Google Cloud Pub/Sub protocol log source parameters for Google Cloud Audit Logs

If QRadar® does not automatically detect the log source, add a Google Cloud Audit Logs log source on the QRadar Console by using the Google Cloud Pub/Sub protocol.

When using the Google Cloud Pub/Sub protocol, there are specific parameters that you must use.

The following table describes the parameters that require specific values to collect Google Cloud Pub/Sub events from Google Cloud Audit Log Service:

Table 1. Google Cloud Pub/Sub protocol log source parameters for the Google Cloud Audit Log DSM
Parameter	Value
Log Source type	Google Cloud Audit Logs
Protocol Configuration	Google Pub/Sub Protocol
Log Source Identifier	Use the IP address as a identifier for events from your Google Cloud Audit Log Service. The log source identifier must be a unique value.

For a complete list of Google Cloud Pub/Sub protocol parameters and their values, see Google Cloud Pub/Sub protocol configuration options..