# Google SecOps/Chronicle Ingestion of InsightVM Data

**URL:** <https://discuss.rapid7.com/t/google-secops-chronicle-ingestion-of-insightvm-data/57156>\
**Category:** API\
**Created:** [April 10, 2026, 6:46pm UTC](https://discuss.rapid7.com/t/google-secops-chronicle-ingestion-of-insightvm-data/57156 "2026-04-10T18:46:50Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![guy\_incognito](https://discuss.rapid7.com/letter_avatar_proxy/v4/letter/g/eb8c5e/32.png) [@guy\_incognito](https://discuss.rapid7.com/u/guy_incognito)\
**Post date:** [April 10, 2026, 6:46pm UTC](https://discuss.rapid7.com/t/google-secops-chronicle-ingestion-of-insightvm-data/57156/1 "2026-04-10T18:46:50Z")

</div>

Hi, i am trying to get InsightVM data into GoogleSecOps but encountering issues with their Feed type of integration.  
[https://docs.cloud.google.com/chronicle/docs/reference/feed-management-api#rapid7-insight](https://docs.cloud.google.com/chronicle/docs/reference/feed-management-api#rapid7-insight)

This ingestion method appears to be broken in the sense it only pulls vulnerability definitions and asset information but no vulnerabilities findings on assets.

There are a few ways I can forward the data (bindplane SOAR custom playbook), but this seemed to be the preferred and simple way of doing so.

If you are a Google SecOps user, how did you get your InsightVM data in there?