Hello,
I'm trying to run a Google Cloud API query from the SOAR platform, using the Integration.
The error I'm getting is:
"Failed to execute API request.
Reason: An error occurred: 400 Client Error: Bad Request for url: https://logging.googleapis.com/v2/entries:list "
These are the anonymized parameters that I sent:
This is the config of the Integration. Any idea what I'm doing wrong?
GoogleCloudAPI Query Syntax
+5- Bronze 2
+16Can I ask, what is the use case?
We have an integration for Google Cloud Logging (called Cloud Logging in Marketplace), which allows you to execute queries and get information.
+5- Bronze 2
Can I ask, what is the use case?
We have an integration for Google Cloud Logging (called Cloud Logging in Marketplace), which allows you to execute queries and get information.
Hi @ylandovskyy ,
Thanks for getting back to me.
The Cloud Logging Integration, as other existing Google Cloud integrations on the marketplace are specific and can be used in particular cases, but I want to be able to run any Google Cloud API query, just like if I ran this command in the Cloud Shell (that works), through the SOAR system and I thought that this integration is the right one for that. Isn't it the case?
curl -X POST \\
-H "Authorization: Bearer $(gcloud auth application-default print-access-token)" \\
-H "Content-Type: application/json" \\
-d '{
"resourceNames": ["projects/{PROJECT_ID}"],
"filter": "protoPayload.serviceAccountEmail=\\"xxxxxxxxx-compute@developer.gserviceaccount.com\\"",
"orderBy": "timestamp desc",
"pageSize": 5,
"pageToken": "xxxxxxxxxxxx"
}' \\
https://logging.googleapis.com/v2/entries:list+16Hi @ylandovskyy ,
Thanks for getting back to me.
The Cloud Logging Integration, as other existing Google Cloud integrations on the marketplace are specific and can be used in particular cases, but I want to be able to run any Google Cloud API query, just like if I ran this command in the Cloud Shell (that works), through the SOAR system and I thought that this integration is the right one for that. Isn't it the case?
curl -X POST \\
-H "Authorization: Bearer $(gcloud auth application-default print-access-token)" \\
-H "Content-Type: application/json" \\
-d '{
"resourceNames": ["projects/{PROJECT_ID}"],
"filter": "protoPayload.serviceAccountEmail=\\"xxxxxxxxx-compute@developer.gserviceaccount.com\\"",
"orderBy": "timestamp desc",
"pageSize": 5,
"pageToken": "xxxxxxxxxxxx"
}' \\
https://logging.googleapis.com/v2/entries:listYes, this integration is the correct one for it. In the original screenshot I see that the method was "GET", but in your command it's "POST". This is worth investigating
Enter your E-mail address. We'll send you an e-mail with instructions to reset your password.