search
Sprinto DashboardAPI Reference

How to resolve Sprinto check to configure GCP sinks for log entries

hashtag
About:

Sprinto check: GCP Sink should be configured for all log entries

The above-mentioned Sperinto check verifies that log sinks are configured to export all log entries from your Google Cloud Platform (GCP) projects. Log sinks are destinations where log entries are exported for long-term storage, analysis, or integration with other systems.

hashtag
Purpose:

The purpose of this check is to ensure that all log entries generated by your GCP projects are captured and exported to configured log sinks. Log entries provide valuable insights into system events, user activities, and potential security incidents. By exporting log entries to log sinks, you can retain and analyze these logs for various purposes, such as security monitoring, compliance auditing, and troubleshooting.

hashtag
How to fix this check:

Follow the below steps to resolve the check:

hashtag
Before you begin

  • Ensure you have the administrator privilege to manage logging settings on the GCP account.

hashtag
Configuring Log Sinks

Follow the below steps to configure GCP Log sinks:

Note: Sprinto checks verify the presence of the GCP sink on your account and set the check status to “Passing” even if one sink is configured.

  1. Log in to the GCP Consolearrow-up-right using your credentials.

  2. Navigate to the Logging service, and then select Logs Router from the navigation bar on the left side.

  3. Click Create Sink to create a new sink.

  4. Configure the sink settings:

  • Enter the GCP sink name and description, then click Next.

  • Select a destination for the sink, then click Next.

  • Create an inclusion filter to define the logs that need to be included for routing, then click Next. Learn more about the logging query syntaxarrow-up-right.

  • Optionally, set filters to include or exclude specific log entries.

  1. Click Create Sink to apply the changes. Similarly, you can create log sinks for your usage.

Sprinto will detect the configuration change and set the check status to "Passing."

Contact Sprinto supportenvelope if you have any queries related to the check or need assistance.

PreviousHow to resolve Sprinto check for restricting public access from GCP cloud storage bucketsNextHow to resolve Sprinto check to redirect traffic from http to https for Google Cloud Platform (GCP)

Last updated