An operations team needs to export security audit logs from multiple Google Cloud projects into a central BigQuery dataset for long-term compliance analysis. Which Cloud Logging mechanism should be configured in each source project to route these log entries to the destination dataset?
- A log sink configured with an inclusion filter that specifies the central BigQuery dataset as the destinationCevap
- BA custom IAM role assigning primitive Owner privileges to the default Cloud Logging service account
- CAn exclusion filter applied to default log buckets combined with an advance regional quota request
- DAn aggregate log exclusion filter that suppresses high-severity audit log entries from Cloud Logging ingestion
Cevap
Configure a log sink in each source project with an inclusion filter set to export logs to the central BigQuery dataset.
In Google Cloud Logging, log sinks control the export of log entries. By creating a sink with an inclusion filter pointing to a BigQuery dataset destination, Cloud Logging automatically routes matching log entries to BigQuery.
Adım Adım Çözüm
Anahtar Kavram
Configuring log sinks in Google Cloud Logging for log export and centralization