Google Chronicle Log Ingestion

[sumitm11]

We haven't received the logs within Google Cloud Storage Bucket from 24th April 2024. On checking with the client, we have found that the respective IAM Permissions , Cloud Storage Bucket and Sink Permissions were not hindered. So what could be the potential reason behind it? 

[RonEtch]

Hi @sumitm11 

Welcome to Google Cloud Community!

Since the post somehow lacks important details to help you, I can only share general troubleshooting and guide that may help you.

You can check sink-related error logs by using the following query from available guide:

logName:"logging.googleapis.com%2Fsink_error"
resource.type="logging_sink"
resource.labels.name="<var>SINK_NAME</var>"

Replace the SINK_NAME accordingly.

Please be guided as well for the quotas and limits regarding logging usage.

I hope this information is helpful.

If you need further assistance, you can always file a ticket on our support team.

[sumitm11]

Thank you so much @RonEtch for providing us with the troubleshooting steps. We will try them and will let you know likewise that whether the issue is been resolved or not