to_google_cloud_logging

Sends events to Google Cloud Logging.

to_google_cloud_logging log_id=string, [project=string, organization=string,
          billing_account=string, folder=string,] [resource_type=string,
          resource_labels=record, payload=string, severity=string,
          timestamp=time, service_credentials=string, batch_timeout=duration,
          max_batch_size=int]

Description

Sends events to Google Cloud Logging.

log_id = string

ID to associated the ingested logs with. It must be less than 512 characters long and can only include the following characters: upper and lower case alphanumeric characters, forward-slash, underscore, hyphen, and period.

project = string (optional)

A project id to associated the ingested logs with.

organization = string (optional)

An organization id to associated the ingested logs with.

billing_account = string (optional)

A billing account id to associated the ingested logs with.

folder = string (optional)

A folder id to associated the ingested logs with.

Note

At most one of project, organization, billing_account, and folder can be set. If none is set, the operator tries to fetch the project id from the metadata server.

resource_type = string (optional)

The type of the monitored resource. All available types with their associated labels are listed here.

Defaults to global.

resource_labels = record (optional)

Record of associated labels for the resource. Values of the record must be of type string.

Consult the official docs for available types with their associated labels.

payload = string (optional)

The log entry payload. If unspecified, the incoming event is serialised as JSON and sent.

service_credentials = string (optional)

JSON credentials to use if using a service account.

severity = string (optional)

Severity of the event. Consult the official docs for available severity levels.

Defaults to default.

timestamp = time (optional)

Timestamp of the event.

batch_timeout = duration (optional)

Maximum interval between sending the events.

Defaults to 5s.

max_batch_size = int (optional)

Maximum events to batch before sending.

Defaults to 1k.

Example

Send logs, authenticating automatically via ADC

from {
  content: "log message",
  timestamp: now(),
}
to_google_cloud_logging log_id="LOG_ID", project="PROJECT_ID"

Send logs using a service account

from {
  content: "totally not a made up log",
  timestamp: now(),
  resource: "global",
}
to_google_cloud_logging log_id="LOG_ID", project="PROJECT_ID"
  resource_type=resource,
  service_credentials=file_contents("/path/to/credentials.json")

See Also

to_google_secops