All Apps and Add-ons

How to uninstall GSuite for Splunk properly

pfernandez_splu
New Member

Hi all,
Are there any special items that need to be removed when uninstalling the application?
I uninstalled G Suite For Splunk and restart my Splunk instance.
I deleted the "Splunk Super Admin" account from the Google console, but audit emails are always sent to the email address of the "Splunk Super Admin" account.

0 Karma

alacercogitatus
SplunkTrust
SplunkTrust

Uninstalling from Splunk is easy. Remove the folders from $SPLUNK_HOME/etc/apps. Restart. Done.

As far as GSuite itself, that is up to how your G Suite admins approach decomm.

0 Karma

pfernandez_splu
New Member

Thx to your reply, but is there a way to remove email monitoring directly from the add-on or script? It would be easier.
Currently our Admin Gsuite must remove the monitoring by batch of 1500 users.

0 Karma
Get Updates on the Splunk Community!

Enhance Security Visibility with Splunk Enterprise Security 7.1 through Threat ...

(view in My Videos)Struggling with alert fatigue, lack of context, and prioritization around security ...

Troubleshooting the OpenTelemetry Collector

  In this tech talk, you’ll learn how to troubleshoot the OpenTelemetry collector - from checking the ...

Adoption of Infrastructure Monitoring at Splunk

  Splunk's Growth Engineering team showcases one of their first Splunk product adoption-Splunk Infrastructure ...