Google G Suite Activity Reports log source parameters

When you add a Google G Suite Activity Reports log source on the QRadar Console by using the Google G Suite Activity Reports REST API, you must use specific parameters.

The following table describes the parameters that require specific values to collect Google G Suite Activity Reports events from Google G Suite.

Table 1. Google G Suite Activity Reports REST API protocol log source parameters for the Google G Suite Activity Reports DSM
Parameter	Value
Log Source type	Google G Suite Activity Reports
Protocol Type	Google G Suite Activity Reports REST API
Service Account Credentials	Authorizes access to Google's APIs for retrieving the events. Copy and paste the contents of the JSON formatted file that you downloaded when you completed Configuring Google G Suite Activity Reports to communicate with QRadar.
Delegated User Account Email	The Google user account that has report privileges.

For a complete list of Google G Suite Activity Reports REST API protocol parameters and their values, see Google G Suite Activity Reports REST API protocol options.