From 58e45e3074adeb783b5b1582b8283e7e2a1b38a0 Mon Sep 17 00:00:00 2001 From: Sebastien Quioc Date: Thu, 25 Jul 2024 11:59:52 +0200 Subject: [PATCH] doc(Google): add a warning about login events for the Google Workspace integration --- .../integrations/cloud_and_saas/google/google_reports.md | 3 +++ 1 file changed, 3 insertions(+) diff --git a/docs/xdr/features/collect/integrations/cloud_and_saas/google/google_reports.md b/docs/xdr/features/collect/integrations/cloud_and_saas/google/google_reports.md index e4627770d3..49e61088e1 100644 --- a/docs/xdr/features/collect/integrations/cloud_and_saas/google/google_reports.md +++ b/docs/xdr/features/collect/integrations/cloud_and_saas/google/google_reports.md @@ -124,6 +124,9 @@ Find more information on the [official google documentation](https://cloud.googl ### Pull the logs to collect them on Sekoia.io Go to the Sekoia.io [playbook page](https://app.sekoia.io/operations/playbooks), and follow these steps: + +!!! Warning + For login events, we observe a delay of about two hours in the availability of the information from Google. We strongly recommend you to set the `Timedelta` parameter to, at least 120, in your trigger configuration, or to use the dedicated `Get login user activities` trigger. - Click on **+ PLAYBOOK** button to create a new one - Select **Create a playbook from scratch**