Skip to main content

sinks

Creates, updates, deletes, gets or lists a sinks resource.

Overview

Namesinks
TypeResource
Idgoogle.logging.sinks

Fields

NameDatatypeDescription
namestringOutput only. The client-assigned sink identifier, unique within the project.For example: "my-syslog-errors-to-pubsub".Sink identifiers are limited to 100 characters and can include only the following characters: upper and lower-case alphanumeric characters, underscores, hyphens, periods.First character has to be alphanumeric.
descriptionstringOptional. A description of this sink.The maximum length of the description is 8000 characters.
bigqueryOptionsobjectOptions that change functionality of a sink exporting data to BigQuery.
createTimestringOutput only. The creation timestamp of the sink.This field may not be present for older sinks.
destinationstringRequired. The export destination: "storage.googleapis.com/[GCS_BUCKET]" "bigquery.googleapis.com/projects/[PROJECT_ID]/datasets/[DATASET]" "pubsub.googleapis.com/projects/[PROJECT_ID]/topics/[TOPIC_ID]" "logging.googleapis.com/projects/[PROJECT_ID]" "logging.googleapis.com/projects/[PROJECT_ID]/locations/[LOCATION_ID]/buckets/[BUCKET_ID]" The sink's writer_identity, set when the sink is created, must have permission to write to the destination or else the log entries are not exported. For more information, see Exporting Logs with Sinks (https://cloud.google.com/logging/docs/api/tasks/exporting-logs).
disabledbooleanOptional. If set to true, then this sink is disabled and it does not export any log entries.
exclusionsarrayOptional. Log entries that match any of these exclusion filters will not be exported.If a log entry is matched by both filter and one of exclusion_filters it will not be exported.
filterstringOptional. An advanced logs filter (https://cloud.google.com/logging/docs/view/advanced-queries). The only exported log entries are those that are in the resource owning the sink and that match the filter.For example:logName="projects/[PROJECT_ID]/logs/[LOG_ID]" AND severity>=ERROR
includeChildrenbooleanOptional. This field applies only to sinks owned by organizations and folders. If the field is false, the default, only the logs owned by the sink's parent resource are available for export. If the field is true, then log entries from all the projects, folders, and billing accounts contained in the sink's parent resource are also available for export. Whether a particular log entry from the children is exported depends on the sink's filter expression.For example, if this field is true, then the filter resource.type=gce_instance would export all Compute Engine VM instance log entries from all projects in the sink's parent.To only export entries from certain child projects, filter on the project part of the log name:logName:("projects/test-project1/" OR "projects/test-project2/") AND resource.type=gce_instance
interceptChildrenbooleanOptional. This field applies only to sinks owned by organizations and folders.When the value of 'intercept_children' is true, the following restrictions apply: The sink must have the include_children flag set to true. The sink destination must be a Cloud project.Also, the following behaviors apply: Any logs matched by the sink won't be included by non-_Required sinks owned by child resources. The sink appears in the results of a ListSinks call from a child resource if the value of the filter field in its request is either 'in_scope("ALL")' or 'in_scope("ANCESTOR")'.
outputVersionFormatstringDeprecated. This field is unused.
resourceNamestringOutput only. The resource name of the sink. "projects/[PROJECT_ID]/sinks/[SINK_NAME] "organizations/[ORGANIZATION_ID]/sinks/[SINK_NAME] "billingAccounts/[BILLING_ACCOUNT_ID]/sinks/[SINK_NAME] "folders/[FOLDER_ID]/sinks/[SINK_NAME] For example: projects/my_project/sinks/SINK_NAME
updateTimestringOutput only. The last update timestamp of the sink.This field may not be present for older sinks.
writerIdentitystringOutput only. An IAM identity—a service account or group—under which Cloud Logging writes the exported log entries to the sink's destination. This field is either set by specifying custom_writer_identity or set automatically by sinks.create and sinks.update based on the value of unique_writer_identity in those methods.Until you grant this identity write-access to the destination, log entry exports from this sink will fail. For more information, see Granting Access for a Resource (https://cloud.google.com/iam/docs/granting-roles-to-service-accounts#granting_access_to_a_service_account_for_a_resource). Consult the destination service's documentation to determine the appropriate IAM roles to assign to the identity.Sinks that have a destination that is a log bucket in the same project as the sink cannot have a writer_identity and no additional permissions are required.

Methods

NameAccessible byRequired ParamsDescription
billing_accounts_sinks_getSELECTbillingAccountsId, sinksIdGets a sink.
billing_accounts_sinks_listSELECTbillingAccountsIdLists sinks.
folders_sinks_getSELECTfoldersId, sinksIdGets a sink.
folders_sinks_listSELECTfoldersIdLists sinks.
organizations_sinks_getSELECTorganizationsId, sinksIdGets a sink.
organizations_sinks_listSELECTorganizationsIdLists sinks.
projects_sinks_getSELECTprojectsId, sinksIdGets a sink.
projects_sinks_listSELECTprojectsIdLists sinks.
sinks_getSELECTsinkNameGets a sink.
sinks_listSELECTparent, parentTypeLists sinks.
billing_accounts_sinks_createINSERTbillingAccountsIdCreates a sink that exports specified log entries to a destination. The export begins upon ingress, unless the sink's writer_identity is not permitted to write to the destination. A sink can export log entries only from the resource owning the sink.
folders_sinks_createINSERTfoldersIdCreates a sink that exports specified log entries to a destination. The export begins upon ingress, unless the sink's writer_identity is not permitted to write to the destination. A sink can export log entries only from the resource owning the sink.
organizations_sinks_createINSERTorganizationsIdCreates a sink that exports specified log entries to a destination. The export begins upon ingress, unless the sink's writer_identity is not permitted to write to the destination. A sink can export log entries only from the resource owning the sink.
projects_sinks_createINSERTprojectsIdCreates a sink that exports specified log entries to a destination. The export begins upon ingress, unless the sink's writer_identity is not permitted to write to the destination. A sink can export log entries only from the resource owning the sink.
sinks_createINSERTparent, parentTypeCreates a sink that exports specified log entries to a destination. The export begins upon ingress, unless the sink's writer_identity is not permitted to write to the destination. A sink can export log entries only from the resource owning the sink.
billing_accounts_sinks_deleteDELETEbillingAccountsId, sinksIdDeletes a sink. If the sink has a unique writer_identity, then that service account is also deleted.
folders_sinks_deleteDELETEfoldersId, sinksIdDeletes a sink. If the sink has a unique writer_identity, then that service account is also deleted.
organizations_sinks_deleteDELETEorganizationsId, sinksIdDeletes a sink. If the sink has a unique writer_identity, then that service account is also deleted.
projects_sinks_deleteDELETEprojectsId, sinksIdDeletes a sink. If the sink has a unique writer_identity, then that service account is also deleted.
sinks_deleteDELETEsinkNameDeletes a sink. If the sink has a unique writer_identity, then that service account is also deleted.
billing_accounts_sinks_patchUPDATEbillingAccountsId, sinksIdUpdates a sink. This method replaces the values of the destination and filter fields of the existing sink with the corresponding values from the new sink.The updated sink might also have a new writer_identity; see the unique_writer_identity field.
folders_sinks_patchUPDATEfoldersId, sinksIdUpdates a sink. This method replaces the values of the destination and filter fields of the existing sink with the corresponding values from the new sink.The updated sink might also have a new writer_identity; see the unique_writer_identity field.
organizations_sinks_patchUPDATEorganizationsId, sinksIdUpdates a sink. This method replaces the values of the destination and filter fields of the existing sink with the corresponding values from the new sink.The updated sink might also have a new writer_identity; see the unique_writer_identity field.
projects_sinks_patchUPDATEprojectsId, sinksIdUpdates a sink. This method replaces the values of the destination and filter fields of the existing sink with the corresponding values from the new sink.The updated sink might also have a new writer_identity; see the unique_writer_identity field.
billing_accounts_sinks_updateREPLACEbillingAccountsId, sinksIdUpdates a sink. This method replaces the values of the destination and filter fields of the existing sink with the corresponding values from the new sink.The updated sink might also have a new writer_identity; see the unique_writer_identity field.
folders_sinks_updateREPLACEfoldersId, sinksIdUpdates a sink. This method replaces the values of the destination and filter fields of the existing sink with the corresponding values from the new sink.The updated sink might also have a new writer_identity; see the unique_writer_identity field.
organizations_sinks_updateREPLACEorganizationsId, sinksIdUpdates a sink. This method replaces the values of the destination and filter fields of the existing sink with the corresponding values from the new sink.The updated sink might also have a new writer_identity; see the unique_writer_identity field.
projects_sinks_updateREPLACEprojectsId, sinksIdUpdates a sink. This method replaces the values of the destination and filter fields of the existing sink with the corresponding values from the new sink.The updated sink might also have a new writer_identity; see the unique_writer_identity field.
sinks_updateREPLACEsinkNameUpdates a sink. This method replaces the values of the destination and filter fields of the existing sink with the corresponding values from the new sink.The updated sink might also have a new writer_identity; see the unique_writer_identity field.

SELECT examples

Gets a sink.

SELECT
name,
description,
bigqueryOptions,
createTime,
destination,
disabled,
exclusions,
filter,
includeChildren,
interceptChildren,
outputVersionFormat,
resourceName,
updateTime,
writerIdentity
FROM google.logging.sinks
WHERE sinkName = '{{ sinkName }}';

INSERT example

Use the following StackQL query and manifest file to create a new sinks resource.

/*+ create */
INSERT INTO google.logging.sinks (
foldersId,
destination,
filter,
description,
disabled,
exclusions,
outputVersionFormat,
includeChildren,
interceptChildren,
bigqueryOptions
)
SELECT
'{{ foldersId }}',
'{{ destination }}',
'{{ filter }}',
'{{ description }}',
{{ disabled }},
'{{ exclusions }}',
'{{ outputVersionFormat }}',
{{ includeChildren }},
{{ interceptChildren }},
'{{ bigqueryOptions }}'
;

UPDATE example

Updates a sinks resource.

/*+ update */
UPDATE google.logging.sinks
SET
destination = '{{ destination }}',
filter = '{{ filter }}',
description = '{{ description }}',
disabled = true|false,
exclusions = '{{ exclusions }}',
outputVersionFormat = '{{ outputVersionFormat }}',
includeChildren = true|false,
interceptChildren = true|false,
bigqueryOptions = '{{ bigqueryOptions }}'
WHERE
foldersId = '{{ foldersId }}'
AND sinksId = '{{ sinksId }}';

REPLACE example

Replaces all fields in the specified sinks resource.

/*+ update */
REPLACE google.logging.sinks
SET
destination = '{{ destination }}',
filter = '{{ filter }}',
description = '{{ description }}',
disabled = true|false,
exclusions = '{{ exclusions }}',
outputVersionFormat = '{{ outputVersionFormat }}',
includeChildren = true|false,
interceptChildren = true|false,
bigqueryOptions = '{{ bigqueryOptions }}'
WHERE
sinkName = '{{ sinkName }}';

DELETE example

Deletes the specified sinks resource.

/*+ delete */
DELETE FROM google.logging.sinks
WHERE sinkName = '{{ sinkName }}';