Back to Wazuh

Wazuh module: Google Cloud

architecture/wm_gcp/Readme.md

4.14.41.0 KB
Original Source
<!--- Copyright (C) 2015, Wazuh Inc. Created by Wazuh, Inc. <[email protected]>. This program is free software; you can redistribute it and/or modify it under the terms of GPLv2 -->

Wazuh module: Google Cloud

Index

  1. Purpose
  2. Sequence diagram

Purpose

The Google Cloud Module is in charge of requesting events to the Google Cloud API and forward them to the manager. The module gets the events from a Google Cloud subscription that is specified in the configuration file.

Sequence diagram

Sequence diagram shows the basic flow of the Google Cloud Module. Steps are:

  1. Get the parameters from the config file to setup the module.
  2. Send the parameters to the script that will deal with the events of the Google Cloud API.
  3. Request the events from the Google Cloud API.
  4. Each received log is formatted to a JSON event
  5. Send the events to the AgentD
  6. If we receive less events than the maximum number of events request, it do another request to the Google Cloud API for more events