---
name: vpc-fl-ts-unauth-access-cos
title: Why isn't the flow log collector authorized to publish data to the IBM Cloud Object Storage bucket?
description: A flow log collector requires an IBM Cloud Object Storage bucket to be defined and accessible. If you see the error log with message ID `is.flow-log-collector.00002E`, the IBM Cloud Object Storage bucket is not accessible. The flow log collector cannot publish data to the bucket.
last-updated: 2024-11-06
---

> ## Documentation Index
> The table of contents for this documentation set is at https://cloud.ibm.com/docs/vpc?format=markdown
> The index for all IBM Cloud docs is at: https://cloud.ibm.com/docs/llms.txt
> Use these files to discover more information as needed.

# Why isn't the flow log collector authorized to publish data to the IBM Cloud Object Storage bucket?
{: #fl-ts-error-unauth-access-cos}
{: troubleshoot}
{: support}

A flow log collector requires an IBM Cloud Object Storage bucket to be defined and accessible. If you see the error log with message ID `is.flow-log-collector.00002E`, the IBM Cloud Object Storage bucket is not accessible. The flow log collector cannot publish data to the bucket.
{: shortdesc}

To avoid lost data, create an IBM Cloud Object Storage bucket within the next 24 hours to correct this problem.
{: important}

The flow log collector is not authorized to publish data to the IBM Cloud Object Storage bucket:
   `is.flow-log-collector.00002E: Unauthorized access to Cloud Object Storage bucket <BucketName>`
{: tsSymptoms}

The IBM Cloud Object Storage bucket does not have the correct access to allow the flow log collector to publish data.
{: tsCauses}

Check for a defined authorization between the flow log collector and the IBM Cloud Object Storage bucket. If not, add one so that the flow log collector can access the bucket.
{: tsResolve}

To define an authorization, follow these steps:

1. In the IBM Cloud console, click **Manage** > **Access (IAM)**.
1. Select **Authorizations** from the navigation pane.
1. Click **Create**.
1. For **Source service**:
   * Select **VPC Infrastructure Services**. Then, select **Services based on attributes**.
   * Select **Resource type**. Then, select **Flow Logs for VPC**.
   * Select **Source resource instance** and choose an option.
1. For **Target service**:
   * Select **Cloud Object Storage**. Then, select **Services based on attributes**.
   * Select **Service instance** and choose an option.
1. For **Service access**, select the **Writer** role.
1. Click **Authorize**.

For more information, see [Creating a flow log collector](https://cloud.ibm.com/docs/vpc?topic=vpc-ordering-flow-log-collector&format=markdown).
{: note}