Can I store audit logs in multiple project into single cloud storage?

Google Cloud Cloud Foundations & Onboarding
1

I have multiple projects in two organizations and I want to store these audit logs into single cloud storage.

For example,
Project B has log sink that send audit logs to cloud storage in Project A.
Project C has log sink that send audit logs to same cloud storage in Project A.

I am worried that some log files will be overwritten by other log files.
Is there a possibility that log files may disappear?

2

Hi,

Each logs have JSONPayload format with value which projectID is related with logs. I’m using dedicated project as a target ( logs bucket there ), and I’m pushing logs from ~30 projects. Never noticed that any kind of logs are overwrited by themself. Regarding disappearing, only reason I’m seeing that could cause logs missing is log retention period.
https://cloud.google.com/logging/docs/central-log-storage

cheers,
DamianS

1 Like
3

Thank you!

I think I understand that…

When sinking from log bucket to storage bucket, Logs are aggregated and written to a file. It does not overwrite multiple sinks.
Log bucket is not a kind of storage bucket, so log sink is not file-copy.
It is like aggregating logs for each source into syslog.

I need to explain it to my co-workers. I’ll look for it from the official documents.

thank you,
Shogo