Accenture MDR Quick Start Guide for Universal Google Cloud Platform (GCP)

This quick start guide will help Accenture MDR customers configure Universal Google Cloud Platform to allow log collection from the Log Collection Platform (LCP).

The document includes the following topics:

Supported Versions

A list of supported versions is available in the Accenture MDR Supported Products List document (Accenture_MDR_Supported_Products_List.xlsx) which can be found in Accenture MDR Portal.

Port Requirements

Table 1-1: Port requirements for LCP communication.

Configuring Universal Google Cloud Platform

Pre-requisites:

1. A user who's a Global Administrator or Compute Engine, PUB/SUB, Log Explorer Administrator.

2. Enable logging on the device which customer wants to monitor.

Device configuration Steps :

• Navigate to Pub/Sub and click CREATE TOPIC. Provide appropriate Topic ID

  Open

  

   

• Navigate to Logs Explorer, then go to Logs Router and click CREATE SINK

   

  Open

  

• Provide sink name and click Next

• In Sink destination, Select sink service as Cloud Pub/Sub topic and in next tab Select a Cloud Pub/Sub topic that you have created earlier. Click Next

• Enter an inclusion filter to determine which logs are included in logs routing sink and click CREATE SINK

•  Navigate to IAM & Admin section and service accounts option in it. Click Create Service Account.

• Provide a unique name and description and click create and continue. 

• Select Role as Pub/Sub Subscriber and Pub/Sub Viewer and click continue 

   

• Click on the service account email on next screen 

   

• Click on the keys tab and then Add Key and then create a new key

• Select JSON and click Create

• It will allow you to download a file, save that, and share it with MDR for log monitoring configuration.

LCP Configuration Parameters

Table 1-2: The Universal Google Cloud Platform Event collector (Custom – 3977) properties to be configured by MDR are shown in the table.