How can I exclude logs from my Panther GCP integration?
QUESTION
How do I exclude certain Google Cloud Platform (GCP) logs from my integration with Panther?
ANSWER
There are multiple ways to exclude logs:
- Configure exclusion or inclusion within the Log Sink.
- GCP Log Sink support inclusion and exclusion filters, where you can specify which log types are passed along to their destination. You can find instructions on configuring Log Sink filters in Google's documentation here.
- Use raw event filters.
- See Panther's Filtering documentation for more information.