Question

Your compliance team requires that application logs for a production project be retained for 400 days, but the default _Default log bucket in Cloud Logging keeps logs for only 30 days. You want to meet the requirement with the least ongoing operational effort and without exporting logs to another service. What should you do?

Accepted Answer

Edit the retention period of the _Default log bucket (or create a custom log bucket) and set it to 400 days.

Answer

Create a Pub/Sub sink that streams all logs to a Cloud Function that writes them to a Cloud Storage bucket with a 400-day lifecycle rule.

Answer

Create a scheduled Cloud Run job that copies logs from Cloud Logging to BigQuery every night and deletes them after 400 days.

Answer

Enable Data Access audit logs on the project so that logs are automatically retained for one year.