Aqua CSPM

Log Sinks Enabled

Quick Info

Plugin TitleLog Sinks Enabled
CloudGOOGLE
CategoryLogging
DescriptionEnsures a log sink is enabled to export all logs
More InfoLog sinks send log data to a storage service for archival and compliance. A log sink with no filter is necessary to ensure that all logs are being properly sent. If logs are sent to a storage bucket, the bucket must exist and bucket versioning should exist.
GOOGLE Linkhttps://cloud.google.com/logging/docs/export/
Recommended ActionEnsure a log sink is configured properly with an empty filter and a destination.

Detailed Remediation Steps

  1. Log into the Google Cloud Platform Console.
  2. Scroll down the left navigation panel and select the “Logging” option under the “STACKDRIVER."
  3. On the “Stackdriver Logging” page, choose the “Logs Router” option from the left navigation panel.
  4. Select the “Log Sink” which needs to be cross-check whether it’s properly configured or not.
  5. On the selected “Log Sink”, click on the 3 dots at the extreme right and choose the “View Filter” option.
  6. If the “Sink filter” tab is showing any filter option then the selected “Log Sink” is not configred with empty filter.
  7. Repeat steps number 2 - 6 to verify other “Log Sinks” in the account.
  8. Navigate to the “Logging” option under the “STACKDRIVER”, click on the “Log Router” option and select the “Log Sink” which needs to be re-configured and click on the 3 dots at the extreme right to choose the “View filter” option.
  9. On the “View filter” tab, click on the “Edit” button to edit the “Log Sink."
  10. On the “Edit Sink” tab, remove the filter and click on the “Update Sink” button to make the changes.
  11. Click on the “OK” button on the popup tab to save the changes which will over write the previous filters enabled.
  12. Repeat steps number 8 - 11 to ensure a log sink is configured properly with an empty filter and a destination.