Splunk® Supported Add-ons

Splunk Add-on for Google Cloud Platform

Configure Cloud Pub/Sub inputs for Splunk Add-on for Google Cloud Platform

Version 4.0.0 of the Splunk Add-on for Google Cloud Platform introduced sourcetype changes to the Pub/Sub input to support Data Manager compatibility. Check with your Splunk platform administrator to verify your prebuilt Splunk searches.

Configure Cloud Pub/Sub inputs for Splunk Add-on for Google Cloud Platform using Splunk Web or via configuration file, using the information in the inputs parameters table below.

Configure Cloud Pub/Sub inputs using the Splunk Web

Follow these steps to configure Cloud Pub/Sub inputs.

  1. Click Create New Input in the Inputs tab, and then choose Cloud Pub/Sub.
  2. Enter the Name, Credentials, Projects, Pub/Sub Subscriptions and Index using the information in the inputs parameter table.

Do not go to the Splunk Add-on for Google Cloud Platform configuration page under '''Settings''', and then '''Data Inputs''' to configure Google Cloud Platform inputs. This page is not supported for this type of input.

Configure Cloud Pub/Sub inputs using the configuration file

Follow these steps to configure Cloud Pub/Sub inputs.

  1. Create a file named google_pubsub_inputs.conf under $SPLUNK_HOME/etc/apps/Splunk_TA_google-cloudplatform/local.
  2. Create stanzas using the following template (See the google_cloud_pubsub_inputs.conf.spec, contained in the $SPLUNK_HOME/etc/apps/Splunk_TA_google-cloudplatform/README directory for reference).
    [<name>]
    google_credentials_name = <value> 
    google_project = <value>
    google_subscriptions = <value> 
    index = <value> 
    
  3. Save and return to your Splunk instance.

Restart your Splunk platform after making changes to your configuration (.conf) files.

Input Parameters

Each attribute in the following table corresponds to a field in Splunk Web or in a configuration file:

Attribute Corresponding field in Splunk Web Description
name Name Enter a unique name of the Google Cloud Pub/Sub input.
google_credentials_name Credentials Stanza name defined in google_cloud_credentials.conf.
google_project Project Google pubsub project ID.
google_subscriptions Pub/Sub Subscriptions Google pubsub subscription names. You can add several subscriptions separated by ",".
index Index The index in which to store Google Cloud Pub/Sub data.
Last modified on 26 April, 2024
Set up the Splunk Add-on for Google Cloud Platform   Configure Cloud Monitoring inputs for the Splunk Add-on for Google Cloud Platform

This documentation applies to the following versions of Splunk® Supported Add-ons: released


Was this topic useful?







You must be logged into splunk.com in order to post comments. Log in now.

Please try to keep this discussion focused on the content covered in this documentation topic. If you have a more general question about Splunk functionality or are experiencing a difficulty with Splunk, consider posting a question to Splunkbase Answers.

0 out of 1000 Characters