Does anyone have a walk through or doc on connecting to Google GCP Stackdriver?

[daniel333]

All,

Just messing with GCP Stackdriver connecting to Splunk. I am not familiar with GCP at all and the Splunk docs assume a certain familiarity I don't have. Anyone have a walk through that can orient me ?

[timonix]

You can utilize the GCP Cloud pubsub input for this purpose.

1. Create a service account on the project for splunk to utilize.
2. Install the GCP Add-on for Splunk
3. Create a new topic from the GCP Logs.
4. Create a pull subscription to that topic.
5. Create a new input from the add-on menu for cloud pubsub.

I was able to utilize a combination of the Splunk documentation and GCP documentation to get the job done.
https://docs.splunk.com/Documentation/AddOns/released/GoogleCloud/Configureinputsv1modular
https://cloud.google.com/solutions/exporting-stackdriver-logging-for-splunk