Create a Pub/Sub subscription with the command gcloud beta pubsub subscriptions create --topic myTopic mySub Do some operation that results in logs read by the filter you specified in Project A. Consume the logs written to the topic using the subscription, with the command gcloud beta pubsub subscriptions pull mySub. Under Sink destination, choose Cloud Pub/Sub as the destination and select export-logs-to-lm. Best Practices for Monitoring GCP Audit Logs | Datadog gcloud pubsub topics create ${LOGS_SINK_TOPIC_ID} \ --project ${PROJECT_ID} Create a new Pub/Sub subscription Using a subscription (instead of direct topic) with a Dataflow pipeline, ensures that all messages are processed even when the pipeline may be temporarily down for updates or maintenance. 4. PDF Google Cloud Platform getting started guide - Expel GCP APIs Ingested by Prisma Cloud - Palo Alto Networks Google Cloud Audit Logs record the who, where, and when for activity within your environment, providing a breadcrumb trail that administrators can use to monitor access and detect potential . Configure service accounts. Google GSuite to Splunk HEC Configuration Create a logging sink. The PubSub model: https://cloud.google . gcloud - How can I create a pubsub log sink to a different google cloud ... google.cloud.pubsub.iam — google-cloud 0.20.0 documentation gcloud-monitoring-policies-list.