Google Cloud (Stackdriver) Logging Organization Sink
This page shows how to write Terraform for Cloud (Stackdriver) Logging Organization Sink and write them securely.
google_logging_organization_sink (Terraform)
The Organization Sink in Cloud (Stackdriver) Logging can be configured in Terraform with the resource name google_logging_organization_sink
. The following sections describe 5 examples of how to use the resource and its parameters.
Example Usage from GitHub
resource "google_logging_organization_sink" "org_sink_good_1" {
name = "my-sink"
description = "some explaination on what this is"
org_id = "123456789"
destination = google_storage_bucket.log_bucket_good.name
filter = "resource.type = gce_instance AND severity >= WARNING"
resource "google_logging_organization_sink" "org_sink_good_1" {
name = "my-sink"
description = "some explaination on what this is"
org_id = "123456789"
destination = google_storage_bucket.log_bucket_good.name
filter = "resource.type = gce_instance AND severity >= WARNING"
resource "google_logging_organization_sink" "basic" {
name = "basic"
description = "what it is"
org_id = "fake"
destination = "storage.googleapis.com/fake"
resource "google_logging_organization_sink" "basic" {
name = "basic"
description = "what it is"
org_id = "fake"
destination = "storage.googleapis.com/fake"
resource "google_logging_organization_sink" "org_sink_good_1" {
name = "my-sink"
description = "some explaination on what this is"
org_id = "123456789"
destination = google_storage_bucket.log_bucket_good.name
filter = "resource.type = gce_instance AND severity >= WARNING"
Parameters
-
description
optional - string
A description of this sink. The maximum length of the description is 8000 characters.
-
destination
required - string
The destination of the sink (or, in other words, where logs are written to). Can be a Cloud Storage bucket, a PubSub topic, or a BigQuery dataset. Examples: "storage.googleapis.com/[GCS_BUCKET]" "bigquery.googleapis.com/projects/[PROJECT_ID]/datasets/[DATASET]" "pubsub.googleapis.com/projects/[PROJECT_ID]/topics/[TOPIC_ID]" The writer associated with the sink must have access to write to the above resource.
-
disabled
optional - bool
If set to True, then this sink is disabled and it does not export any log entries.
-
filter
optional - string
The filter to apply when exporting logs. Only log entries that match the filter are exported.
-
id
optional computed - string -
include_children
optional - bool
Whether or not to include children organizations in the sink export. If true, logs associated with child projects are also exported; otherwise only logs relating to the provided organization are included.
-
name
required - string
The name of the logging sink.
-
org_id
required - string
The numeric ID of the organization to be exported to the sink.
-
writer_identity
optional computed - string
The identity associated with this sink. This identity must be granted write access to the configured destination.
-
bigquery_options
list block-
use_partitioned_tables
required - bool
Whether to use BigQuery's partition tables. By default, Logging creates dated tables based on the log entries' timestamps, e.g. syslog_20170523. With partitioned tables the date suffix is no longer present and special query syntax has to be used instead. In both cases, tables are sharded based on UTC timezone.
-
-
exclusions
list block-
description
optional - string
A description of this exclusion.
-
disabled
optional - bool
If set to True, then this exclusion is disabled and it does not exclude any log entries
-
filter
required - string
An advanced logs filter that matches the log entries to be excluded. By using the sample function, you can exclude less than 100% of the matching log entries
-
name
required - string
A client-assigned identifier, such as "load-balancer-exclusion". Identifiers are limited to 100 characters and can include only letters, digits, underscores, hyphens, and periods. First character has to be alphanumeric.
-
Explanation in Terraform Registry
Manages a organization-level logging sink. For more information see:
- API documentation
- How-to Guides
Frequently asked questions
What is Google Cloud (Stackdriver) Logging Organization Sink?
Google Cloud (Stackdriver) Logging Organization Sink is a resource for Cloud (Stackdriver) Logging of Google Cloud Platform. Settings can be wrote in Terraform.
Where can I find the example code for the Google Cloud (Stackdriver) Logging Organization Sink?
For Terraform, the melscoop-test/check, SnidermanIndustries/checkov-fork and gilyas/infracost source code examples are useful. See the Terraform Example section for further details.