Google Data Loss Prevention (DLP) Logs

Getting Data In

I'm working with an Google Super Admin and I'm trying to get Google DLP Logs into Splunk Cloud.

There is a HEC that is set up and the majority of the logs are flowing into Splunk via the HTTP Event Collector however, the problem I'm running into is that from the Google Admin Console, I can see and search the DLP logs BUT those logs, when I search in Splunk are not there.

Google Work Space logs are coming in and the Super Admin states that he is sending everything on their side into Splunk.

Get Updates on the Splunk Community!

Modern way of developing distributed application using OTel

Recently, I had the opportunity to work on a complex microservice using Spring boot and Quarkus to develop a ...

Enterprise Security Content Update (ESCU) | New Releases

Last month, the Splunk Threat Research Team had 3 releases of new security content via the Enterprise Security ...

Archived Metrics Now Available for APAC and EMEA realms

We’re excited to announce the launch of Archived Metrics in Splunk Infrastructure Monitoring for our customers ...