[New Rule] GCP Pub/Sub Topic Deletion #259
Description
Description
Identifies the deletion of a topic in Google Cloud Platform (GCP). In GCP, the publisher-subscriber relationship (Pub/Sub) is an asynchronous messaging service that decouples services that produce events from services that process events. A publisher application creates and sends messages to a topic. Deleting a topic can interrupt message flow in the Pub/Sub pipeline.
Required Info
-
Eventing Sources:
filebeat-* -
Platforms
GCP -
Target ECS Version:
1.6.0 -
New fields required in ECS for this?
-
Related issues or PRs
Optional Info
- References:
https://cloud.google.com/pubsub/docs/overview
Syntax
event.module:googlecloud and event.dataset:googlecloud.audit and event.action:google.pubsub.v*.Publisher.DeleteTopic and event.outcome:success
Example Data
