Google Cloud Platform is a collection of public cloud services provided by Google. It encompasses various hosted offerings for computing, storage, and application development, all operating on Google's infrastructure.

1. Google Pub/Sub

Go to the Pub/Sub topics page in the Cloud Console

2. Select the Create a topic button.

3. Type a unique topic name into the Topic ID field and save.

4. Open the menu for the topic you just created and select "Create subscription".

Google Cloud

5. Enter a name for the subscription.

Leave the Delivery type as Pull, leave the Expiry period as Never expire and click create button

Google Cloud
Google Cloud

7. Select the Create SINK button.

Google Cloud

8. Once you have entered a name and description for the logs routing sink, choose the Cloud Pub/Sub topic service in the Sink destination step, then pick the topic you created in step 3. After that, click Next.

Google Cloud

9. In steps 3 and 4 of the sink creation wizard, construct inclusion and exclusion filter expressions that match the log entries you wish to include or exclude.

If no filter is set, all logs from your Cloud project are sent to the destination. Click Next, and Create sink.

10. Navigate to the service accounts page, choose the project in which you created the topics and sink in the earlier steps, and click CREATE SERVICE ACCOUNT.

Unified Security Stack will be using this service account to retrieve logs from the Google PubSub

Google Cloud

11. Complete the details requested in the form and grant your service account the Pub/Sub Editor permissions.

12. Choose the service account you created, then open the Keys tab and generate a new key.

Google Cloud

13. Download the key in JSON format.

Google Cloud

14. Input Google Pub/Sub information.

Google Cloud