Configure Cloud Pub/Sub inputs for Splunk Add-on for Google Cloud Platform¶
Version 4.0.0 of the Splunk Add-on for Google Cloud Platform introduced sourcetype changes to the Pub/Sub input to support Data Manager compatibility. Check with your Splunk platform administrator to verify your prebuilt Splunk searches.
Configure Cloud Pub/Sub inputs for Splunk Add-on for Google Cloud Platform using Splunk Web or via configuration file, using the information in the inputs parameters table below.
Configure Cloud Pub/Sub inputs using the Splunk Web¶
Follow these steps to configure Cloud Pub/Sub inputs.
- Click Create New Input in the Inputs tab, and then choose Cloud Pub/Sub.
- Enter the Name, Credentials, Projects, Pub/Sub Subscriptions and Index using the information in the inputs parameter table.
Do not go to the Splunk Add-on for Google Cloud Platform configuration page under Settings, and then Data Inputs to configure Google Cloud Platform inputs. This page is not supported for this type of input.
Configure Cloud Pub/Sub inputs using the configuration file¶
Follow these steps to configure Cloud Pub/Sub inputs.
- Create a file named
google_pubsub_inputs.conf
under$SPLUNK_HOME/etc/apps/Splunk_TA_google-cloudplatform/local
. -
Create stanzas using the following template (See the
google_cloud_pubsub_inputs.conf.spec
, contained in the$SPLUNK_HOME/etc/apps/Splunk_TA_google-cloudplatform/README
directory for reference).[<name>] google_credentials_name = <value> google_project = <value> google_subscriptions = <value> index = <value>
Restart your Splunk platform after making changes to your configuration (.conf) files.
Input Parameters¶
Each attribute in the following table corresponds to a field in Splunk Web or in a configuration file:
Attribute | Corresponding field in Splunk Web | Description |
---|---|---|
name |
Name | Enter a unique name of the Google Cloud Pub/Sub input. |
google_credentials_name |
Credentials | Stanza name defined in google_cloud_credentials.conf . |
google_project |
Project | Google pubsub project ID. |
google_subscriptions |
Pub/Sub Subscriptions | Google pubsub subscription names. You can add several subscriptions separated by “,”. |
index |
Index | The index in which to store Google Cloud Pub/Sub data. |