Google Cloud Pub/Sub log source parameters for Google Cloud Platform Firewall

If QRadar® does not automatically detect the log source, add a Google Cloud Platform Firewall log source on the QRadar Console by using the Google Cloud Pub/Sub protocol.

When using the Google Cloud Pub/Sub protocol, there are specific parameters that you must use.

The following table describes the parameters that require specific values to collect Google Cloud Pub/Sub events from Google Cloud Platform Firewall:

Table 1. Google Cloud Pub/Sub log source parameters for the Google Cloud Platform Firewall DSM
Parameter	Value
Log Source type	Google Cloud Platform Firewall
Protocol Configuration	Google Cloud Pub/Sub
Log Source Identifier	Use the IP address as an identifier for events from your Google Cloud Platform Firewall service. The log source identifier must be a unique value.

For a complete list of Google Cloud Pub/Sub protocol parameters and their values, see Google Cloud Pub/Sub protocol configuration options.