Collect logs for Google Cloud Audit

Follow

Tomoaki Tada

• February 28, 2018 00:57
• Edited

Hi,

I set up "Collect Logs for Google Cloud Audit".

But, a streamed log data is not enough contents. i guess.

no "resource.labels", no "resource.labels.project_id", no "protoPayload.authenticationInfo.principalEmail" ....

so I couldn't create Google Cloud Audit App.

Could you tell what I should ? 

 

Regards,

Tomoaki Tada

0

• 

  Duc Ha

  • March 09, 2018 19:39

  It seems you've successfully setup log forwarding from Pub/Sub to Sumo. For GCP apps, you still need to setup a sink from Stackdriver to a topic in PubSub. The specific instructions for that depend on what app you are talking about.

  https://help.sumologic.com/Special:Search?qid=&fpid=230&fpth=&path=&search=Collect+logs+Google

  Specifically for GCP Audit: 

  https://help.sumologic.com/Send-Data/Applications-and-Other-Data-Sources/Google-Cloud-Audit/Collect-Google-Cloud-Audit-Logs

   

   

  0

  Permalink

Please sign in to leave a comment.