Realm.Security Documentation

Appearance

Google Cloud Integration ​

Configuring Google Cloud Storage as Destination ​

Realm Security supports integration with Google Cloud Storage as a destination. This guide provides instructions for configuring Google Cloud Storage to receive data from Realm.

Step 1: Create GCS Bucket ​

  1. Login to the GCS console.
  2. Navigate to Cloud Storage > Buckets > Create Bucket.

Buckets

  1. Enter a name for the bucket, for example: Realm-Archive.
  2. Select Standard storage.
  3. Click Create.

Create Bucket

  1. Review the bucket configuration.

Bucket Config

Step 2: Create a Service Account ​

  1. Go to IAM > Service Accounts.
  2. Click Create Service Account.

Create Service Account

  1. Enter a name for the service account:

    Name: realm-archive-account

  2. Click Create and Continue.
  3. Grant permission to write to the bucket:
    • Add role > Cloud Storage > Storage Object Creator

Service Account Role

  1. Add an IAM condition to restrict access to just one bucket:
text
resource.service == "storage.googleapis.com" &&
resource.name.startsWith("projects/_/buckets/REPLACE_WITH_BUCKET_NAME")
  1. Select the service account.

Select Service Account

  1. Go to Keys > Create Key > JSON.

Create Service Account Key

  1. Click Create. The service account key will be downloaded to your local machine. Open the key in a text editor, select all contents, and copy to clipboard.

Step 3: Create a Destination in Realm for GCS Archive ​

  1. Navigate to Destinations > Add Destination.

    Name: ArchiveType: Data Lake

  2. Under Destinations, select Add New Source.
    • Connect the relevant log source (e.g., FortiGate, Azure, etc.) to the destination.
  3. Go to Output Feeds > Add Output Feed.
    • Choose GCS output feed.

    Name: GCS ArchiveBucket Name: Enter the name of the bucket created above Service Account Key: Paste the service account key copied earlier

GCS Output feed