All Apps and Add-ons

Organization Unit (OU) Needed

vnguyen46
Contributor

Hi Everyone,

I already installed this app along with the TA and it seems working okay with not many visio displays, but that's alright.
The issue is that there is no where in the log I can find the organization unit (OU) where a user belongs to.

Anyone knows how/where I can find the OU names?
Thanks,

Tags (1)
0 Karma

vnguyen46
Contributor

I already once signed up for this group, but now I don't know where to login.
Can you share me the login page?

Thanks,

0 Karma

alacercogitatus
SplunkTrust
SplunkTrust

This is not currently available. I wrote some code really quick, and in v1.3.2 ( or v1.4.0 not sure on version yet) I will have a new sourcetype "gapps:admin:directory:users" that will list all of the user information, including org. Be careful though, this may expose PII into your Splunk environment. But the option is there.

0 Karma

alacercogitatus
SplunkTrust
SplunkTrust

If you want a beta build, hit me up on Slack (splk.it/slack)

0 Karma

vnguyen46
Contributor

Can you give a time window when the newer version with OU pulling is available?
Thanks,

0 Karma

alacercogitatus
SplunkTrust
SplunkTrust

Once I nail down the BigQuery inputs for Gmail Headers, I'll release v1.4.0 (or maybe v1.3.2 not sure yet)

0 Karma

vnguyen46
Contributor

v1.3.1 is the latest on Splunkbase and not extracting OUs. I am looking forward to the newer version with the field name.
Thanks,

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

A Four-Part Event Series: Full Stack Observability For the AI Era

As AI reshapes applications, infrastructure, and the way teams operate, the traditional boundaries of ...

SOC4Kafka - New Kafka Connector Powered by OpenTelemetry

The new SOC4Kafka connector, built on OpenTelemetry, enables the collection of Kafka messages and forwards ...

Event Series: Level up your SOC: Advancing with Splunk Enterprise Security

AI has fundamentally raised the stakes for security operations, and this three-part series is your guide to ...