Is it possible to set Direct Ingestion of Workspace Activity logs from multiple consoles/organisations to the same SecOps instance?
https://docs.cloud.google.com/chronicle/docs/ingestion/default-parsers/workspace-activity
Answer
Workspace Activity Logs from multiple organisations in the same Google SecOps instance
+11Yes, this is supported.
Enter your E-mail address. We'll send you an e-mail with instructions to reset your password.