I'm working with an Google Super Admin and I'm trying to get Google DLP Logs into Splunk Cloud.
There is a HEC that is set up and the majority of the logs are flowing into Splunk via the HTTP Event Collector however, the problem I'm running into is that from the Google Admin Console, I can see and search the DLP logs BUT those logs, when I search in Splunk are not there.
Google Work Space logs are coming in and the Super Admin states that he is sending everything on their side into Splunk.
