Update Sink

cloud_logging.update_sink
ActionGoogle Cloudconnection required

Calls PATCH /projects/{project}/sinks/{sink} with an updateMask naming exactly the fields supplied.

Patch a log export sink — destination, filter, exclusions or disabled state.

Connection

Required
Yes — the node will not save without one
Auth type
OAuth 2.0
Providers
Google Cloud Logging
Secret shape
{"client_id", "client_secret", "refresh_token"}
Config it needs
project_id
Resolved by
config.connection_id, else node.connection_id

Configuration

10 fields, 1 required. A dotted path is a nested object and name[] an array of objects — the editor renders the same tree.

FieldTypeRequiredDefaultConstraintsExample
project_id
GCP project id (overrides connection).
stringNo———
sink_name
Sink id to patch.
stringYes———
destination
New export target. Left blank, the destination is untouched.
stringNo——storage.googleapis.com/my-log-bucket
filter
New logging filter. Left blank, the filter is untouched.
stringNo———
description
New description.
stringNo———
disabled
true to switch the sink off, false to switch it back on. Blank leaves it.
stringNo———
include_children
true/false for child-resource export. Blank leaves it.
stringNo———
exclusions
Replacement exclusion filters (JSON array). Blank leaves them.
arrayNo—array of object—
bigquery_options
Replacement BigQuery options (JSON). Blank leaves them.
objectNo———
unique_writer_identity
true/false for the dedicated writer service account. Blank leaves the sink's identity alone. Setting true on a sink that still uses the shared identity MINTS A NEW service account, and the export stops until that account is granted on the destination.
stringNo———
  • At least one of destination, filter, description, disabled, include_children, exclusions, bigquery_options, unique_writer_identity must be set.

Example configuration

Every value below is the contract’s own example or default — nothing invented.

{
  "destination": "storage.googleapis.com/my-log-bucket"
}

Output

One shape.

result

FieldTypeExample
ok
boolean—
name
Sink id.
string—
destination
Where the sink exports to.
string—
filter
Logging filter the sink exports.
string—
disabled
True while the sink is switched off.
boolean—
description
The sink's human description.
string—
writer_identity
Service account the destination must grant write access to.
string—
include_children
True when the sink also exports children of the parent resource.
boolean—
intercept_children
True when child resources' logs are intercepted here.
boolean—
exclusions
Exclusion filters attached to the sink; each one suppresses matching logs.
array—
bigquery_options
BigQuery destination options (partitioned tables).
object—
create_time
When the sink was created.
string—
update_time
When the sink was last changed.
string—
resource_name
Full resource name of the sink, when the API returns one.
string—
updated_fields
API field names named in the update mask.
array—
{
  "bigquery_options": {},
  "create_time": "",
  "description": "",
  "destination": "",
  "disabled": false,
  "exclusions": [],
  "filter": "",
  "include_children": false,
  "intercept_children": false,
  "name": "",
  "ok": false,
  "resource_name": "",
  "update_time": "",
  "updated_fields": [],
  "writer_identity": ""
}

Solutions with Google Cloud Logging

See Update Sink run in a workflow.

In a technical demo we add the Google Cloud Logging connection, drop the node on the canvas and let Workflow Health pre-flight it before the first real run.