Hello guys,
I am receiving google cloud events in my arcsight connector, when i add a user to the organisation i want to monitor who adds them and who they add, at the moment i only see who they add and what action they take.
Does anyone know if this is due to a configuration error or is normally?
I attach a example of my event, thank you. (In the image you can see that i only receive the source user "suser").