splunk-google-workspace-ta-setup

What problem does it solve?

Streamlines the deployment of Google Workspace data into Splunk by rendering configuration artifacts, guidance, and validation content for on-boarding and ongoing ingestion.

Core Features & Use Cases

• Render inputs for six Google Workspace data sources: activity_report, gws_gmail_logs, gws_gmail_logs_migrated, gws_user_identity, gws_alert_center, and gws_usage_report.
• Provide an account setup runbook, inputs overlays, validation searches, and a readiness plan for Splunk deployment.
• Validate add-on installation, index creation, and correct configuration of inputs to ensure data ingestion.

Quick Start

Render assets with the setup script, then install the add-on, create the index, configure inputs, and run validation.