Re: GoogleCloudAPI Query Syntax

JuLenny · 01-28-2025 06:27 PM

Hello,
I'm trying to run a Google Cloud API query from the SOAR platform, using the Integration.
The error I'm getting is:
"Failed to execute API request.
Reason: An error occurred: 400 Client Error: Bad Request for url: https://logging.googleapis.com/v2/entries:list "
These are the anonymized parameters that I sent:

This is the config of the Integration. Any idea what I'm doing wrong?

ylandovskyy

Can I ask, what is the use case?

We have an integration for Google Cloud Logging (called Cloud Logging in Marketplace), which allows you to execute queries and get information.

JuLenny

Hi @ylandovskyy ,
Thanks for getting back to me.
The Cloud Logging Integration, as other existing Google Cloud integrations on the marketplace are specific and can be used in particular cases, but I want to be able to run any Google Cloud API query, just like if I ran this command in the Cloud Shell (that works), through the SOAR system and I thought that this integration is the right one for that. Isn't it the case?

curl -X POST \
  -H "Authorization: Bearer $(gcloud auth application-default print-access-token)" \
  -H "Content-Type: application/json" \
  -d '{
    "resourceNames": ["projects/{PROJECT_ID}"],
    "filter": "protoPayload.serviceAccountEmail=\"xxxxxxxxx-compute@developer.gserviceaccount.com\"",
    "orderBy": "timestamp desc",
    "pageSize": 5,
    "pageToken": "xxxxxxxxxxxx"
  }' \
  https://logging.googleapis.com/v2/entries:list

ylandovskyy

Yes, this integration is the correct one for it. In the original screenshot I see that the method was "GET", but in your command it's "POST". This is worth investigating