Connect Cribl Search to Google Cloud Platform API
Configure Cribl Search to query a Google Cloud Platform API endpoint.
Google Cloud Platform provides a suite of computing services including data management, web and video delivery, AI and machine learning tools.
In this guide, you’ll set up a Dataset Provider and a Dataset to search the instances, disks, security policies, and locations endpoints in your Google Cloud Platform account.
Add a Google Cloud Platform API Dataset Provider
A Dataset Provider tells Cribl Search where to query and contains access credentials. Here, you will add a Google Cloud Platform API Dataset Provider.
To add a new Dataset Provider, select Data, then Dataset Providers, then Add Provider.
Set the following configurations in the New Dataset Provider modal:
- ID is a unique identifier for the Dataset Provider. This is how you’ll reference it when assigning Datasets to
it. Start the ID with a letter; the rest of the ID can use letters, numbers, and underscores (for example,
my_dataset_provider_1
). - Description is optional.
- Set Dataset Provider Type to Google Cloud Platform API.
- Select Add Configuration to specify your Google Cloud Platform account. In the Account Configurations table,
enter:
- Name: Google Cloud Platform account name.
- Service Account Credentials: The contents of your Google Cloud service account (JSON keys) file. You can also drag and drop a file into the field, or upload a file by clicking the upload button.
- Select Save when finished.
Add a Google Cloud Platform API Dataset
Now you’ll add a Dataset that tells Cribl Search what data to search from the Dataset Provider.
To add a new Dataset, select Data, then Datasets, then Add Dataset.
Set the following configurations in the New Dataset modal:
- ID is an identifier unique for both Cribl Search and Cribl Lake. You’ll use this to specify the
Dataset in a query’s scope, telling Cribl Search to search the Dataset. Start the ID with a letter; the rest of the ID can use letters, numbers, and underscores (for example,
my_dataset_1
). - Description is optional.
- Set Dataset Provider to the ID of a Google Cloud Platform Dataset Provider.
- Select Add endpoint to select the endpoints for your Dataset.
- Enabled endpoints: Select an endpoint from the drop-down menu. For details on the endpoints, see the
Compute Engine API reference docs. Your options are:
v1.instances
v1.disks
v1.securityPolicies
v1.projects.locations.functions
v2.projects.locations.functions
- Region: The region of your Google Cloud Platform account, provided for certain endpoints, indicates its location.
- In Processing, you can apply rules for breaking data into discrete events. For more information, see Datatypes.
- In Snapshots, you can set up API Snapshots.
- Select Save when finished.
Search Google Cloud Platform
Now that you have a Dataset Provider and Dataset, you’re ready to start searching.
Search results can start showing up within a second or two, but when the search completes depends on how much data there is in the account.