Google Workspace

Download 11
Last updated Oct 18, 2022

google-workspace-oauth-logs

Get OAuth token activity logs from Google Workspace.

google-workspace-oauth-logs [profile=PROFILE] [duration=NUM{mon|w|d|h|m|s}] [from=yyyyMMddHHmmss] [to=yyyyMMddHHmmss]
profile=PROFILE
Profile name of Google Workspace
duration=NUM{mon|w|d|h|m|s}
Scan only recent data. You should use s(second), m(minute), h(hour), d(day), mon(month) time unit. For example, 10s means data from 10 seconds earlier.
from=yyyyMMddHHmmss
Start time of range. yyyyMMddHHmmss format. If you omit time part, it will be padded by zero.
to=yyyyMMddHHmmss
End time of range. yyyyMMddHHmmss format. If you omit time part, it will be padded by zero.

Output Fields

FieldTypeNameDescription
profileStringConnect profileProfile name of Google Workspace
_timeDateTime
src_ipIP addressSource IP address
userStringUser
actionStringActione.g. authorize
app_nameStringApp namee.g. Google Chrome
client_typeStringClient typee.g. WEB, NATIVE_DESKTOP, NATIVE_IOS, NATIVE_ANDROID
client_idStringClient ID
scopesStringScopese.g. https://www.google.com/accounts/OAuthLogin