gift card!

Splunk, in collaboration with ESG (Enterprise Strategy Group) by TechTarget, is excited to announce a ...