Your architecture calls for the centralized collection of all admin activity and VM system logs within your project. How should you collect these logs from both VMs and services?
A.
All admin and VM system logs are automatically collected by Stackdriver.
B.
Stackdriver automatically collects admin activity logs for most services. The Stackdriver Logging agent must be installed on each instance to collect system logs.
C.
Launch a custom syslogd compute instance and configure your GCP project and VMs to forward all logs to it.
D.
Install the Stackdriver Logging agent on a single compute instance and let it collect all audit and access logs for your environment.
B is correct
Now it is recommended to use OpsAgent as a replacement. Although you can create a VM instance with OpsAgent automatically enabled, which makes it look like 'the logging is automatically enabled', under the hood you need to install the agent on the instance.
https://cloud.google.com/stackdriver/docs/solutions/agents/ops-agent/install-agent-vm-creation
Answer is A
you don't need to install the Stackdriver Logging agent or any other agents in order to collect admin or system logs from compute engine instances (VM):
https://cloud.google.com/compute/docs/logging/activity-logs
https://cloud.google.com/compute/docs/logging/audit-logging
Answer is B, but it would be more accurate if the answer mentioned install the Ops Agent on the VMs. https://cloud.google.com/logging/docs/agent/ops-agent
Stackdriver does not require the Stackdriver Logging agent to be installed in order to collect system logs.
Stackdriver is a cloud monitoring and logging platform that is integrated with Google Cloud Platform (GCP) and is designed to collect, monitor, and troubleshoot logs from your GCP resources. By default, Stackdriver automatically collects admin activity logs for most GCP services, as well as VM system logs. This means that you don't need to install the Stackdriver Logging agent or any other agents in order to collect these logs - they are automatically collected and centralized by Stackdriver.
However, if you want to collect logs from other sources that are not automatically collected by Stackdriver (e.g. logs from applications running on your VMs, logs from on-premises systems, etc.), you can use the Stackdriver Logging agent to forward these logs to Stackdriver. The agent is a lightweight daemon that runs on your VMs or other hosts, and it can be used to collect logs from various sources and forward them to Stackdriver for centralized storage and analysis.
Answer is A
In Google Cloud Platform (GCP), you can use Stackdriver to collect and centralize all admin activity and VM system logs within your project. Stackdriver is a powerful cloud monitoring and logging platform that is integrated with GCP, and it provides a number of features that are specifically designed to help you collect, monitor, and troubleshoot logs from your GCP resources.
One of the key features of Stackdriver is that it automatically collects admin activity logs for most GCP services, as well as VM system logs. This means that you don't need to install any agents or configure any additional components to collect these logs - they are automatically collected and centralized by Stackdriver.
To view and analyze your logs in Stackdriver, you can use the Stackdriver Logs Viewer, which provides a powerful interface for searching, filtering, and aggregating your logs. You can also use the Stackdriver Logs API to programmatically access your logs, or use the Stackdriver Logging agent to forward your logs to other log management or analysis tools.
B – stackdriver automatically collects admin activity logs for most services. Stackdriver Logging Agenct must be installed on each instance to collect system logs.
Read more about Logging Agent. https://cloud.google.com/logging/docs/agent/
Logging agent streams logs from 3rd party apps and systems SW (syslog on Linux) to Logging. It is best practice to run the Logging agent on all your VM instances. It runs on Linux and Windows.
Cloud Audit Logs says that Admin Activity audit logs are always enabled.
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
MeasService
Highly Voted 5 years agoKouShikyou
5 years agotartar
4 years, 2 months agonitinz
3 years, 7 months agokumarp6
3 years, 12 months agoshandy
Highly Voted 4 years, 11 months agoJaimeMS
Most Recent 4 months, 4 weeks agohitmax87
5 months, 2 weeks agoconvers39
10 months agostefanop
10 months, 3 weeks agospuyol
10 months, 3 weeks agosquishy_fishy
11 months, 3 weeks agojlambdan
1 year, 7 months agoomermahgoub
1 year, 10 months agoomermahgoub
1 year, 10 months agomegumin
1 year, 11 months agoDrishaS4
2 years, 2 months agoAzureDP900
2 years agopanqueca
2 years, 5 months agoharoldbenites
2 years, 10 months agovincy2202
2 years, 11 months agoMaxNRG
3 years agounnikrisb
3 years ago