Google SecOps SIEM: EOL for Forwarder, CrowdStrike API Update
Google SecOps is announcing the end-of-life for its forwarder component, impacting data collection pipelines. Customers must migrate to alternative mechanisms, such as the Bindplane OTel collector, before April 1, 2027. Additionally, CrowdStrike is decommissioning its Detects API on September 30, 2025, requiring users of the CrowdStrike Detection Monitoring API connector to update their API client permissions to use the Alerts API.
- →Google SecOps Forwarder component reaches EOL January 2027
- →CrowdStrike Detects API decommissioned September 2025
Deprecations (2) ›
- Google SecOps Forwarder component reaches EOL January 2027
The forwarder component of Google SecOps will reach end-of-life in January 2027. All data collection pipelines using the forwarder must migrate to an alternative mechanism, such as the Bindplane OpenTelemetry collector, by April 1, 2027. New Google SecOps customers will not be able to use the forwarder starting April 1, 2026.
- CrowdStrike Detects API decommissioned September 2025
CrowdStrike is decommissioning its Detects API on September 30, 2025, replacing it with the Alerts API. Google SecOps users leveraging the CrowdStrike Detection Monitoring API connector for CS_DETECTS logs must update their API client permissions to Read Alerts before this date to avoid data ingestion interruption.
https://cloud.google.com/release-notes#google-secops-siem
Related releases
- Access Transparency for Firebase App Hosting enters Preview Google Cloud release notes ·
- Error Reporting Adds Rust Stack Trace Support on GCP Google Cloud release notes ·
- Firebase App Hosting Access Approval enters Preview Google Cloud release notes ·
- Apigee X Maintenance Updates Begin for Instances with Preferred Windows Google Cloud release notes ·
- Cloud Workstations adds Compute Engine VM suspend and resume in Preview Google Cloud release notes ·
- Google Cloud IAM Workflow Updated for Workforce Identity Pool Providers Google Cloud release notes ·