Google Workspace

Download 11
Last updated Oct 18, 2022

google-workspace-drive-logs

Get drive activity logs from Google Workspace.

google-workspace-drive-logs [profile=PROFILE] [duration=NUM{mon|w|d|h|m|s}] [from=yyyyMMddHHmmss] [to=yyyyMMddHHmmss]
profile=PROFILE
Profile name of Google Workspace
duration=NUM{mon|w|d|h|m|s}
Scan only recent data. You should use s(second), m(minute), h(hour), d(day), mon(month) time unit. For example, 10s means data from 10 seconds earlier.
from=yyyyMMddHHmmss
Start time of range. yyyyMMddHHmmss format. If you omit time part, it will be padded by zero.
to=yyyyMMddHHmmss
End time of range. yyyyMMddHHmmss format. If you omit time part, it will be padded by zero.

Output Fields

FieldTypeNameDescription
profileStringConnect profileProfile name of Google Workspace
_timeDateTime
typeStringTypee.g. access, pooled_quota_metadata
src_ipIP addressSource IP address
userStringUsere.g. example@logpresso.com
actionStringActione.g. view, edit, upload, download
doc_typeStringDocument typee.g. unknown, spreadsheet, pdf, msword, msexcel
doc_titleStringDocument title
visibilityStringVisibilitye.g. private, people_with_link, public_in_the_domain
ownerStringOwner
shared_driveBoolShared drive
team_driveBoolTeam drive