Skip to main content

Is it possible to setup a pub/sub feed to an external pub/sub for logs ingestion ?

  • March 19, 2025
  • 1 reply
  • 20 views

Forum|alt.badge.img+6

Hello,

Is it possible to send logs to chronicle from a pub/sub that is setup in a project that is not attached to SecOps but within the same organisation ?

Thank you in advance for the reply !

1 reply

cmorris
Staff
Forum|alt.badge.img+10
  • Staff
  • March 19, 2025

You could use the Pub/Sub ingestion script - https://cloud.google.com/chronicle/docs/ingestion/ingest-using-cloud-functions. Sending instead to a GCS bucket for ingestion or to the attached project is likely easier, if that works for your use case.