Logpresso Store

4. Logpresso Setup

Step 1: Install the App

Install the Google Workspace app by referring to Install an app.

Caution

When upgrading from an earlier version to 1.9.2610.0 or later, disable all Google Workspace collectors before upgrading, and enable them again after the upgrade. Upgrading while collectors are running may stop them with an error. If they have already stopped, disable and enable them again. Collectors resume from the last collection point, so no logs are lost.

Step 2: Add a Connect Profile

Referring to Add a connect profile, add a connect profile for your authentication method in System > Connect Profiles. To collect only Alert Center with the service account method, create profiles for both methods.

Service Account

Item	Required	Value
Name	Required	A name to identify the connect profile
Identifier	Required	The identifier used in queries and collectors (e.g., `gws_sa`)
Type	Required	Google Workspace
Customer ID	Optional	Used only by the domain, user, and group query commands. If left empty, the organization of the delegated user is used
Delegated User	Required	Email of the dedicated integration account assigned the admin role
Service key	Required	Full content of the service account JSON key file
HTTP Proxy	Optional	`IP:PORT` when connecting through a proxy

To specify the Customer ID, find it in Account > Account settings in the Admin console.

For Delegated User, enter the email of the dedicated integration account created in Step 1 of 2. Google Workspace Preparation.

User Account OAuth

Write the JSON to put in Service key. Do not use the client JSON file downloaded from Google Cloud; its format is different.

{
  "type": "authorized_user",
  "client_id": "OAuth client ID",
  "client_secret": "OAuth client secret",
  "refresh_token": "Refresh token"
}

Key	Value
`client_id`, `client_secret`	Client ID and client secret of the OAuth client created in Step 2 of 3-2. User Account OAuth. Not the client ID of the service account
`refresh_token`	Refresh token issued in Step 3 of 3-2. User Account OAuth (starts with `1//`)

Enter the following.

Item	Value
Name, Identifier	e.g., `gws_oauth`
Type	Google Workspace
Customer ID	Leave empty (the organization of the consenting account is used)
Delegated User	Leave empty (not used with the OAuth method)
Service key	The JSON written above. It is masked after saving, so keep the original separately

Note

In versions earlier than 1.9.2610.0, Customer ID and Delegated User are required, so enter any value (e.g., dummy).

Step 3: Add Collectors

Add the collectors you need by referring to Add a logger. Table names must start with the prefixes below to appear in the app's datasets and dashboards.

Logger model	Table name (prefix)
Google Workspace Admin Activity	`GOOGLE_ADMIN`
Google Workspace Login	`GOOGLE_LOGIN`
Google Drive Activity	`GOOGLE_DRIVE`
Google Meet Activity	`GOOGLE_MEET`
Google Chat Activity	`GOOGLE_CHAT`
Google Workspace Alert Center	`GOOGLE_ALERT`

Common settings for all collectors are as follows.

Item	Value
Name	A name to identify the collector
Interval	60 seconds or more recommended
Storage node / Collection node	Nodes that match your Logpresso platform configuration
Logger model	A logger model from the table above
Table	A name starting with the prefix in the table above
Connect profile	Identifier of the connect profile created above. Use the service account profile for the Alert Center collector

If a collector or query command fails, see Troubleshooting.