Hi! Is it possible to customize Wazuh -> Overview -> Security Events Dashboard? and remove several charts? Do I need to modify js code? ... View more

Hi, we have installed G Suite App for Splunk. App permission is Global. All objects has global permissions as well. But eventtypes and tags are not available outside the app, so I cannot map this data to CIM datamodels. Should I modify /opt/splunk/etc/apps/GSuiteForSplunk/metadata/local.meta, like this: [tags/sourcetype%3Dgapps%253Areport%253Alogin/authentication] access = read : [ * ], write : [ admin ] export = system owner = nobody version = 7.1.2 modtime = 1547719510.122789000 Search example: sourcetype="gapps:report:login" ... View more