Event streaming to GCS test configuration successful however no log files forwarded to the bucket

Products

• Cloud Secure Web Gateway - Cloud SWG

Issue/Introduction

The Event Streaming to the Cloud Storage Bucket is configured based on  techdoc.

Configuration testing is completed successfully with test file upload, however no log files forwarded to the bucket. Event streaming status indicates Error once configuration is saved.

Resolution

- Make sure production traffic is going via the Cloud SWG tenant. Without production traffic no logs will be generated.

- Under "Service Account Project" field enter the project ID value from the JSON file downloaded from the GCS platform.

- Under the "Service Account JSON" field paste the content of the entire JSON file downloaded from the GCS platform. In other words open JSON file and copy all content and paste to the field as is without any modification. GUI can add additional spaces, no additional editing is required. Test the config and save it.

- If the error is still present delete event streaming configuration and create new instance. When new Event streaming configuration is configured, Add button should appear (Instead of Save when the config is modified). If the Saving configuration is failing with FORBIDDEN (observed in the HAR Network logs response field) response, save the config one more time. If it doesn't help contact technical support team for further assistance.

NOTE: FORBIDDEN may also indicate service account permissions issue, make sure it has Storage Object Admin Role assigned.

 

Additional Information

- Run developer tools to see additional details.