Method: projects.sinks.create

Creates a sink that exports specified log entries to a destination. The export begins upon ingress, unless the sink'swriterIdentity is not permitted to write to the destination. A sink can export log entries only from the resource owning the sink.

HTTP request

POST https://logging.googleapis.com/v2/{parent=projects/*}/sinks

The URL usesgRPC Transcoding syntax.

Path parameters

Parameters
parent

string

Required. The resource in which to create the sink:

"projects/[PROJECT_ID]""organizations/[ORGANIZATION_ID]""billingAccounts/[BILLING_ACCOUNT_ID]""folders/[FOLDER_ID]"

For examples:

"projects/my-project""organizations/123456789"

Authorization requires the followingIAM permission on the specified resourceparent:

  • logging.sinks.create

Query parameters

Parameters
uniqueWriterIdentity

boolean

Optional. Determines the kind of IAM identity returned aswriterIdentity in the new sink. If this value is omitted or set to false, and if the sink's parent is a project, then the value returned aswriterIdentity is the same group or service account used by Cloud Logging before the addition of writer identities to this API. The sink's destination must be in the same project as the sink itself.

If this field is set to true, or if the sink is owned by a non-project resource such as an organization, then the value ofwriterIdentity will be aservice agent used by the sinks with the same parent. For more information, seewriterIdentity inLogSink.

customWriterIdentity

string

Optional. The service account provided by the caller that will be used to write the log entries. The format must beserviceAccount:some@email. This field can only be specified when you are routing logs to a log bucket that is in a different project than the sink. When not specified, a Logging service account will automatically be generated.

Request body

The request body contains an instance ofLogSink.

Response body

If successful, the response body contains a newly created instance ofLogSink.

Authorization scopes

Requires one of the following OAuth scopes:

  • https://www.googleapis.com/auth/logging.admin
  • https://www.googleapis.com/auth/cloud-platform

For more information, see theAuthentication Overview.

Except as otherwise noted, the content of this page is licensed under theCreative Commons Attribution 4.0 License, and code samples are licensed under theApache 2.0 License. For details, see theGoogle Developers Site Policies. Java is a registered trademark of Oracle and/or its affiliates.

Last updated 2025-07-21 UTC.