google_logging_folder_exclusion

Manages a folder-level logging exclusion. For more information see the official documentation and Excluding Logs.

Note that you must have the "Logs Configuration Writer" IAM role (roles/logging.configWriter) granted to the credentials used with Terraform.

Example Usage

resource "google_logging_folder_exclusion" "my-exclusion" {
    name        = "my-instance-debug-exclusion"
    folder      = "${google_folder.my-folder.name}"

    description = "Exclude GCE instance debug logs"

    # Exclude all DEBUG or lower severity messages relating to instances
    filter      = "resource.type = gce_instance AND severity <= DEBUG"
}

resource "google_folder" "my-folder" {
    display_name = "My folder"
    parent       = "organizations/123456"
}

Argument Reference

The following arguments are supported:

• folder - (Required) The folder to be exported to the sink. Note that either [FOLDER_ID] or "folders/[FOLDER_ID]" is accepted.

• name - (Required) The name of the logging exclusion.

• description - (Optional) A human-readable description.

• disabled - (Optional) Whether this exclusion rule should be disabled or not. This defaults to false.

• filter - (Required) The filter to apply when excluding logs. Only log entries that match the filter are excluded. See Advanced Log Filters for information on how to write a filter.

Import

Folder-level logging exclusions can be imported using their URI, e.g.

$ terraform import google_logging_folder_exclusion.my_exclusion folders/my-folder/exclusions/my-exclusion