Google SecOps Forwarder Deprecation: Migrate to Bindplane and OpenTelemetry

Google Cloud Security Operations is deprecating the legacy SecOps Forwarder by January 2027. Going forward, SecOps will rely on OpenTelemetry collectors with Bindplane as the officially supported ingestion model — offering a more scalable, secure, and flexible way to collect SIEM logs. Bindplane's OTel collector is available right away and will remain the default ingestion model. A Google-built OTel collector, fully compatible with Bindplane, will be available in January 2026. This workshop will guide you through the entire migration path.