gcp-firewall-firewall-log-entries
Firewall logs include connection metadata and may contain sensitive network or workload identifiers.
Where it sits
| location | logging.entries.list.entries[].{textPayload,jsonPayload,protoPayload,labels} |
|---|
| location kind | log_field |
|---|
| data kinds | credential customer_data pii sensitive_data |
|---|
| emits edge | CanReadData |
|---|
| service | VPC Firewall (gcp:firewall) |
|---|
Collection recipe
| access mode | read_api |
|---|
| operation | logging.entries.list |
|---|
| response path | entries[].{textPayload,jsonPayload,protoPayload,labels} |
|---|
| encoding | json |
|---|
| params | {"filter": "logName:\u003cfirewall-log\u003e", "resourceNames": ["projects/\u003cproject\u003e"]} |
|---|
Required permissions
logging.logEntries.list
References