+7Hi Team,
I have below ingestion filter in GCP which is applied to logs sent out to secops someone changed the filter but i am not able to search for log for the same to identify who updated / changed the filter is there a way to get that details from gcp log explorer or any where else
+3Hey
I am not aware of any log that shows the diff on before/after of the specific filter changes, but in terms of a git blame on who did it, yes, that is available in Cloud Logging:
The event types in Logging are: `google.cloud.chronicle.servicemanager.v1.ChronicleServiceManager.UpdateGCPSettings`, `google.cloud.securitycenter.v1p1alpha1.SecurityCenter.UpdateChronicleFindingExport`, and `google.cloud.securitycenter.v1p1alpha1.SecurityCenter.UpdateChronicleAssetExport`. (This correlates to the toggles on the page, and it calls all 3 on each Save regardless of if you changed them or not, so it shows you who did it)
Enter your E-mail address. We'll send you an e-mail with instructions to reset your password.
