Embedded Files
Beyond the basic security controls in the Google Admin console, the security center provides a deeper look at your security data. It creates insightful, customizable reports that allow you to easily share critical security information across your organization.
As an Administrator, you can view summaries of security center report data in the security dashboard, use the investigation tool to identify and address security issues in your domain, and monitor Admin console settings from the security health page.
Supported editions for this feature include Frontline Standard and Frontline Plus, Enterprise Standard and Enterprise Plus, Education Standard and Education Plus, and Enterprise Essentials Plus.
Let's see the scene
Let's see the scene
In this exercise, you’ll view reports from the security center and run a search using the security investigation tool.
Raha has sent you an email to ask about Google Calendar settings.
Exercise directions
Exercise directions
Part 1: Run a search in the security health page
Step 1
If you’re not already signed in, sign in to your domain as the Administrator at admin.google.com.
Step 2
From the main menu, navigate to Security, select Security center, and then click Security health.
Step 3
Click + Add a filter.
Step 4
Click Application, select Calendar, and then click APPLY. From here, you should be able to see any settings you have configured for Google Calendar that differ from Google's recommended security baseline.
-- --
Part 2: Start an investigation from the security center
Step 1
Navigate back to Security, select Security center, and then click Investigation tool.
Step 2
Click the Data source dropdown menu and select Gmail messages.
Step 3
Click Add Condition and apply the following filters:
External: is True
Recipient domain: is <yourdomain>
Date: is within the last month
Step 4
To get the breakdown requested, click the Group by attribute and select Delivery status. Then click SEARCH.
Step 5
Click the Actions button (or the Export icon) and select Export to Sheet.
Step 6
Enter a name for the report in the dialog box and click EXPORT. You can access the file using the Tasks icon (the clock/arrow icon in the top header) or in your Google Drive once the process completes.
Notes
Notes
Data used in security dashboard reports is updated every 15 minutes. New data is shown within 15 minutes of the logs first being recorded.
Help Center resources
Help Center resources
Explore more about the security center in the Google Workspace Admin Help Center.
Page updated
Report abuse