New Google Cloud Security Customer Success Services Available!
We are excited to announce the availability of Google Cloud Security Customer Success subscriptions. Optimize ...
Forum Posts
Trying to deploy a Chronicle instance
I am starting recently on Chronicle; I have created a new project and enabled a Chronicle API, but the next st...
🚨 Google Security Ops Gets Even BETTER! Your Q4 Feature Update Recap! 🚨
Missed the original announcement? No worries, I've got you covered! Google Cloud dropped some seriously awesom...
Feed management new features - Feed names and support for push logs
April 26, 2024 The feed management feature is now enhanced to include the following: Feed names: You can assig...
Chronicle Security Operations has been rebranded to Google Security Operations
April 25, 2024 Chronicle Security Operations (Chronicle SecOps) has been rebranded to Google Security Operatio...
Introducing Your New Weekly Contributor to the Security Forums
Are you hungry for more Google Security content? Craving a way to easily find those hidden gems of knowledge? ...
chronicle webhook feed
HI everyoneIs there any chance that the webhook feed will be restored?Roberto
Chronicle console access error
We are getting below error while accessing Chronicle console. Any idea why this error is coming ?SSO login was...
Chronicle installment
I can't downloaded chronicle, I have already registered for for free edition but still I can't even get a chro...
I want to change my Chronicle SSO provider using Google SSO, but facing this issue ..
I want to change my Chronicle SSO provider using Google SSO, but facing this issue when trying to create Workf...
Workday Integration to Chronicle SIEM
Do you have any documentation on the integration of Workday with CSIEM? I understand this typically involves a...
Chronicle Architectural Diagram
I'm looking for an architectural diagram of Google Chronicle which will be used for BCP/DR. Any idea where do ...
Bulk Close Alerts in SIEM
Is there a method to close multiple alerts simultaneously in the SIEM? We've faced an issue where rules set as...
API to manage alerts
Hi,is there any API endpoint to manage alerts? We'd like to be able to close alerts from scripting and externa...
Logging Hosts Vs Non Logging Hosts
Hello,I'm currently exploring the various dashboard options to distinguish between logging hosts and non-loggi...
New Google Cloud Security Customer Success Services Available!
We are excited to announce the availability of Google Cloud Security Customer Success subscriptions. Optimize ...
Revert the default role to Administrator
I'm new to Chronicle. I have updated the default role from Administrator to ViewerWithNoDetectAccess on Chroni...
How to configure IdP for login in Chronicle
Hi all,I'm trying to set up a project for Google Chronicle, and I'm at the step of creating an IdP according t...
Error while running the forwarder
Hello All,I was trying to install forwarder on my test machine which has been newly configured and it is showi...
Read logs from S3 with file start with condition
Hi All,How can I read file from Amazon S3, with condition that file starts with "email-" ?
Zscaler log ingestion
Hi everyoneHas anyone had any experience with ingesting ZScaler logs?I was expecting a cloud-to-cloud connecti...
Hubspot logs to chronicle
Hi,Is there a way to ingest Hubspot CRM audit logs to collect to Chronicle? I think we can collect them to GCP...
Clone Widget to another dashboard
Hi,Is there any way to clone a widget from one dashboard to another? I see an option to duplicate the widget w...
What is BigQuery export feature in Chronicle ?
There's an official Chronicle Looker block available on the Marketplace, and it mentions that the 'BigQuery Ex...
Failed to connect to Chronicle Alerts APIs
We are try to extract alert generated in Chronicle instance with the below approaches: Approach 1: https://clo...