The GCP module can be configured in both Wazuh manager and agent. The choice merely depends on where do you want to reach the GCP services from.
The Wazuh manager includes all dependencies installed, the following steps are only necessary when configuring the integration in a Wazuh agent.
The module requires python 3.6 or superior compatibility.
The required Python modules can be installed with Pip, the Python package manager. Most of UNIX distributions have this tool available in their software repositories, but it can be compiled from sources too:
For CentOS/RHEL/Fedora systems:
# yum install python-pip
For Debian/Ubuntu systems:
# apt-get update && apt-get install python-pip
# curl -O https://bootstrap.pypa.io/get-pip.py # python get-pip.py
google-cloud-pubsub is the official python library supported by Google to manage Google Cloud Pub/Sub resources. It will be used to pull the log messages from the Pub/Sub queue. Depending on the Wazuh version used, it is necessary to install a different
For Wazuh versions greater or equal to
# pip install google-cloud-pubsub==2.7.1
For older versions:
# pip install google-cloud-pubsub==1.4.3