save_google_cloud_pubsub
Publishes to a Google Cloud Pub/Sub topic.
save_google_cloud_pubsub project_id=string, topic_id=string
Description
Section titled “Description”The operator publishes bytes to a Google Cloud Pub/Sub topic.
project_id = string
Section titled “project_id = string”The project to connect to. Note that this is the project_id, not the display name.
topic_id = string
Section titled “topic_id = string”The topic to publish to.
URI support & integration with from
Section titled “URI support & integration with from”The save_google_cloud_pubsub
operator can also be used from the to
operator. For this, the gcps://
scheme can be used. The URI is then translated:
to "gcps://my_project/my_topic"
save_google_cloud_pubsub project_id="my_project", topic_id="my_topic"
Examples
Section titled “Examples”Publish alerts to a given topic
Section titled “Publish alerts to a given topic”Publish suricata.alert
events as JSON to alerts-topic
:
exportwhere @name = "suricata.alert"write_jsonsave_google_cloud_pubsub project_id="amazing-project-123456", topic_id="alerts-topic"