How can I exclude logs from my Panther GCP integration?

QUESTION

 How do I exclude certain Google Cloud Platform (GCP) logs from my integration with Panther?

ANSWER

There are multiple ways to exclude logs:

• Configure exclusion or inclusion within the Log Sink.

  • GCP Log Sink support inclusion and exclusion filters, where you can specify which log types are passed along to their destination. You can find instructions on configuring Log Sink filters in Google's documentation here.

• Use raw event filters.

  • See Panther's Filtering documentation for more information.