Google Cloud provides a set of useful logging agents that run on almost all Google Cloud resources (a.k.a. services). You can install one out of the two logging agents on their virtual machines. The first is the recently released Ops agent that includes logging and monitoring capabilities but can be…

This post is a part of the How Cloud Logging works series. A term of the structured logging is in use for quite a long time. With more log analyzing and managing solutions in the market it becomes a widely accepted practice. …

This post is a part of the How Cloud Logging works series. CloudSQL for Postgres features ingesting PostgreSQL logs into Cloud Logging for further processing. It can be enabled using database flags, specifically cloudsql.enable_pgaudit. However, the captured logs differ from what you might be accustom to off-line. This happens because…

This post is a part of the How Cloud Logging works series. Cloud Logging stores all logs in the protobuf binary format. If the logs are exported to other storage locations (e.g. BigQuery) the format may differ. The more custom labels or Json payload elements a user adds to an…

I plan to write small posts about technicalities of the Google Cloud Logging for Software and DevOps engineers. This will be a starting post and I will use it as the index for other blog posts too. Series index Last updated on: Jan-13–22 Log ingestion in a high level How logs are…

Application logs may capture information that includes sensitive or proprietary data. As a result, this data may be available to unauthorized personnel that have access to application logs but should not be able to access that sensitive data. For example, it happens when an application writes logs containing the real…

Photo by Jon Moore on Unsplash Google Cloud provides an easy way to enforce TLS policies such as allowed version(s) of SSL and TLS protocols and cipher suites allowed to be used with these versions. It can be configured at HTTP(S) External Load Balancer. If your workload runs on GKE…

In Google Cloud it is possible to configure a VM with a startup script that will be launched each time the VM is started. Running the startup script is easy and there are plenty of blog posts describing how to do it including GCP public documentation. The startup script provides…

How many time to encrypt data in transit? — Spoiler alert: no code examples in this article 😊 Securing application traffic, also ref’ed as encrypting data in transit or application communication encryption, is a standard security practice and, almost always, a requirement for any multi-tier application. A common practice is to use SSL / TLS protocols. The implementation should…