-
Notifications
You must be signed in to change notification settings - Fork 6
gdrive-log connector #1414
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Open
eschultink
wants to merge
4
commits into
rc-v0.7.1
Choose a base branch
from
s233-proxy-gdrive
base: rc-v0.7.1
Could not load branches
Branch not found: {{ refName }}
Loading
Could not load tags
Nothing to show
Loading
Are you sure you want to change the base?
Some commits from the old base branch may be removed from the timeline,
and old review comments may become outdated.
Open
gdrive-log connector #1414
Changes from all commits
Commits
Show all changes
4 commits
Select commit
Hold shift + click to select a range
b6e651c
Add beta gdrive-log connector for Drive events from Workspace audit l…
eschultink 10ff45c
Harden examples-dev ./apply for shared remote state and worktree-loca…
eschultink 3df104a
Merge rc-v0.7.1: OneDrive group drives, Teams call-record sanitizatio…
eschultink f70434a
Harden gdrive-log sanitization for resourceDetails, actor IDs, and cl…
eschultink File filter
Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
There are no files selected for viewing
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1 @@ | ||
| google-workspace/gdrive-log/README.md |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,48 @@ | ||
| # Google Drive Audit Log | ||
|
|
||
| **Connector ID:** `gdrive-log` | ||
|
|
||
| **Availability:** Beta | ||
|
|
||
| Please review the [Google Workspace™ README](../README.md) for general information applicable to | ||
| all Google Workspace connectors. | ||
|
Comment on lines
+7
to
+8
|
||
|
|
||
| This connector pulls Drive events from the Google Workspace audit log (Reports API), rather than the Drive files API used by the [`gdrive`](../gdrive/README.md) connector. | ||
|
|
||
| ## Caveats | ||
|
|
||
| Relative to [`gdrive`](../gdrive/README.md), this source includes additional activity types that the Drive files API does not expose as an event stream — for example views, comments, downloads, and previews, in addition to creates, edits, and sharing changes. | ||
|
|
||
| The tradeoff is lookback. Google retains Drive audit-log events for about **6 months** (180 days). Older activity is not available from the Reports API, even if the files themselves still exist. Historical collaboration that predates that window is better covered by the files API connector. | ||
|
|
||
| Activity records can include the actor's client IP, which is often a residential address. Those values are hashed with the `hashIp` transform (emitted as `t~...` tokens), not passed through in the clear. | ||
|
|
||
| See Google's [Drive activity report](https://developers.google.com/workspace/admin/reports/v1/guides/manage-audit-drive) and [data retention](https://support.google.com/a/answer/7061566) documentation. | ||
|
|
||
| ## Required OAuth Scopes | ||
|
|
||
| - `admin.reports.audit.readonly` | ||
|
|
||
| For Domain-wide Delegation in the Google Workspace Admin console, paste the following comma-separated list into the **Scopes** field: | ||
|
|
||
| ``` | ||
| https://www.googleapis.com/auth/admin.reports.audit.readonly | ||
| ``` | ||
|
|
||
| ## Required GCP APIs | ||
|
|
||
| Enable the following API in the GCP project where you provision the OAuth client: | ||
|
|
||
| - `admin.googleapis.com` (Admin SDK API) | ||
|
|
||
| ## Examples | ||
|
|
||
| - [Example Rules](gdrive-log.yaml) | ||
| - Example Data: | ||
| - [original/drive-activities.json](example-api-responses/original/drive-activities.json) | | ||
| [sanitized/drive-activities.json](example-api-responses/sanitized/drive-activities.json) | ||
|
|
||
|
|
||
| --- | ||
| Google Workspace™ and related marks are trademarks of Google LLC. | ||
| Worklytics™ is a trademark of Worklytics, Corp. | ||
|
Member
Author
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. Worklytics, Co. |
||
Oops, something went wrong.
Oops, something went wrong.
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
DEPRECATED