Google G Suite Activity Reports

The IBM QRadar DSM for Google G Suite Activity Reports receives JSON events from the Google G Suite Activity Reports API.

Important: Google G Suite Activity Reports is supported in QRadar 7.3.2.6, build number 20191022133252 or later.
To integrate Google G Suite Activity Reports with QRadar, complete the following steps:
  1. If automatic updates are not enabled, RPMs are available for download from the IBM® support website (http://www.ibm.com/support). Download and install the most recent version of the following RPMs on your QRadar Console:
    • Protocol Common RPM
    • Google Common RPM
    • Google G Suite Activity Reports REST API protocol RPM
    • Google G Suite Activity Reports DSM RPM
  2. Configure your Google G Suite Activity Reports device to send events to QRadar. For more information, see Configuring Google G Suite Activity Reports to communicate with QRadar.
  3. Add a Google G Suites Activity Reports log source on the QRadar Console. For more information about configuring the log source, see Google G Suite Activity Reports log source parameters.