Google Cloud Logging is a managed logging solution provided by Google Cloud Platform (GCP) that allows users to collect, store, search, analyze, and monitor logs generated by GCP services, third-party applications, and custom applications running on GCP.
The Google Cloud Logging Cortex XSOAR pack helps users to centralize all their GCP logs in a single location, making it easier to troubleshoot issues and gain insights from their data.
The Google Cloud Logging Integration enables you to retrieve selected log entries that originated from a project/folder/organization/billing account. See the Google Cloud Logging integration documentation for additional details.
The Google Cloud Logging Cortex XSIAM pack helps users to centralize all their GCP logs in a single location, making it easier to troubleshoot issues and gain insights from their data.
The Google Cloud Logging Integration enables you to retrieve selected log entries that originated from a project/folder/organization/billing account. See the Google Cloud Logging integration documentation for additional details.
The SIEM content includes Cortex Data Modeling (XDM) Rules and Parsing Rules which are applied on Google Cloud Audit Logs, Google Cloud DNS Query Logs and Google Cloud VPC Flow Logs. Audit and VPC Flow logs are ingested into the google_cloud_logging_raw dataset, DNS logs are ingested into the google_dns_raw dataset. Log are ingested via the Google Cloud Platform Pub/Sub data source on Cortex XSIAM. See Ingest Logs and Data from a GCP Pub/Sub for additional details.
logName:"cloudaudit.googleapis.com" log_id("dns.googleapis.com/dns_queries") log_id("compute.googleapis.com/vpc_flows")| Name | Description |
|---|---|
| Google Cloud Logging | With Google Cloud Logging, users can centralize all their logs in a single location, making it easier to troubleshoot issues and gain insights from their data. |
| Name | Description |
|---|---|
| Google Cloud Logging | With Google Cloud Logging, users can centralize all their logs in a single location, making it easier to troubleshoot issues and gain insights from their data. |
| Name | Description |
|---|---|
Google Cloud Logging Modeling Rule |
| Name | Description |
|---|---|
Google Cloud Logging Parsing Rule |
| Pack Name | Pack By |
|---|---|
| Base | By: Cortex XSOAR |
| Pack Name | Pack By |
|---|
| Pack Name | Pack By |
|---|---|
| Base | By: Cortex XSOAR |
Added an XDM mapping for GCP logs which are ingested via the Google Cloud Platform Pub/Sub Data Source (Available from Cortex XSIAM 2.3). The XDM apply to the following log types:
Added an assignment of the ingested Audit and DNS logs timestamp field to the _time field for logs ingested via the Google Cloud Platform Pub/Sub Data Source (Available from Cortex XSIAM 2.3).
| Certification | Certified | Read more |
| Supported By | Cortex | |
| Created | May 16, 2023 | |
| Last Release | May 21, 2025 |
