Skip to main content
Question

Request ingestion key

  • March 20, 2026
  • 3 replies
  • 73 views

dfSentinari
Forum|alt.badge.img

Hi, 
We are evaluating with a community edition. During configuration I have received the following message: 
"Confirm you have an ingestion key: If you haven’t yet received an apikeys.json (or similar) from Google/partner for this Community instance, request an Ingestion Service Account credential for this Community tenant"

I am not sure where to request this and have searched extensively. The information I found here says “Your Google Security Operations representative provides you with a Google Developer service account credential to enable the API client to communicate with the API, and share its credentials (JSON key) so your API client can authenticate to the API” 

I don’t have a Google Security Operations representative 😊

Can anyone point me in the right direction or assist please?

Many thanks!

3 replies

darrenswift
Staff
Forum|alt.badge.img+4
  • Staff
  • March 20, 2026

Good afternoon, 

 

I assume by community edition you are referencing a free trial version from GCP? If so you manage the keys for such things as ingestion through GCP IAM. For ingestion purposes I would use the pre-determined GCP IAM role roles/chronicle.editor and this will allow you to ingest data to SecOps. 

Thanks, 


dfSentinari
Forum|alt.badge.img
  • Author
  • New Member
  • March 23, 2026

Thank you ​@darrenswift 

I am referring to the the free/trial/community edition. I have a related question that someone might be able to assist with. 

When I requested access to this trial it was kindly granted but it does not appear to be associated with a GCP account. 

I have found my way to a page on GCP that has the following text and a box for entering the code.

Connect to Google Security Operations

You need an access code to connect your Google Cloud Organization to Google Security Operations. To get the access code, contact your Google Security Operations Customer Representative.

Question 1: Is this how I associate the SecOps instance I have access to with my GCP account?
If yes...
Question 2: I don’t have a customer representative, any ideas who I can contact for assistance with getting the code?

Many thanks. 


SoarAndy
Staff
Forum|alt.badge.img+12
  • Staff
  • March 27, 2026

Sorry I’m not familair with this setup (i.e. who owns what and who did the setup).

 

Do you know the contact details for the person that either: i) created the instnace  (either a partner, sales engineer, sales account manager etc) or the person that owns the instance (partner, MSSP, etc)

To get the JSON file with credentials you need someone who has access to the GCP Project that hosts the SecOps, and only they can provide.  HTH