All Apps and Add-ons

How to uninstall GSuite for Splunk properly

pfernandez_splu
New Member

Hi all,
Are there any special items that need to be removed when uninstalling the application?
I uninstalled G Suite For Splunk and restart my Splunk instance.
I deleted the "Splunk Super Admin" account from the Google console, but audit emails are always sent to the email address of the "Splunk Super Admin" account.

0 Karma

alacercogitatus
SplunkTrust
SplunkTrust

Uninstalling from Splunk is easy. Remove the folders from $SPLUNK_HOME/etc/apps. Restart. Done.

As far as GSuite itself, that is up to how your G Suite admins approach decomm.

0 Karma

pfernandez_splu
New Member

Thx to your reply, but is there a way to remove email monitoring directly from the add-on or script? It would be easier.
Currently our Admin Gsuite must remove the monitoring by batch of 1500 users.

0 Karma
Get Updates on the Splunk Community!

Stay Connected: Your Guide to May Tech Talks, Office Hours, and Webinars!

Take a look below to explore our upcoming Community Office Hours, Tech Talks, and Webinars this month. This ...

They're back! Join the SplunkTrust and MVP at .conf24

With our highly anticipated annual conference, .conf, comes the fez-wearers you can trust! The SplunkTrust, as ...

Enterprise Security Content Update (ESCU) | New Releases

Last month, the Splunk Threat Research Team had two releases of new security content via the Enterprise ...