Skip to main content



This rule has been split and is linked to lacework-global-246. See Adjusted Rules for CIS GCP 1.3.0 for further details.

2.2 Ensure That Sink Destinations Exist (Automated)


Best practices recommend that the resource configured as a log sink destination exists.


From Console:

  1. Go to Logs Router by visiting
  2. Click the three dots next to the sink with a non-existent destination.
  3. Click Edit sink.
  4. Under Sink destination, select a sink service and a destination resource.
  5. Click Done.
  6. Click Update Sink.

For more information, see


Ensure that the sink filter is not left empty. Create a filter to collect only the relevant logs.

From Command Line:

To update a sink with a new destination:

gcloud logging sinks create <sink-name> <destination-name>