The resources/services/activations/deletions that this module will create/trigger are:
- Create a GCS bucket to ingest external log files
- Create a Cloud Run service to host a sample website
- Create a table in BigQuery to store logs
- Set up Logs Router to route Cloud Run web access logs to BigQuery
- Set up a BigQuery Data Transfer Service to transfer external logs in the Cloud Storage bucket to the BigQuery table
Create a pipeline to analyze logs across environments.
Create a pipeline to analyze various data and logs of applications running across different environments like Google Cloud, other clouds and on-premises You can choose whether to deploy your solution through the console directly or download as Terraform on GitHub to deploy later.
- A web server deployed on Cloud Run generates web access logs when a user visits a sample website deployed on it. The web access logs are automatically sent to Logging.
- Logging then routes the logs to a designated table in BigQuery per sink configured.
- Files that contain application logs can be uploaded into a bucket in Cloud Storage. (This solution deploys a text file that contains a sample web access log in JSON format.)
- BigQuery Data Transfer Service then periodically loads the file to a designated table in BigQuery per transfer configured.
- You can run queries against the logs in the table or use Data Studio to visualize the logs.
Basic usage of this module is as follows:
module "log_analysis" {
source = "GoogleCloudPlatform/log-analysis/google"
version = "~> 0.3"
project_id = "<PROJECT ID>"
}Functional examples are included in the examples directory.
| Name | Description | Type | Default | Required |
|---|---|---|---|---|
| delete_contents_on_destroy | If set to true, delete all BQ resources. | bool |
false |
no |
| deployment_name | The name used to provision resources with. | string |
"log-analysis" |
no |
| enable_apis | Whether or not to enable underlying apis in this solution. | string |
true |
no |
| labels | A set of key/value label pairs to assign to the resources deployed by this blueprint. | map(string) |
{} |
no |
| project_id | The project ID to provision resources to. | string |
n/a | yes |
| region | The Google Cloud region name to provision resources in. | string |
"us-central1" |
no |
| Name | Description |
|---|---|
| bigquery_dataset_name | The BigQuery dataset name which the transferred log table is in |
| bigquery_dataset_url | The URL to the dataset in the BigQuery UI where you see the tables for logs stored |
| bigquery_table_name | The BigQuery table name for transferred logs |
| bucket_name | The Cloud Storage bucket to ingest logs from external soruces |
| datastudio_report_url | The URL to create a new Looker Studio report that runs queries against the table for transferred logs via BigQuery Data Trasfer Service |
| deployment_id | The random ID generated for each deployment |
These sections describe requirements for using this module.
The following dependencies must be available:
- Terraform v0.13
- Terraform Provider for GCP plugin v4.29.0
A service account with the following roles must be used to provision the resources of this module:
- Storage Admin:
roles/storage.admin - Cloud Run Admin:
roles/run.admin - BigQuery Admin:
roles/bigquery.admin - Service Account User:
roles/iam.serviceAccountUser - Service Account Admin:
roles/iam.serviceAccountAdmin - Project IAM Admin:
roles/resourcemanager.projectIamAdmin - Logs Configuration Writer:
roles/logging.configWriter - Service Usage Admin:
roles/serviceusage.serviceUsageAdmin
The Project Factory module and the IAM module may be used in combination to provision a service account with the necessary roles applied.
A project with the following APIs enabled must be used to host the resources of this module:
- IAM API:
iam.googleapis.com - Cloud Resource Manager API:
cloudresourcemanager.googleapis.com - Service Usage API:
serviceusage.googleapis.com - Compute Engine API:
compute.googleapis.com - Cloud Storage API:
storage-api.googleapis.com - Cloud Logging API:
logging.googleapis.com - Cloud Run API:
run.googleapis.com - BigQuery API:
bigquery.googleapis.com - BigQuery Data Transfer API:
bigquerydatatransfer.googleapis.com
The Project Factory module can be used to provision a project with the necessary APIs enabled.
Refer to the contribution guidelines for information on contributing to this module.
Please see our security disclosure process.