Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add Google Cloud Load Balancing docs #1965

Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Original file line number Diff line number Diff line change
@@ -0,0 +1,66 @@
uuid: 4d50ae7e-ccac-4a5b-9a4c-58a7893f93bb
name: Google Cloud Load Balancing
type: intake

## Overview

Google Cloud Load Balancing is a fully distributed, software-defined managed service that distributes traffic across multiple backend instances in multiple regions, enhancing performance, reliability, and scalability.

!!! warning
Important note - This format is currently in beta. We highly value your feedback to improve its performance.

- **Vendor**: Google Cloud
- **Plan**: Defend Prime
- **Supported environment**: SaaS
- **Detection based on**: Telemetry
- **Supported application or feature**: Web logs, Web application firewall logs

## Specification

### Prerequisites

- Google licence Enterprise standard or higher
- Access to Sekoia.io Intakes and Playbook pages with write permissions
- Administrator access to the Google Cloud console

### Logs details

- **Supported functionalities**: See section [Overview](#overview)
- **Supported type(s) of structure**: JSON
- **Supported verbosity level**: Informational

### How to set up Google PubSub
{!_shared_content/operations_center/integrations/google_cloud.md!}

### How to configure log forwarding
1. On the Google cloud console, go to **Monitoring**
2. On the left panel, Click **Log router**

![Click Log router](/assets/operation_center/integration_catalog/network_security/google_cloud_load_balancing/1_log_router.png)

3. On the top, Click **Create sink**

![Create sink](/assets/operation_center/integration_catalog/network_security/google_cloud_load_balancing/2_create_sink.png)

4. Type `name` for the sink and click **Next**

![Type name](/assets/operation_center/integration_catalog/network_security/google_cloud_load_balancing/3_enter_name.png)

5. Select **Cloud Pub/Sub topic** as Sink service and select the Pub/Sub topic as destination. Click **Next**

![Select destination](/assets/operation_center/integration_catalog/network_security/google_cloud_load_balancing/4_select_destination.png)

6. As **Build inclusion filter**, type:
```
(resource.type="http_load_balancer" OR resource.type="http_external_regional_lb_rule")
```
and click **Next**

7. Click **Create sink**

{!_shared_content/operations_center/integrations/generated/4d50ae7e-ccac-4a5b-9a4c-58a7893f93bb_sample.md!}

{!_shared_content/integration/detection_section.md!}

{!_shared_content/operations_center/integrations/generated/4d50ae7e-ccac-4a5b-9a4c-58a7893f93bb.md!}

1 change: 1 addition & 0 deletions mkdocs.yml
Original file line number Diff line number Diff line change
Expand Up @@ -455,6 +455,7 @@ nav:
- FortiWeb: integration/categories/network_security/fortiweb.md
- Fortigate: integration/categories/network_security/fortigate.md
- Gatewatcher AionIQ: integration/categories/network_security/gatewatcher_aioniq.md
- Google Cloud Load Balancing: integration/categories/network_security/google_cloud_load_balancing.md
- Imperva Web Application Firewall: integration/categories/network_security/imperva_waf.md
- Lacework Cloud Security: integration/categories/network_security/lacework_cloud_security.md
- McAfee Web Gateway / Skyhigh Secure Web Gateway: integration/categories/network_security/skyhigh_secure_web_gateway.md
Expand Down
Loading