AlienVault® USM Anywhere™

GCP Log Discovery and Collection in USM Anywhere

The Google Cloud Platform (GCP) Sensor uses the Google Cloud Pub/Sub to power asynchronous log collection. Cloud Pub/Sub operates based on an export/subscribe model wherein your environment's logs are exported to one or more topics via export sinks. Your GCP Sensor pulls and processes these logs from the enabled Cloud Pub/Sub subscriptions. See the Google Cloud Pub/Sub documentation for more information.

To enable log collection, you can:

Warning: You must have the Cloud Pub/Sub API enabled before beginning these steps