I am interested in ingesting Google Cloud Audit logs with the serviceName “Login.googleapis.com” to google secops SIEM and for some reason that led me to Google Workspace.
I tried to use the export filter to filter for the logs associated with this service but that didn´t work.
Anyone can suggest what is the best mechanism to send specifically “Login.googleapis.com” audit logs to google secops ?