Skip to main content

Not possible to include ErrorGroups in the Chronicle Ingestion filter

  • September 17, 2024
  • 2 replies
  • 6 views

AfvanJaffer
Forum|alt.badge.img+5

Hello everyone,

While reviewing the ingestion filter for our organization, we discovered that we are unable to add a filter to exclude ErrorGroup type logs in Chronicle.

Is this behavior expected?

 

2 replies

dnehoda
Staff
Forum|alt.badge.img+16
  • Staff
  • September 25, 2024

Hello, 

I am looking into this.  Please review this in the meantime. 

https://cloud.google.com/chronicle/docs/ingestion/cloud/ingest-gcp-logs


AfvanJaffer
Forum|alt.badge.img+5
  • Author
  • Bronze 5
  • January 14, 2025

Hello, 

I am looking into this.  Please review this in the meantime. 

https://cloud.google.com/chronicle/docs/ingestion/cloud/ingest-gcp-logs


any update, could you find out why 🙏