to_google_cloud_pubsub

Publishes events to a Google Cloud Pub/Sub topic.

to_google_cloud_pubsub project_id=string, topic_id=string, message=string

Authentication

The connector tries to retrieve the appropriate credentials using Google’s Application Default Credentials.

Description

The operator publishes one Pub/Sub message per input event. The message content comes from the message expression, which must evaluate to a string.

project_id = string

The project to connect to. This must be the project ID, not the display name.

topic_id = string

The Pub/Sub topic to publish to.

message = string

A string to publish as the message.

Examples

Send alert text to a topic

Publish the alert_text field of every event to alerts-topic:

export
where @name == "suricata.alert"
to_google_cloud_pubsub project_id="amazing-project-123456", topic_id="alerts-topic", message=alert_text

See Also

from_google_cloud_pubsub,