Skip to content
This repository was archived by the owner on Sep 2, 2025. It is now read-only.

Commit 3970e10

Browse files
Merge pull request #1623 from anosek-an/patch-3
Improve GCP integration quota option description
2 parents 0c03ddd + f3e3c74 commit 3970e10

File tree

1 file changed

+11
-4
lines changed

1 file changed

+11
-4
lines changed

gdi/get-data-in/connect/gcp/gcp-connect.rst

Lines changed: 11 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -98,8 +98,17 @@ Your GCP integration is now complete.
9898

9999
.. note:: Splunk is not responsible for data availability, and it can take up to several minutes (or longer, depending on your configuration) from the time you connect until you start seeing valid data from your account.
100100

101-
Options
102-
++++++++
101+
Using a single principal for your resources
102+
++++++++++++++++++++++++++++++++++++++++++++++++
103+
104+
In IAM you can grant access to your resources to one or more entities called principals, regardless of the authentication method (single Service Account or Workload Identity Federation).
105+
106+
If you're using a single principal for multiple projects, GCP tracks all API usage quota in the project where the principal originates from, which can result in throttling in your integration. To mitigate this, select :strong:`Use quota from the project where metrics are stored`. To use this option the principal provided for the project needs either the ``serviceusage.services.use`` permission or the Service Usage Consumer role.
107+
108+
For a more detailed description see :new-page:`Principals <https://cloud.google.com/iam/docs/overview#concepts_related_identity>` in GCP's docs.
109+
110+
Other options
111+
++++++++++++++++
103112

104113
Optionally you can:
105114

@@ -111,8 +120,6 @@ Optionally you can:
111120

112121
* If you select Compute Engine as one of the services to monitor, you can enter a comma-separated list of Compute Engine Instance metadata keys to send as properties. These metadata keys are sent as properties named ``gcp_metadata_<metadata-key>``.
113122

114-
* Select :strong:`Use quota from the project where metrics are stored` to use a quota from the project where metrics are stored. The service account provided for the project needs either the ``serviceusage.services.use`` permission, or the `Service Usage Consumer` role.
115-
116123
Alternatives to connect to GCP
117124
============================================
118125

0 commit comments

Comments
 (0)