google_logging_folder_sink

Manages a folder-level logging sink. For more information see:

Example Usage

resource "google_logging_folder_sink" "my-sink" {
  name   = "my-sink"
  description = "some explanation on what this is"
  folder = google_folder.my-folder.name

  # Can export to pubsub, cloud storage, or bigquery
  destination = "storage.googleapis.com/${google_storage_bucket.log-bucket.name}"

  # Log all WARN or higher severity messages relating to instances
  filter = "resource.type = gce_instance AND severity >= WARNING"
}

resource "google_storage_bucket" "log-bucket" {
  name     = "folder-logging-bucket"
  location = "US"
}

resource "google_project_iam_binding" "log-writer" {
  project = "your-project-id"
  role = "roles/storage.objectCreator"

  members = [
    google_logging_folder_sink.my-sink.writer_identity,
  ]
}

resource "google_folder" "my-folder" {
  display_name = "My folder"
  parent       = "organizations/123456"
}

Argument Reference

The following arguments are supported:

The bigquery_options block supports:

The exclusions block supports:

Attributes Reference

In addition to the arguments listed above, the following computed attributes are exported:

Import

Folder-level logging sinks can be imported using this format:

In Terraform v1.5.0 and later, use an import block to import folder-level logging sinks using one of the formats above. For example:

import {
  id = "folders/{{folder_id}}/sinks/{{name}}"
  to = google_logging_folder_sink.default
}

When using the terraform import command, folder-level logging sinks can be imported using one of the formats above. For example:

$ terraform import google_logging_folder_sink.default folders/{{folder_id}}/sinks/{{name}}