Is it possible to clone Gdrive and Box addons ?

[flzftw]

Hello guys,

I'm using add-ons to gather and analyze Google Drive and Box events in Splunk. From the add-ons configuration, I can only get the logs from a single source. I tried to install the same add-ons next to the existing ones, but I get errors. Is there a way to clone or copy the add-ons so I can use them to gather new logs from different Box and Drive accounts ?

Splunk Add-on for Google Drive:
splunkbase.splunk.com/app/2892/

Splunk Add-on for Box:
splunkbase.splunk.com/app/2679/

Thanks !

[alacercogitatus · Accepted solution]

Ok, so this app: https://splunkbase.splunk.com/app/2714/ supports multiple domains. You'll need to configure it pretty much like the GDrive app you have. You will get more information out of the APIs, including calendar, admin, login, and token usages ( as well as google drive).

I can't help with multiple domain Box.

I wrote the Google Apps for Splunk, so hit me up via email (listed), IRC (#splunk on EFNet), or Slack (ask around for me) if you have any questions/problems. Thanks!

[alacercogitatus]

Are you running a domain (ala Google Apps for Work, Google Apps for Education)?

[flzftw]

Yes I'm using Google Apps for Work for a single domain and It's working great. But I want to add new ones by installing the apps next to the existing ones since the configuration for both Box and Gdrive addons require one domain only.