Hi all,
Are there any special items that need to be removed when uninstalling the application?
I uninstalled G Suite For Splunk and restart my Splunk instance.
I deleted the "Splunk Super Admin" account from the Google console, but audit emails are always sent to the email address of the "Splunk Super Admin" account.
Uninstalling from Splunk is easy. Remove the folders from $SPLUNK_HOME/etc/apps
. Restart. Done.
As far as GSuite itself, that is up to how your G Suite admins approach decomm.
Thx to your reply, but is there a way to remove email monitoring directly from the add-on or script? It would be easier.
Currently our Admin Gsuite must remove the monitoring by batch of 1500 users.