All Apps and Add-ons

GCP Add-on : where does data in google:gcp:monitoring came from?

teddyidc1101
Communicator

hi - we have installed Splunk Add-on for GCP and I just wanted to know, where does the data in cloud monitoring comes from? is it the same data in google:gcp:monitoring sourcetype ? does the data comes from Stackdriver ?

thanks!

timonix
Explorer

From what I can tell, you need one service account with the correct permissions to authenticate to the project and you will also need to enable the various API endpoints in GCP that you wish Splunk to connect with and retrieve data.

It is my understanding that the google:gcp:monitoring data comes from these API endpoints. Other data input can be cloud storage (see the billing reports documentation of the splunk add-on) as well as cloud pubsub.

https://docs.splunk.com/Documentation/AddOns/released/GoogleCloud/Sourcetypes

0 Karma

teddyidc1101
Communicator

@AzmathShaik you answer does not reflect here 🙂

0 Karma

teddyidc1101
Communicator

thanks...I'm not that familiar with GCP so i'll ask if we create new input as cloud monitoring, do we need to have/create new service account , Pub/Sub subscription and sink?

0 Karma

timonix
Explorer

I do not think you need to create a new service account and pubsub sink. You only need the pubsub sink if you're data is coming from pubsub and not cloud monitor. You only need one service account to authenticate to the project you're getting the data from.

0 Karma
Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...