Certificate Manager lets you acquire and manage Transport Layer Security (TLS) certificates for use with Google Cloud load balancers. For more details, refer to the GCP documentation
You can collect the logs for Sumo Logic's Google Cloud Certificate Manager integration by following the below steps.
Configure logs collection
- Collect Audit Logs using the Google Cloud Platform source. These Audit Logs can be accessed based on the permissions and roles. To enable logging for Google Certificate Manager, refer to Google documentation. For more detail on Certificate Manager operations being audited, refer to audited operations. While creating the sync in GCP, as part of the Choose logs to include in sink section, you can use the following query:
resource.type=audited_resource (resource.labels.service=certificatemanager.googleapis.com OR resource.labels.service=publicca.googleapis.com)