Connect Google Analytics to Elastic Security

Both apps 18Google Analytics 8Elastic Security 10

• Trigger
  New Daily Report Row

  Triggers once for each report row of the previous full day (in the property's time zone), with the chosen dimensions and metrics as fields. Checks for yesterday's rows on every poll and delivers each row once.

• Action
  Get Metadata

  Returns the dimensions and metrics available for reporting on a GA4 property, including custom ones.

• Action
  Get Property

  Returns the details of one GA4 property, such as its name, time zone and currency.

• Action
  List Accounts

  Returns the Google Analytics accounts the connected user can access.

• Action
  List Audiences

  Returns the audiences defined on a GA4 property.

• Action
  List Properties

  Returns the GA4 properties under an account.

• Action
  Run Realtime Report

  Runs a GA4 realtime report covering the last 30 minutes of activity on a property.

• Action
  Run Report

  Runs a GA4 report for the chosen dimensions, metrics and date range and returns one row per dimension combination.

• Action
  Add case comment

  Adds a user comment, or attaches an alert, to an existing Elastic Security case and returns the updated case.

• Action
  Add detection rule

  Creates a detection rule in Elastic Security (custom query, EQL, ES|QL, threshold, indicator match, new terms, saved query or machine learning).

• Action
  Add exception list item

  Creates an exception item in an existing Elastic Security exception list, so matching events stop producing detection alerts.

• Action
  Delete detection rule

  Deletes a detection rule, identified by its internal id or its stable rule ID, and returns the deleted rule.

• Action
  Find cases

  Searches cases by text in their title or description, optionally narrowed by status, severity, tags, owner, assignee, reporter, category or creation date.

• Action
  Find detection rules

  Finds detection rules in Elastic Security matching a filter, such as by name, tag or enabled state.

• Action
  Get detection rule

  Returns a detection rule's full details, looked up by its internal id or its stable rule_id.

• Action
  Get exception list item

  Returns one exception list item, looked up by its id or its human-readable item ID.

• Action
  Update case

  Updates an existing case's title, description, status, severity, tags, assignees and other fields.

• Action
  Update detection rule

  Updates selected settings of an existing detection rule, leaving any setting you leave blank unchanged. Returns the updated rule.

No trigger or action matches that. Ask your agent to add it: it reads the API documentation and builds what you describe.