Skip to content

[Google Workspace] Update mappings for recent admin log event changes #15821

@cpascale43

Description

@cpascale43

Google has made recent changes to its admin log event schema, as described here.

These changes include modifications to some event names, event types, and log event frequency for the following Admin console settings:

Account & security
App access control
Google Drive settings with inherited values
Drive
Gmail
New Gmail parameters
New Gmail events

We should review the changes in case any modifications are needed to ECS mappings.

Metadata

Metadata

Labels

Integration:google_workspaceGoogle WorkspaceTeam:Security-Service IntegrationsSecurity Service Integrations team [elastic/security-service-integrations]Team:Sit-CrestCrest developers on the Security Integrations team [elastic/sit-crest-contractors]

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions