Configure Cloud Pub/Sub inputs for Splunk Add-on for Google Cloud Platform

Version 4.0.0 of the Splunk Add-on for Google Cloud Platform introduced sourcetype changes to the Pub/Sub input to support Data Manager compatibility. Check with your Splunk platform administrator to verify your prebuilt Splunk searches.

Configure Cloud Pub/Sub inputs for Splunk Add-on for Google Cloud Platform using Splunk Web or via configuration file, using the information in the inputs parameters table below.

Configure Cloud Pub/Sub inputs using the Splunk Web

Follow these steps to configure Cloud Pub/Sub inputs.

1. Click Create New Input in the Inputs tab, and then choose Cloud Pub/Sub.
2. Enter the Name, Credentials, Projects, Pub/Sub Subscriptions and Index using the information in the inputs parameter table.

Do not go to the Splunk Add-on for Google Cloud Platform configuration page under '''Settings''', and then '''Data Inputs''' to configure Google Cloud Platform inputs. This page is not supported for this type of input.

Configure Cloud Pub/Sub inputs using the configuration file

Follow these steps to configure Cloud Pub/Sub inputs.

1. Create a file named google_pubsub_inputs.conf under $SPLUNK_HOME/etc/apps/Splunk_TA_google-cloudplatform/local.
2. Create stanzas using the following template (See the google_cloud_pubsub_inputs.conf.spec, contained in the $SPLUNK_HOME/etc/apps/Splunk_TA_google-cloudplatform/README directory for reference).

   [<name>]
   google_credentials_name = <value> 
   google_project = <value>
   google_subscriptions = <value> 
   index = <value> 
   

3. Save and return to your Splunk instance.

Restart your Splunk platform after making changes to your configuration (.conf) files.

Input Parameters

Each attribute in the following table corresponds to a field in Splunk Web or in a configuration file:

Attribute	Corresponding field in Splunk Web	Description
name	Name	Enter a unique name of the Google Cloud Pub/Sub input.
google_credentials_name	Credentials	Stanza name defined in google_cloud_credentials.conf.
google_project	Project	Google pubsub project ID.
google_subscriptions	Pub/Sub Subscriptions	Google pubsub subscription names. You can add several subscriptions separated by ",".
index	Index	The index in which to store Google Cloud Pub/Sub data.