Collecting Google Workspace logs

[عبدالعزيز بن حلوان‎]

Hello,

Is it possible to collect Google Workspace logs via Wazuh for Email Logs for example detecting phishing and spam emails or Audit logs ?

Thanks,

Abdulaziz

[Kasim Mustapha]

Hello Abdulaziz,

Thanks for reaching out.

Wazuh currently has integration with Google Cloud Services. You can find related information here.

Regarding integration with Google Workspace, Wazuh currently does not have official integration. In any case, we already have a feature request requesting said feature.

You can see it and follow its development here:

However, you can configure Google Workspace logs as a resource, so they can be forwarded to Google Cloud internally using the right credentials and can be managed from the GCP centralized console. Then, use Wazuh's GCP integration approach in order to integrate with this service and collect these logs (using Pub/Sub).

I hope this helps.

Please let me know if you have any further questions or need assistance with the setup.

Best regards,

Kasim Mustapha