# Terraform for Google Cloud log export to Splunk

See GSIRT GCP Monitoring Configuration Guide provided on GISD Connect.
https://www.notion.so/Google-Workspace-splunk-logging-407af65d4cc344b1a7c9ba049285a6f0


##### GCP Control Plane Cloud Audit Logs – Google Cloud services write audit logs that record administrative activities and data access operations within Google Cloud resources. Audit logs show who did what, where, and when within Google Cloud resources.

![](GCP_Control_Plane_Overview.png)



##### GCP Control Plane Workspace Admin Audit Logs – Organization-level audit logs associated with Google Workspace Admin activities, Google Groups Admin activities, Google Workspace login activities, Google Workspace OAuth token logs, and Google Workspace SAML logs.
![](GCP_Control_Plane_Admin.png)



##### Detail of GSIRT log export process resources
![](GSIRt_Splunk_logs_process_export.png)