Export logs to Cloud Logging

Note: This feature is available with either the Enterprise tier or the Premium tier of Security Command Center.

On the Continuous exports tab, you can set up logging for Event Threat Detection and Container Threat Detection findings. Findings are exported to the Cloud Logging project that you select.

To use Cloud Logging export, you must activate Security Command Center at the organization level.

Depending on the quantity of information, Cloud Logging costs can be significant. To understand your usage of the service and its cost, see Cost optimization for Google Cloud Observability.

To log findings, do the following:

1. In the Google Cloud console, go to the Security Command Center page.

   Go to Security Command Center

2. Select your organization.

3. Click Settings.

4. Click the Continuous Exports tab.

5. Under Export name, click Logging Export.

6. Under Sinks, turn on Log Findings to Logging.

7. Under Logging project, enter or search for the project where you want to log findings.

8. Click Save.

When Event Threat Detection and Container Threat Detection write logs, each log entry includes the threat_detector resource type and contains the same information as findings. For instructions on reviewing logs, see Using Event Threat Detection and Using Container Threat Detection.