Hi, We have just released a new module called 'SkyFormation Extend' that is doing exactly this. "SkyFormation Extend © for Splunk extracts and enriches security events from multiple business cloud applications (e.g. Salesforce, Google App) and transforms them to unified and actionable stream of security events sent into the organization’s Splunk. SkyFormation Extend© sends its security events to Splunk where they can be stored, analyzed and acted upon according to the organization’s regulations and security needs.". This is a Java app you can install at on-premise on any machine you want, and it will take you 5 minutes to set it up. Please have a look at: https://splunkbase.splunk.com/app/2932/ Feel more then welcome to ask me any question at asaf@skyformation.com Best Asaf SkyFormation, CEO www.skyformation.com ... View more