Send Teleport audit events to SIEM
Teleport audit events need to be ingested by SIEM.
https://ops.gitlab.net/gitlab-com/gl-infra/config-mgmt/-/merge_requests/5740#note_164894
They are currently stored in Firestore, but are also logged in pod stdout.
Desired Outcome
-
Forward audit events from Teleport pod logs to a pub/sub topic with pubsubbeat or logging sink
Edited by Milad Irannejad