BigQuery project id is invalid

[mlynch1958]

The BlueApp from G Suite on my client's AlienVault began throwing this error: 

BigQuery Status

BigQuery project id is invalid

Enter valid BigQuery project ID

I had my client go into his G Suite admin console and check the ProjectID  with these instructions: 

• To locate your project ID:
• Go to the API Console.
• From the projects list, select Manage all projects.
• The names and IDs for all the projects you're a member of are displayed.

He confirmed that the ID is exactly what is in the G Suite App. Any ideas what could be causing this and how I should proceed?

[NorieRam]

Hi @mlynch1958,

Welcome to Google Cloud Community!

It sounds like your client is facing a roadblock, "BigQuery project id is invalid" error in AlienVault BlueApp. Even though your client diligently confirms the Project ID, this error message can pop up for a few different reasons. Here's a breakdown of potential causes and fixes:

• Authorization Issues:

  • Service Account Permissions: The BlueApp likely uses a service account to interact with BigQuery. Ensure this service account has the necessary permissions ("BigQuery User" role at a minimum) within the BigQuery project.
  • OAuth Consent: If the application relies on OAuth for authorization, the consent screen configuration in Google Cloud Platform might need review. Make sure the BigQuery API is enabled and the correct scopes are requested.

• Project ID Format:

  • Case Sensitivity: Double-check that the project ID is entered with the correct case sensitivity in both the BlueApp configuration and the Google Cloud Platform console.
  • Special Characters: Confirm that the project ID doesn't contain any unsupported special characters or spaces.

I hope the above information is helpful.

[mlynch1958]

Thanks for getting back to me. I will look into these and report back.

[mlynch1958]

far as I can tell my client has this setup correctly. So my question is, teh app seems to be ingesting logs just fine. What exactly does the BigQuery component do? What am I missing because of this error?