search

CrowdStrike / HEC-Log-Shipper

This repository contains examples of code used to send data to Humio instances
Apache License 2.0
5 stars 7 forks source link

GCP Audit Logs Repetitive PubSub Message #13

Open harris-mcm opened 1 year ago

harris-mcm commented 1 year ago

Hi,

I'm new to the GitHub community. I'm trying to use the HEC-Log-Shipper to send GCP logs to Humio. I've configured to Google PubSub topic and subscription and run the HEC-Log-Shipper from Ubuntu machine. We're getting logs into Humio. However, once we start the service, we're getting thousands of copies of 1 particular log only. In Google console, I confirmed that the subscriber is pulling messages fine using the pull message in the console. Does anyone face the same issue with GCP audit logs?

I'm sorry if this is not the correct channel to seek for help.

harris-mcm commented 1 year ago

I think I found the issue. The while not self.killed: in line 561 may be in infinite loop.