Configure CMEK for Cloud Logging

<!doctype html> <html lang="en" dir="ltr"> <head> <meta name="google-signin-client-id" content="721724668570-nbkv1cfusk7kk4eni4pjvepaus73b13t.apps.googleusercontent.com"> <meta name="google-signin-scope" content="profile email https://www.googleapis.com/auth/developerprofiles https://www.googleapis.com/auth/developerprofiles.award https://www.googleapis.com/auth/cloud-platform https://www.googleapis.com/auth/webhistory"> <meta property="og:site_name" content="Google Cloud"> <meta property="og:type" content="website"><meta name="theme-color" content="#039be5"><meta charset="utf-8"> <meta content="IE=Edge" http-equiv="X-UA-Compatible"> <meta name="viewport" content="width=device-width, initial-scale=1"> <link rel="manifest" href="/_pwa/cloud/manifest.json" crossorigin="use-credentials"> <link rel="preconnect" href="//www.gstatic.com" crossorigin> <link rel="preconnect" href="//fonts.gstatic.com" crossorigin> <link rel="preconnect" href="//fonts.googleapis.com" crossorigin> <link rel="preconnect" href="//apis.google.com" crossorigin> <link rel="preconnect" href="//www.google-analytics.com" crossorigin><link rel="stylesheet" href="//fonts.googleapis.com/css?family=Google+Sans:400,500,700|Google+Sans+Text:400,400italic,500,500italic,700,700italic|Roboto:400,400italic,500,500italic,700,700italic|Roboto+Mono:400,500,700&display=swap"> <link rel="stylesheet" href="//fonts.googleapis.com/css2?family=Material+Icons&family=Material+Symbols+Outlined&display=block"><link rel="stylesheet" href="https://www.gstatic.com/devrel-devsite/prod/v870e399c64f7c43c99a3043db4b3a74327bb93d0914e84a0c3dba90bbfd67625/cloud/css/app.css"> <link rel="shortcut icon" href="https://www.gstatic.com/devrel-devsite/prod/v870e399c64f7c43c99a3043db4b3a74327bb93d0914e84a0c3dba90bbfd67625/cloud/images/favicons/onecloud/favicon.ico"> <link rel="apple-touch-icon" href="https://www.gstatic.com/devrel-devsite/prod/v870e399c64f7c43c99a3043db4b3a74327bb93d0914e84a0c3dba90bbfd67625/cloud/images/favicons/onecloud/super_cloud.png"><link rel="canonical" href="https://cloud.google.com/logging/docs/routing/managed-encryption"><link rel="search" type="application/opensearchdescription+xml" title="Google Cloud" href="https://cloud.google.com/s/opensearch.xml"> <link rel="alternate" hreflang="en" href="https://cloud.google.com/logging/docs/routing/managed-encryption" /><link rel="alternate" hreflang="x-default" href="https://cloud.google.com/logging/docs/routing/managed-encryption" /><link rel="alternate" hreflang="zh-Hans" href="https://cloud.google.com/logging/docs/routing/managed-encryption?hl=zh-cn" /><link rel="alternate" hreflang="fr" href="https://cloud.google.com/logging/docs/routing/managed-encryption?hl=fr" /><link rel="alternate" hreflang="de" href="https://cloud.google.com/logging/docs/routing/managed-encryption?hl=de" /><link rel="alternate" hreflang="id" href="https://cloud.google.com/logging/docs/routing/managed-encryption?hl=id" /><link rel="alternate" hreflang="it" href="https://cloud.google.com/logging/docs/routing/managed-encryption?hl=it" /><link rel="alternate" hreflang="ja" href="https://cloud.google.com/logging/docs/routing/managed-encryption?hl=ja" /><link rel="alternate" hreflang="ko" href="https://cloud.google.com/logging/docs/routing/managed-encryption?hl=ko" /><link rel="alternate" hreflang="pt-BR" href="https://cloud.google.com/logging/docs/routing/managed-encryption?hl=pt-br" /><link rel="alternate" hreflang="es-419" href="https://cloud.google.com/logging/docs/routing/managed-encryption?hl=es-419" /><title>Configure CMEK for Cloud Logging  |  Google Cloud</title> <meta property="og:title" content="Configure CMEK for Cloud Logging  |  Google Cloud"><meta property="og:url" content="https://cloud.google.com/logging/docs/routing/managed-encryption"><meta property="og:image" content="https://cloud.google.com/_static/cloud/images/social-icon-google-cloud-1200-630.png"> <meta property="og:image:width" content="1200"> <meta property="og:image:height" content="630"><meta property="og:locale" content="en"><meta name="twitter:card" content="summary_large_image"><script type="application/ld+json"> { "@context": "https://schema.org", "@type": "Article", "headline": "Configure CMEK for Cloud Logging" } </script><script type="application/ld+json"> { "@context": "https://schema.org", "@type": "BreadcrumbList", "itemListElement": [{ "@type": "ListItem", "position": 1, "name": "Google Cloud Observability", "item": "https://cloud.google.com/stackdriver/docs" },{ "@type": "ListItem", "position": 2, "name": "Logging", "item": "https://cloud.google.com/logging/docs" },{ "@type": "ListItem", "position": 3, "name": "Documentation", "item": "https://cloud.google.com/logging/docs" },{ "@type": "ListItem", "position": 4, "name": "Configure CMEK for Cloud Logging", "item": "https://cloud.google.com/logging/docs/routing/managed-encryption" }] } </script> <link rel="stylesheet" href="/extras.css"></head> <body class="" template="page" theme="cloud-theme" type="article" layout="docs" free-trial display-toc pending> <devsite-progress type="indeterminate" id="app-progress"></devsite-progress> <section class="devsite-wrapper"> <devsite-cookie-notification-bar></devsite-cookie-notification-bar><cloudx-track userCountry="SG"></cloudx-track> <cloudx-utils-init></cloudx-utils-init> <devsite-header keep-tabs-visible> <div class="devsite-header--inner nocontent"> <div class="devsite-top-logo-row-wrapper-wrapper"> <div class="devsite-top-logo-row-wrapper"> <div class="devsite-top-logo-row"> <button type="button" id="devsite-hamburger-menu" class="devsite-header-icon-button button-flat material-icons gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Navigation menu button" visually-hidden aria-label="Open menu"> </button> <div class="devsite-product-name-wrapper"> <a href="/" class="devsite-site-logo-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Site logo" track-type="globalNav" track-name="googleCloud" track-metadata-position="nav" track-metadata-eventDetail="nav"> <picture> <img src="https://www.gstatic.com/devrel-devsite/prod/v870e399c64f7c43c99a3043db4b3a74327bb93d0914e84a0c3dba90bbfd67625/cloud/images/cloud-logo.svg" class="devsite-site-logo" alt="Google Cloud"> </picture> </a> <span class="devsite-product-name"> <ul class="devsite-breadcrumb-list" > <li class="devsite-breadcrumb-item devsite-has-google-wordmark"> </li> </ul> </span> </div> <div class="devsite-top-logo-row-middle"> <div class="devsite-header-upper-tabs"> <cloudx-tabs-nav class="upper-tabs"> <nav class="devsite-tabs-wrapper" aria-label="Upper tabs"> <tab class="devsite-active"> <a href="https://cloud.google.com/docs" track-metadata-eventdetail="https://cloud.google.com/docs" class="devsite-tabs-content gc-analytics-event " track-type="nav" track-metadata-position="nav - docs-home" track-metadata-module="primary nav" aria-label="Documentation, selected" data-category="Site-Wide Custom Events" data-label="Tab: Documentation" track-name="docs-home" track-link-column-type="single-column" > Documentation </a> </tab> <tab class="devsite-dropdown devsite-clickable "> <a href="https://cloud.google.com/docs/tech-area-overviews" track-metadata-eventdetail="https://cloud.google.com/docs/tech-area-overviews" class="devsite-tabs-content gc-analytics-event " track-type="nav" track-metadata-position="nav - technology-areas" track-metadata-module="primary nav" data-category="Site-Wide Custom Events" data-label="Tab: Technology areas" track-name="technology-areas" track-link-column-type="single-column" > Technology areas </a> <a href="#" role="button" aria-haspopup="true" aria-expanded="false" aria-label="Dropdown menu for Technology areas" track-type="nav" track-metadata-eventdetail="https://cloud.google.com/docs/tech-area-overviews" track-metadata-position="nav - technology-areas" track-metadata-module="primary nav" data-category="Site-Wide Custom Events" data-label="Tab: Technology areas" track-name="technology-areas" track-link-column-type="single-column" class="devsite-tabs-dropdown-toggle devsite-icon devsite-icon-arrow-drop-down"></a> <div class="devsite-tabs-dropdown" aria-label="submenu" hidden> <button class="devsite-tabs-close-button material-icons button-flat gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Close dropdown menu" aria-label="Close dropdown menu" track-type="nav" track-name="close" track-metadata-eventdetail="#" track-metadata-position="nav - technology-areas" track-metadata-module="tertiary nav">close</button> <div class="devsite-tabs-dropdown-content"> <div class="devsite-tabs-dropdown-column "> <ul class="devsite-tabs-dropdown-section "> <li class="devsite-nav-item"> <a href="https://cloud.google.com/docs/ai-ml" track-type="nav" track-metadata-eventdetail="https://cloud.google.com/docs/ai-ml" track-metadata-position="nav - technology-areas" track-metadata-module="tertiary nav" tooltip > <div class="devsite-nav-item-title"> AI and ML </div> </a> </li> <li class="devsite-nav-item"> <a href="https://cloud.google.com/docs/application-development" track-type="nav" track-metadata-eventdetail="https://cloud.google.com/docs/application-development" track-metadata-position="nav - technology-areas" track-metadata-module="tertiary nav" tooltip > <div class="devsite-nav-item-title"> Application development </div> </a> </li> <li class="devsite-nav-item"> <a href="https://cloud.google.com/docs/application-hosting" track-type="nav" track-metadata-eventdetail="https://cloud.google.com/docs/application-hosting" track-metadata-position="nav - technology-areas" track-metadata-module="tertiary nav" tooltip > <div class="devsite-nav-item-title"> Application hosting </div> </a> </li> <li class="devsite-nav-item"> <a href="https://cloud.google.com/docs/compute-area" track-type="nav" track-metadata-eventdetail="https://cloud.google.com/docs/compute-area" track-metadata-position="nav - technology-areas" track-metadata-module="tertiary nav" tooltip > <div class="devsite-nav-item-title"> Compute </div> </a> </li> <li class="devsite-nav-item"> <a href="https://cloud.google.com/docs/data" track-type="nav" track-metadata-eventdetail="https://cloud.google.com/docs/data" track-metadata-position="nav - technology-areas" track-metadata-module="tertiary nav" tooltip > <div class="devsite-nav-item-title"> Data analytics and pipelines </div> </a> </li> <li class="devsite-nav-item"> <a href="https://cloud.google.com/docs/databases" track-type="nav" track-metadata-eventdetail="https://cloud.google.com/docs/databases" track-metadata-position="nav - technology-areas" track-metadata-module="tertiary nav" tooltip > <div class="devsite-nav-item-title"> Databases </div> </a> </li> <li class="devsite-nav-item"> <a href="https://cloud.google.com/docs/dhm-cloud" track-type="nav" track-metadata-eventdetail="https://cloud.google.com/docs/dhm-cloud" track-metadata-position="nav - technology-areas" track-metadata-module="tertiary nav" tooltip > <div class="devsite-nav-item-title"> Distributed, hybrid, and multicloud </div> </a> </li> <li class="devsite-nav-item"> <a href="https://cloud.google.com/docs/generative-ai" track-type="nav" track-metadata-eventdetail="https://cloud.google.com/docs/generative-ai" track-metadata-position="nav - technology-areas" track-metadata-module="tertiary nav" tooltip > <div class="devsite-nav-item-title"> Generative AI </div> </a> </li> <li class="devsite-nav-item"> <a href="https://cloud.google.com/docs/industry" track-type="nav" track-metadata-eventdetail="https://cloud.google.com/docs/industry" track-metadata-position="nav - technology-areas" track-metadata-module="tertiary nav" tooltip > <div class="devsite-nav-item-title"> Industry solutions </div> </a> </li> <li class="devsite-nav-item"> <a href="https://cloud.google.com/docs/networking" track-type="nav" track-metadata-eventdetail="https://cloud.google.com/docs/networking" track-metadata-position="nav - technology-areas" track-metadata-module="tertiary nav" tooltip > <div class="devsite-nav-item-title"> Networking </div> </a> </li> <li class="devsite-nav-item"> <a href="https://cloud.google.com/docs/observability" track-type="nav" track-metadata-eventdetail="https://cloud.google.com/docs/observability" track-metadata-position="nav - technology-areas" track-metadata-module="tertiary nav" tooltip > <div class="devsite-nav-item-title"> Observability and monitoring </div> </a> </li> <li class="devsite-nav-item"> <a href="https://cloud.google.com/docs/security" track-type="nav" track-metadata-eventdetail="https://cloud.google.com/docs/security" track-metadata-position="nav - technology-areas" track-metadata-module="tertiary nav" tooltip > <div class="devsite-nav-item-title"> Security </div> </a> </li> <li class="devsite-nav-item"> <a href="https://cloud.google.com/docs/storage" track-type="nav" track-metadata-eventdetail="https://cloud.google.com/docs/storage" track-metadata-position="nav - technology-areas" track-metadata-module="tertiary nav" tooltip > <div class="devsite-nav-item-title"> Storage </div> </a> </li> </ul> </div> </div> </div> </tab> <tab class="devsite-dropdown devsite-clickable "> <a href="https://cloud.google.com/docs/cross-product-overviews" track-metadata-eventdetail="https://cloud.google.com/docs/cross-product-overviews" class="devsite-tabs-content gc-analytics-event " track-type="nav" track-metadata-position="nav - crossproduct" track-metadata-module="primary nav" data-category="Site-Wide Custom Events" data-label="Tab: Cross-product tools" track-name="crossproduct" track-link-column-type="single-column" > Cross-product tools </a> <a href="#" role="button" aria-haspopup="true" aria-expanded="false" aria-label="Dropdown menu for Cross-product tools" track-type="nav" track-metadata-eventdetail="https://cloud.google.com/docs/cross-product-overviews" track-metadata-position="nav - crossproduct" track-metadata-module="primary nav" data-category="Site-Wide Custom Events" data-label="Tab: Cross-product tools" track-name="crossproduct" track-link-column-type="single-column" class="devsite-tabs-dropdown-toggle devsite-icon devsite-icon-arrow-drop-down"></a> <div class="devsite-tabs-dropdown" aria-label="submenu" hidden> <button class="devsite-tabs-close-button material-icons button-flat gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Close dropdown menu" aria-label="Close dropdown menu" track-type="nav" track-name="close" track-metadata-eventdetail="#" track-metadata-position="nav - crossproduct" track-metadata-module="tertiary nav">close</button> <div class="devsite-tabs-dropdown-content"> <div class="devsite-tabs-dropdown-column "> <ul class="devsite-tabs-dropdown-section "> <li class="devsite-nav-item"> <a href="https://cloud.google.com/docs/access-resources" track-type="nav" track-metadata-eventdetail="https://cloud.google.com/docs/access-resources" track-metadata-position="nav - crossproduct" track-metadata-module="tertiary nav" tooltip > <div class="devsite-nav-item-title"> Access and resources management </div> </a> </li> <li class="devsite-nav-item"> <a href="https://cloud.google.com/docs/costs-usage" track-type="nav" track-metadata-eventdetail="https://cloud.google.com/docs/costs-usage" track-metadata-position="nav - crossproduct" track-metadata-module="tertiary nav" tooltip > <div class="devsite-nav-item-title"> Costs and usage management </div> </a> </li> <li class="devsite-nav-item"> <a href="https://cloud.google.com/docs/devtools" track-type="nav" track-metadata-eventdetail="https://cloud.google.com/docs/devtools" track-metadata-position="nav - crossproduct" track-metadata-module="tertiary nav" tooltip > <div class="devsite-nav-item-title"> Google Cloud SDK, languages, frameworks, and tools </div> </a> </li> <li class="devsite-nav-item"> <a href="https://cloud.google.com/docs/iac" track-type="nav" track-metadata-eventdetail="https://cloud.google.com/docs/iac" track-metadata-position="nav - crossproduct" track-metadata-module="tertiary nav" tooltip > <div class="devsite-nav-item-title"> Infrastructure as code </div> </a> </li> <li class="devsite-nav-item"> <a href="https://cloud.google.com/docs/migration" track-type="nav" track-metadata-eventdetail="https://cloud.google.com/docs/migration" track-metadata-position="nav - crossproduct" track-metadata-module="tertiary nav" tooltip > <div class="devsite-nav-item-title"> Migration </div> </a> </li> </ul> </div> </div> </div> </tab> <tab class="devsite-dropdown devsite-clickable "> <a href="https://cloud.google.com/" track-metadata-eventdetail="https://cloud.google.com/" class="devsite-tabs-content gc-analytics-event " track-type="nav" track-metadata-position="nav - related-sites" track-metadata-module="primary nav" data-category="Site-Wide Custom Events" data-label="Tab: Related sites" track-name="related-sites" track-link-column-type="single-column" > Related sites </a> <a href="#" role="button" aria-haspopup="true" aria-expanded="false" aria-label="Dropdown menu for Related sites" track-type="nav" track-metadata-eventdetail="https://cloud.google.com/" track-metadata-position="nav - related-sites" track-metadata-module="primary nav" data-category="Site-Wide Custom Events" data-label="Tab: Related sites" track-name="related-sites" track-link-column-type="single-column" class="devsite-tabs-dropdown-toggle devsite-icon devsite-icon-arrow-drop-down"></a> <div class="devsite-tabs-dropdown" aria-label="submenu" hidden> <button class="devsite-tabs-close-button material-icons button-flat gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Close dropdown menu" aria-label="Close dropdown menu" track-type="nav" track-name="close" track-metadata-eventdetail="#" track-metadata-position="nav - related-sites" track-metadata-module="tertiary nav">close</button> <div class="devsite-tabs-dropdown-content"> <div class="devsite-tabs-dropdown-column "> <ul class="devsite-tabs-dropdown-section "> <li class="devsite-nav-item"> <a href="https://cloud.google.com/" track-type="nav" track-metadata-eventdetail="https://cloud.google.com/" track-metadata-position="nav - related-sites" track-metadata-module="tertiary nav" tooltip > <div class="devsite-nav-item-title"> Google Cloud Home </div> </a> </li> <li class="devsite-nav-item"> <a href="https://cloud.google.com/free" track-type="nav" track-metadata-eventdetail="https://cloud.google.com/free" track-metadata-position="nav - related-sites" track-metadata-module="tertiary nav" tooltip > <div class="devsite-nav-item-title"> Free Trial and Free Tier </div> </a> </li> <li class="devsite-nav-item"> <a href="https://cloud.google.com/architecture" track-type="nav" track-metadata-eventdetail="https://cloud.google.com/architecture" track-metadata-position="nav - related-sites" track-metadata-module="tertiary nav" tooltip > <div class="devsite-nav-item-title"> Architecture Center </div> </a> </li> <li class="devsite-nav-item"> <a href="https://cloud.google.com/blog" track-type="nav" track-metadata-eventdetail="https://cloud.google.com/blog" track-metadata-position="nav - related-sites" track-metadata-module="tertiary nav" tooltip > <div class="devsite-nav-item-title"> Blog </div> </a> </li> <li class="devsite-nav-item"> <a href="https://cloud.google.com/contact" track-type="nav" track-metadata-eventdetail="https://cloud.google.com/contact" track-metadata-position="nav - related-sites" track-metadata-module="tertiary nav" tooltip > <div class="devsite-nav-item-title"> Contact Sales </div> </a> </li> <li class="devsite-nav-item"> <a href="https://cloud.google.com/developers" track-type="nav" track-metadata-eventdetail="https://cloud.google.com/developers" track-metadata-position="nav - related-sites" track-metadata-module="tertiary nav" tooltip > <div class="devsite-nav-item-title"> Google Cloud Developer Center </div> </a> </li> <li class="devsite-nav-item"> <a href="https://developers.google.com/" track-type="nav" track-metadata-eventdetail="https://developers.google.com/" track-metadata-position="nav - related-sites" track-metadata-module="tertiary nav" tooltip > <div class="devsite-nav-item-title"> Google Developer Center </div> </a> </li> <li class="devsite-nav-item"> <a href="https://console.cloud.google.com/marketplace" track-type="nav" track-metadata-eventdetail="https://console.cloud.google.com/marketplace" track-metadata-position="nav - related-sites" track-metadata-module="tertiary nav" tooltip > <div class="devsite-nav-item-title"> Google Cloud Marketplace </div> </a> </li> <li class="devsite-nav-item"> <a href="https://cloud.google.com/marketplace/docs" track-type="nav" track-metadata-eventdetail="https://cloud.google.com/marketplace/docs" track-metadata-position="nav - related-sites" track-metadata-module="tertiary nav" tooltip > <div class="devsite-nav-item-title"> Google Cloud Marketplace Documentation </div> </a> </li> <li class="devsite-nav-item"> <a href="https://www.cloudskillsboost.google/paths" track-type="nav" track-metadata-eventdetail="https://www.cloudskillsboost.google/paths" track-metadata-position="nav - related-sites" track-metadata-module="tertiary nav" tooltip > <div class="devsite-nav-item-title"> Google Cloud Skills Boost </div> </a> </li> <li class="devsite-nav-item"> <a href="https://cloud.google.com/solutions" track-type="nav" track-metadata-eventdetail="https://cloud.google.com/solutions" track-metadata-position="nav - related-sites" track-metadata-module="tertiary nav" tooltip > <div class="devsite-nav-item-title"> Google Cloud Solution Center </div> </a> </li> <li class="devsite-nav-item"> <a href="https://cloud.google.com/support-hub" track-type="nav" track-metadata-eventdetail="https://cloud.google.com/support-hub" track-metadata-position="nav - related-sites" track-metadata-module="tertiary nav" tooltip > <div class="devsite-nav-item-title"> Google Cloud Support </div> </a> </li> <li class="devsite-nav-item"> <a href="https://www.youtube.com/@googlecloudtech" track-type="nav" track-metadata-eventdetail="https://www.youtube.com/@googlecloudtech" track-metadata-position="nav - related-sites" track-metadata-module="tertiary nav" tooltip > <div class="devsite-nav-item-title"> Google Cloud Tech Youtube Channel </div> </a> </li> </ul> </div> </div> </div> </tab> </nav> </cloudx-tabs-nav> </div> <devsite-search enable-signin enable-search enable-suggestions project-name="Cloud Logging" tenant-name="Google Cloud" project-scope="/logging/docs" url-scoped="https://cloud.google.com/s/results/logging/docs" > <form class="devsite-search-form" action="https://cloud.google.com/s/results" method="GET"> <div class="devsite-search-container"> <button type="button" search-open class="devsite-search-button devsite-header-icon-button button-flat material-icons" aria-label="Open search"></button> <div class="devsite-searchbox"> <input aria-activedescendant="" aria-autocomplete="list" aria-label="Search" aria-expanded="false" aria-haspopup="listbox" autocomplete="off" class="devsite-search-field devsite-search-query" name="q" placeholder="Search" role="combobox" type="text" value="" > <div class="devsite-search-image material-icons" aria-hidden="true"> </div> <div class="devsite-search-shortcut-icon-container" aria-hidden="true"> <kbd class="devsite-search-shortcut-icon">/</kbd> </div> </div> </div> </form> <button type="button" search-close class="devsite-search-button devsite-header-icon-button button-flat material-icons" aria-label="Close search"></button> </devsite-search> </div> <devsite-language-selector> <ul role="presentation"> <li role="presentation"> <a role="menuitem" lang="en" >English</a> </li> <li role="presentation"> <a role="menuitem" lang="de" >Deutsch</a> </li> <li role="presentation"> <a role="menuitem" lang="es_419" >Español – América Latina</a> </li> <li role="presentation"> <a role="menuitem" lang="fr" >Français</a> </li> <li role="presentation"> <a role="menuitem" lang="id" >Indonesia</a> </li> <li role="presentation"> <a role="menuitem" lang="it" >Italiano</a> </li> <li role="presentation"> <a role="menuitem" lang="pt_br" >Português – Brasil</a> </li> <li role="presentation"> <a role="menuitem" lang="zh_cn" >中文 – 简体</a> </li> <li role="presentation"> <a role="menuitem" lang="ja" >日本語</a> </li> <li role="presentation"> <a role="menuitem" lang="ko" >한국어</a> </li> </ul> </devsite-language-selector> <devsite-user enable-profiles fp-auth id="devsite-user"> <span class="button devsite-top-button" aria-hidden="true" visually-hidden>Sign in</span> </devsite-user> </div> </div> </div> <div class="devsite-collapsible-section "> <div class="devsite-header-background"> <div class="devsite-product-id-row" hidden> <div class="devsite-product-description-row"> </div> </div> <div class="devsite-doc-set-nav-row"> <ul class="devsite-breadcrumb-list" > <li class="devsite-breadcrumb-item "> <a href="https://cloud.google.com/stackdriver/docs" class="devsite-breadcrumb-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Lower Header" data-value="1" track-type="globalNav" track-name="breadcrumb" track-metadata-position="1" track-metadata-eventdetail="Google Cloud Observability" > Google Cloud Observability </a> </li> </ul> <cloudx-tabs-nav class="lower-tabs"> <nav class="devsite-tabs-wrapper" aria-label="Lower tabs"> <tab class="devsite-active"> <a href="https://cloud.google.com/logging/docs/overview" track-metadata-eventdetail="https://cloud.google.com/logging/docs/overview" class="devsite-tabs-content gc-analytics-event " track-type="nav" track-metadata-position="nav - guides" track-metadata-module="primary nav" aria-label="Guides, selected" data-category="Site-Wide Custom Events" data-label="Tab: Guides" track-name="guides" > Guides </a> </tab> <tab > <a href="https://cloud.google.com/logging/docs/apis" track-metadata-eventdetail="https://cloud.google.com/logging/docs/apis" class="devsite-tabs-content gc-analytics-event " track-type="nav" track-metadata-position="nav - reference" track-metadata-module="primary nav" data-category="Site-Wide Custom Events" data-label="Tab: Reference" track-name="reference" > Reference </a> </tab> <tab > <a href="https://cloud.google.com/logging/docs/samples" track-metadata-eventdetail="https://cloud.google.com/logging/docs/samples" class="devsite-tabs-content gc-analytics-event " track-type="nav" track-metadata-position="nav - samples" track-metadata-module="primary nav" data-category="Site-Wide Custom Events" data-label="Tab: Samples" track-name="samples" > Samples </a> </tab> <tab > <a href="https://cloud.google.com/logging/quotas" track-metadata-eventdetail="https://cloud.google.com/logging/quotas" class="devsite-tabs-content gc-analytics-event " track-type="nav" track-metadata-position="nav - resources" track-metadata-module="primary nav" data-category="Site-Wide Custom Events" data-label="Tab: Resources" track-name="resources" > Resources </a> </tab> </nav> </cloudx-tabs-nav> <div class="devsite-product-button-row"> <a href="https://cloud.google.com/contact" class="cta-button-secondary button " track-name="sales" track-type="contact" data-overflow-wrapper="tab" track-metadata-position="nav" track-metadata-eventDetail="nav" data-overflow-container="left" data-overflow="devsite-tabs-wrapper" >Contact Us</a> <a href="//console.cloud.google.com/freetrial" class="cloud-free-trial-button cta-button-primary button-primary button cloud-button cloud-button--primary " track-name="gcpCta" track-metadata-eventDetail="nav" data-overflow-class="devsite-header-link devsite-top-button button cloud-free-trial-button cloud-free-trial-enabled cloud-button cloud-button--primary" data-overflow-container="right" referrerpolicy="no-referrer-when-downgrade" data-overflow="devsite-top-logo-row" track-type="freeTrial" track-metadata-position="nav" >Start free</a> </div> </div> </div> </div> </div> </devsite-header> <devsite-book-nav scrollbars > <div class="devsite-book-nav-filter" > <span class="filter-list-icon material-icons" aria-hidden="true"></span> <input type="text" placeholder="Filter" aria-label="Type to filter" role="searchbox"> <span class="filter-clear-button hidden" data-title="Clear filter" aria-label="Clear filter" role="button" tabindex="0"></span> </div> <nav class="devsite-book-nav devsite-nav nocontent" aria-label="Side menu"> <div class="devsite-mobile-header"> <button type="button" id="devsite-close-nav" class="devsite-header-icon-button button-flat material-icons gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Close navigation" aria-label="Close navigation"> </button> <div class="devsite-product-name-wrapper"> <a href="/" class="devsite-site-logo-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Site logo" track-type="globalNav" track-name="googleCloud" track-metadata-position="nav" track-metadata-eventDetail="nav"> <picture> <img src="https://www.gstatic.com/devrel-devsite/prod/v870e399c64f7c43c99a3043db4b3a74327bb93d0914e84a0c3dba90bbfd67625/cloud/images/cloud-logo.svg" class="devsite-site-logo" alt="Google Cloud"> </picture> </a> <span class="devsite-product-name"> <ul class="devsite-breadcrumb-list" > <li class="devsite-breadcrumb-item devsite-has-google-wordmark"> </li> </ul> </span> </div> </div> <div class="devsite-book-nav-wrapper"> <div class="devsite-mobile-nav-top"> <ul class="devsite-nav-list"> <li class="devsite-nav-item"> <a href="/docs" class="devsite-nav-title gc-analytics-event devsite-nav-active" data-category="Site-Wide Custom Events" data-label="Tab: Documentation" track-name="docs-home" track-link-column-type="single-column" data-category="Site-Wide Custom Events" data-label="Responsive Tab: Documentation" track-type="globalNav" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Documentation </span> </a> <ul class="devsite-nav-responsive-tabs"> <li class="devsite-nav-item"> <a href="/logging/docs/overview" class="devsite-nav-title gc-analytics-event devsite-nav-has-children devsite-nav-active" data-category="Site-Wide Custom Events" data-label="Tab: Guides" track-name="guides" data-category="Site-Wide Custom Events" data-label="Responsive Tab: Guides" track-type="globalNav" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip menu="_book"> Guides </span> <span class="devsite-nav-icon material-icons" data-icon="forward" menu="_book"> </span> </a> </li> <li class="devsite-nav-item"> <a href="/logging/docs/apis" class="devsite-nav-title gc-analytics-event devsite-nav-has-children " data-category="Site-Wide Custom Events" data-label="Tab: Reference" track-name="reference" data-category="Site-Wide Custom Events" data-label="Responsive Tab: Reference" track-type="globalNav" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Reference </span> <span class="devsite-nav-icon material-icons" data-icon="forward" > </span> </a> </li> <li class="devsite-nav-item"> <a href="/logging/docs/samples" class="devsite-nav-title gc-analytics-event devsite-nav-has-children " data-category="Site-Wide Custom Events" data-label="Tab: Samples" track-name="samples" data-category="Site-Wide Custom Events" data-label="Responsive Tab: Samples" track-type="globalNav" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Samples </span> <span class="devsite-nav-icon material-icons" data-icon="forward" > </span> </a> </li> <li class="devsite-nav-item"> <a href="/logging/quotas" class="devsite-nav-title gc-analytics-event devsite-nav-has-children " data-category="Site-Wide Custom Events" data-label="Tab: Resources" track-name="resources" data-category="Site-Wide Custom Events" data-label="Responsive Tab: Resources" track-type="globalNav" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Resources </span> <span class="devsite-nav-icon material-icons" data-icon="forward" > </span> </a> </li> </ul> </li> <li class="devsite-nav-item"> <a href="/docs/tech-area-overviews" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Tab: Technology areas" track-name="technology-areas" track-link-column-type="single-column" data-category="Site-Wide Custom Events" data-label="Responsive Tab: Technology areas" track-type="globalNav" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Technology areas </span> </a> <ul class="devsite-nav-responsive-tabs devsite-nav-has-menu "> <li class="devsite-nav-item"> <span class="devsite-nav-title" tooltip data-category="Site-Wide Custom Events" data-label="Tab: Technology areas" track-name="technology-areas" track-link-column-type="single-column" > <span class="devsite-nav-text" tooltip menu="Technology areas"> More </span> <span class="devsite-nav-icon material-icons" data-icon="forward" menu="Technology areas"> </span> </span> </li> </ul> </li> <li class="devsite-nav-item"> <a href="/docs/cross-product-overviews" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Tab: Cross-product tools" track-name="crossproduct" track-link-column-type="single-column" data-category="Site-Wide Custom Events" data-label="Responsive Tab: Cross-product tools" track-type="globalNav" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Cross-product tools </span> </a> <ul class="devsite-nav-responsive-tabs devsite-nav-has-menu "> <li class="devsite-nav-item"> <span class="devsite-nav-title" tooltip data-category="Site-Wide Custom Events" data-label="Tab: Cross-product tools" track-name="crossproduct" track-link-column-type="single-column" > <span class="devsite-nav-text" tooltip menu="Cross-product tools"> More </span> <span class="devsite-nav-icon material-icons" data-icon="forward" menu="Cross-product tools"> </span> </span> </li> </ul> </li> <li class="devsite-nav-item"> <a href="/" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Tab: Related sites" track-name="related-sites" track-link-column-type="single-column" data-category="Site-Wide Custom Events" data-label="Responsive Tab: Related sites" track-type="globalNav" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Related sites </span> </a> <ul class="devsite-nav-responsive-tabs devsite-nav-has-menu "> <li class="devsite-nav-item"> <span class="devsite-nav-title" tooltip data-category="Site-Wide Custom Events" data-label="Tab: Related sites" track-name="related-sites" track-link-column-type="single-column" > <span class="devsite-nav-text" tooltip menu="Related sites"> More </span> <span class="devsite-nav-icon material-icons" data-icon="forward" menu="Related sites"> </span> </span> </li> </ul> </li> <li class="devsite-nav-item"> <a href="//console.cloud.google.com/" class="devsite-nav-title gc-analytics-event " track-metadata-eventDetail="nav" referrerpolicy="no-referrer-when-downgrade" track-metadata-position="nav" track-name="console" track-type="globalNav" data-category="Site-Wide Custom Events" data-label="Responsive Tab: Console" track-type="navMenu" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Console </span> </a> </li> <li class="devsite-nav-item"> <a href="/contact" class="cta-button-secondary button" track-name="sales" track-type="contact" data-overflow-wrapper="tab" track-metadata-position="nav" track-metadata-eventDetail="nav" data-overflow-container="left" data-overflow="devsite-tabs-wrapper" data-category="Site-Wide Custom Events" data-label="Responsive Tab: Contact Us" track-type="navMenu" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Contact Us </span> </a> </li> <li class="devsite-nav-item"> <a href="//console.cloud.google.com/freetrial" class="cloud-free-trial-button cta-button-primary button-primary button cloud-button cloud-button--primary" track-name="gcpCta" track-metadata-eventDetail="nav" data-overflow-class="devsite-header-link devsite-top-button button cloud-free-trial-button cloud-free-trial-enabled cloud-button cloud-button--primary" data-overflow-container="right" referrerpolicy="no-referrer-when-downgrade" data-overflow="devsite-top-logo-row" track-type="freeTrial" track-metadata-position="nav" data-category="Site-Wide Custom Events" data-label="Responsive Tab: Start free" track-type="navMenu" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Start free </span> </a> </li> </ul> </div> <div class="devsite-mobile-nav-bottom"> <ul class="devsite-nav-list" menu="_book"> <li class="devsite-nav-item devsite-nav-heading"><div class="devsite-nav-title devsite-nav-title-no-path"> <span class="devsite-nav-text" tooltip>Discover</span> </div></li> <li class="devsite-nav-item"><a href="/logging/docs/overview" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/overview" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/overview" ><span class="devsite-nav-text" tooltip>Cloud Logging overview</span></a></li> <li class="devsite-nav-item devsite-nav-heading"><div class="devsite-nav-title devsite-nav-title-no-path"> <span class="devsite-nav-text" tooltip>Get started</span> </div></li> <li class="devsite-nav-item"><a href="/logging/docs/logging-gce-quickstart" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/logging-gce-quickstart" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/logging-gce-quickstart" ><span class="devsite-nav-text" tooltip>Quickstart: Logging for Compute Engine VMs</span></a></li> <li class="devsite-nav-item"><a href="/logging/docs/write-query-log-entries-gcloud" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/write-query-log-entries-gcloud" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/write-query-log-entries-gcloud" ><span class="devsite-nav-text" tooltip>Quickstart: Write and query logs with the gcloud CLI</span></a></li> <li class="devsite-nav-item"><a href="/logging/docs/write-query-log-entries-python" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/write-query-log-entries-python" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/write-query-log-entries-python" ><span class="devsite-nav-text" tooltip>Quickstart: Write and query logs using a Python script</span></a></li> <li class="devsite-nav-item devsite-nav-heading"><div class="devsite-nav-title devsite-nav-title-no-path"> <span class="devsite-nav-text" tooltip>Collect and write logs</span> </div></li> <li class="devsite-nav-item"><a href="/logging/docs/agent-or-library" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/agent-or-library" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/agent-or-library" ><span class="devsite-nav-text" tooltip>Which should you use: agent or client library?</span></a></li> <li class="devsite-nav-item"><a href="/logging/docs/structured-logging" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/structured-logging" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/structured-logging" ><span class="devsite-nav-text" tooltip>Structured logging</span></a></li> <li class="devsite-nav-item devsite-nav-expandable"><div class="devsite-expandable-nav"> <a class="devsite-nav-toggle" aria-hidden="true"></a><div class="devsite-nav-title devsite-nav-title-no-path" tabindex="0" role="button"> <span class="devsite-nav-text" tooltip>Collect logs from VMs and third-party applications</span> </div><ul class="devsite-nav-section"><li class="devsite-nav-item"><a href="/logging/docs/agent" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/agent" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/agent" ><span class="devsite-nav-text" tooltip>Manage logging agents on VMs</span></a></li><li class="devsite-nav-item devsite-nav-expandable"><div class="devsite-expandable-nav"> <a class="devsite-nav-toggle" aria-hidden="true"></a><div class="devsite-nav-title devsite-nav-title-no-path" tabindex="0" role="button"> <span class="devsite-nav-text" tooltip>Ops Agent</span> </div><ul class="devsite-nav-section"><li class="devsite-nav-item"><a href="/logging/docs/agent/ops-agent" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/agent/ops-agent" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/agent/ops-agent" ><span class="devsite-nav-text" tooltip>Ops Agent overview</span></a></li><li class="devsite-nav-item devsite-nav-expandable"><div class="devsite-expandable-nav"> <a class="devsite-nav-toggle" aria-hidden="true"></a><div class="devsite-nav-title devsite-nav-title-no-path" tabindex="0" role="button"> <span class="devsite-nav-text" tooltip>Install the Ops Agent</span> </div><ul class="devsite-nav-section"><li class="devsite-nav-item"><a href="/logging/docs/agent/ops-agent/install-index" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/agent/ops-agent/install-index" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/agent/ops-agent/install-index" ><span class="devsite-nav-text" tooltip>All installation methods</span></a></li><li class="devsite-nav-item"><a href="/logging/docs/agent/ops-agent/install-agent-vm-creation" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/agent/ops-agent/install-agent-vm-creation" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/agent/ops-agent/install-agent-vm-creation" ><span class="devsite-nav-text" tooltip>Install the Ops Agent during VM creation</span></a></li><li class="devsite-nav-item devsite-nav-expandable"><div class="devsite-expandable-nav"> <a class="devsite-nav-toggle" aria-hidden="true"></a><div class="devsite-nav-title devsite-nav-title-no-path" tabindex="0" role="button"> <span class="devsite-nav-text" tooltip>Install the Ops Agent on a fleet of VMs using agent policies</span> </div><ul class="devsite-nav-section"><li class="devsite-nav-item"><a href="/logging/docs/agent/ops-agent/agent-policies-overview" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/agent/ops-agent/agent-policies-overview" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/agent/ops-agent/agent-policies-overview" ><span class="devsite-nav-text" tooltip>Overview</span></a></li><li class="devsite-nav-item"><a href="/logging/docs/agent/ops-agent/agent-policies" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/agent/ops-agent/agent-policies" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/agent/ops-agent/agent-policies" ><span class="devsite-nav-text" tooltip>Use agent policies (GA)</span></a></li><li class="devsite-nav-item devsite-nav-beta"><a href="/logging/docs/agent/ops-agent/managing-agent-policies" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/agent/ops-agent/managing-agent-policies" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/agent/ops-agent/managing-agent-policies" ><span class="devsite-nav-text" tooltip>Use agent policies (beta)</span><span class="devsite-nav-icon material-icons" data-icon="beta" data-title="Beta" aria-hidden="true"></span></a></li></ul></div></li><li class="devsite-nav-item"><a href="/logging/docs/agent/ops-agent/fleet-installation" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/agent/ops-agent/fleet-installation" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/agent/ops-agent/fleet-installation" ><span class="devsite-nav-text" tooltip>Install the Ops Agent on a fleet of VMs using automation tools</span></a></li><li class="devsite-nav-item"><a href="/logging/docs/agent/ops-agent/installation" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/agent/ops-agent/installation" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/agent/ops-agent/installation" ><span class="devsite-nav-text" tooltip>Install the Ops Agent on individual VMs</span></a></li></ul></div></li><li class="devsite-nav-item devsite-nav-expandable"><div class="devsite-expandable-nav"> <a class="devsite-nav-toggle" aria-hidden="true"></a><div class="devsite-nav-title devsite-nav-title-no-path" tabindex="0" role="button"> <span class="devsite-nav-text" tooltip>Manage the Ops Agent</span> </div><ul class="devsite-nav-section"><li class="devsite-nav-item"><a href="/logging/docs/agent/ops-agent/authorization" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/agent/ops-agent/authorization" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/agent/ops-agent/authorization" ><span class="devsite-nav-text" tooltip>Authorize the Ops Agent</span></a></li><li class="devsite-nav-item"><a href="/logging/docs/agent/ops-agent/configuration" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/agent/ops-agent/configuration" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/agent/ops-agent/configuration" ><span class="devsite-nav-text" tooltip>Configure the Ops Agent</span></a></li><li class="devsite-nav-item"><a href="/logging/docs/agent/ops-agent/rotate-logs" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/agent/ops-agent/rotate-logs" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/agent/ops-agent/rotate-logs" ><span class="devsite-nav-text" tooltip>Use log rotation for Ops Agent self logs</span></a></li><li class="devsite-nav-item"><a href="/logging/docs/agent/ops-agent/manage-policies-auto-install" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/agent/ops-agent/manage-policies-auto-install" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/agent/ops-agent/manage-policies-auto-install" ><span class="devsite-nav-text" tooltip>Manage VMs covered the Ops Agent OS policy</span></a></li></ul></div></li><li class="devsite-nav-item devsite-nav-expandable"><div class="devsite-expandable-nav"> <a class="devsite-nav-toggle" aria-hidden="true"></a><div class="devsite-nav-title devsite-nav-title-no-path" tabindex="0" role="button"> <span class="devsite-nav-text" tooltip>Collect logs from third-party applications</span> </div><ul class="devsite-nav-section"><li class="devsite-nav-item"><a href="/logging/docs/agent/ops-agent/third-party" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/agent/ops-agent/third-party" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/agent/ops-agent/third-party" ><span class="devsite-nav-text" tooltip>Overview</span></a></li><li class="devsite-nav-item"><a href="/logging/docs/agent/ops-agent/third-party/active_directory_ds" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/agent/ops-agent/third-party/active_directory_ds" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/agent/ops-agent/third-party/active_directory_ds" ><span class="devsite-nav-text" tooltip>Active Directory Domain Services (AD DS)</span></a></li><li class="devsite-nav-item"><a href="/logging/docs/agent/ops-agent/third-party/aerospike" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/agent/ops-agent/third-party/aerospike" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/agent/ops-agent/third-party/aerospike" ><span class="devsite-nav-text" tooltip>Aerospike</span></a></li><li class="devsite-nav-item"><a href="/logging/docs/agent/ops-agent/third-party/activemq" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/agent/ops-agent/third-party/activemq" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/agent/ops-agent/third-party/activemq" ><span class="devsite-nav-text" tooltip>Apache ActiveMQ</span></a></li><li class="devsite-nav-item"><a href="/logging/docs/agent/ops-agent/third-party/cassandra" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/agent/ops-agent/third-party/cassandra" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/agent/ops-agent/third-party/cassandra" ><span class="devsite-nav-text" tooltip>Apache Cassandra</span></a></li><li class="devsite-nav-item"><a href="/logging/docs/agent/ops-agent/third-party/couchdb" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/agent/ops-agent/third-party/couchdb" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/agent/ops-agent/third-party/couchdb" ><span class="devsite-nav-text" tooltip>Apache CouchDB</span></a></li><li class="devsite-nav-item"><a href="/logging/docs/agent/ops-agent/third-party/flink" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/agent/ops-agent/third-party/flink" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/agent/ops-agent/third-party/flink" ><span class="devsite-nav-text" tooltip>Apache Flink</span></a></li><li class="devsite-nav-item"><a href="/logging/docs/agent/ops-agent/third-party/hadoop" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/agent/ops-agent/third-party/hadoop" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/agent/ops-agent/third-party/hadoop" ><span class="devsite-nav-text" tooltip>Apache Hadoop</span></a></li><li class="devsite-nav-item"><a href="/logging/docs/agent/ops-agent/third-party/hbase" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/agent/ops-agent/third-party/hbase" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/agent/ops-agent/third-party/hbase" ><span class="devsite-nav-text" tooltip>Apache HBase</span></a></li><li class="devsite-nav-item"><a href="/logging/docs/agent/ops-agent/third-party/kafka" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/agent/ops-agent/third-party/kafka" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/agent/ops-agent/third-party/kafka" ><span class="devsite-nav-text" tooltip>Apache Kafka</span></a></li><li class="devsite-nav-item"><a href="/logging/docs/agent/ops-agent/third-party/solr" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/agent/ops-agent/third-party/solr" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/agent/ops-agent/third-party/solr" ><span class="devsite-nav-text" tooltip>Apache Solr</span></a></li><li class="devsite-nav-item"><a href="/logging/docs/agent/ops-agent/third-party/tomcat" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/agent/ops-agent/third-party/tomcat" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/agent/ops-agent/third-party/tomcat" ><span class="devsite-nav-text" tooltip>Apache Tomcat</span></a></li><li class="devsite-nav-item"><a href="/logging/docs/agent/ops-agent/third-party/apache" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/agent/ops-agent/third-party/apache" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/agent/ops-agent/third-party/apache" ><span class="devsite-nav-text" tooltip>Apache Web Server (httpd)</span></a></li><li class="devsite-nav-item"><a href="/logging/docs/agent/ops-agent/third-party/zookeeper" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/agent/ops-agent/third-party/zookeeper" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/agent/ops-agent/third-party/zookeeper" ><span class="devsite-nav-text" tooltip>Apache ZooKeeper</span></a></li><li class="devsite-nav-item"><a href="/logging/docs/agent/ops-agent/third-party/couchbase" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/agent/ops-agent/third-party/couchbase" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/agent/ops-agent/third-party/couchbase" ><span class="devsite-nav-text" tooltip>Couchbase</span></a></li><li class="devsite-nav-item"><a href="/logging/docs/agent/ops-agent/third-party/elasticsearch" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/agent/ops-agent/third-party/elasticsearch" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/agent/ops-agent/third-party/elasticsearch" ><span class="devsite-nav-text" tooltip>Elasticsearch</span></a></li><li class="devsite-nav-item"><a href="/logging/docs/agent/ops-agent/third-party/vault" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/agent/ops-agent/third-party/vault" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/agent/ops-agent/third-party/vault" ><span class="devsite-nav-text" tooltip>Hashicorp Vault</span></a></li><li class="devsite-nav-item"><a href="/logging/docs/agent/ops-agent/third-party/iis" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/agent/ops-agent/third-party/iis" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/agent/ops-agent/third-party/iis" ><span class="devsite-nav-text" tooltip>Internet Information Services</span></a></li><li class="devsite-nav-item"><a href="/logging/docs/agent/ops-agent/third-party/jetty" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/agent/ops-agent/third-party/jetty" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/agent/ops-agent/third-party/jetty" ><span class="devsite-nav-text" tooltip>Jetty</span></a></li><li class="devsite-nav-item"><a href="/logging/docs/agent/ops-agent/third-party/mariadb" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/agent/ops-agent/third-party/mariadb" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/agent/ops-agent/third-party/mariadb" ><span class="devsite-nav-text" tooltip>MariaDB</span></a></li><li class="devsite-nav-item"><a href="/logging/docs/agent/ops-agent/third-party/memcached" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/agent/ops-agent/third-party/memcached" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/agent/ops-agent/third-party/memcached" ><span class="devsite-nav-text" tooltip>Memcached</span></a></li><li class="devsite-nav-item"><a href="/logging/docs/agent/ops-agent/third-party/mongodb" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/agent/ops-agent/third-party/mongodb" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/agent/ops-agent/third-party/mongodb" ><span class="devsite-nav-text" tooltip>MongoDB</span></a></li><li class="devsite-nav-item"><a href="/logging/docs/agent/ops-agent/third-party/mysql" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/agent/ops-agent/third-party/mysql" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/agent/ops-agent/third-party/mysql" ><span class="devsite-nav-text" tooltip>MySQL</span></a></li><li class="devsite-nav-item"><a href="/logging/docs/agent/ops-agent/third-party/nginx" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/agent/ops-agent/third-party/nginx" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/agent/ops-agent/third-party/nginx" ><span class="devsite-nav-text" tooltip>nginx</span></a></li><li class="devsite-nav-item"><a href="/logging/docs/agent/ops-agent/third-party/oracledb" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/agent/ops-agent/third-party/oracledb" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/agent/ops-agent/third-party/oracledb" ><span class="devsite-nav-text" tooltip>Oracle Database</span></a></li><li class="devsite-nav-item"><a href="/logging/docs/agent/ops-agent/third-party/postgresql" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/agent/ops-agent/third-party/postgresql" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/agent/ops-agent/third-party/postgresql" ><span class="devsite-nav-text" tooltip>PostgreSQL</span></a></li><li class="devsite-nav-item"><a href="/logging/docs/agent/ops-agent/third-party/rabbitmq" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/agent/ops-agent/third-party/rabbitmq" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/agent/ops-agent/third-party/rabbitmq" ><span class="devsite-nav-text" tooltip>RabbitMQ</span></a></li><li class="devsite-nav-item"><a href="/logging/docs/agent/ops-agent/third-party/redis" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/agent/ops-agent/third-party/redis" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/agent/ops-agent/third-party/redis" ><span class="devsite-nav-text" tooltip>Redis</span></a></li><li class="devsite-nav-item"><a href="/logging/docs/agent/ops-agent/third-party/saphana" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/agent/ops-agent/third-party/saphana" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/agent/ops-agent/third-party/saphana" ><span class="devsite-nav-text" tooltip>SAP HANA</span></a></li><li class="devsite-nav-item"><a href="/logging/docs/agent/ops-agent/third-party/varnish" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/agent/ops-agent/third-party/varnish" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/agent/ops-agent/third-party/varnish" ><span class="devsite-nav-text" tooltip>Varnish HTTP Cache</span></a></li><li class="devsite-nav-item"><a href="/logging/docs/agent/ops-agent/third-party/wildfly" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/agent/ops-agent/third-party/wildfly" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/agent/ops-agent/third-party/wildfly" ><span class="devsite-nav-text" tooltip>WildFly</span></a></li></ul></div></li></ul></div></li><li class="devsite-nav-item devsite-nav-expandable"><div class="devsite-expandable-nav"> <a class="devsite-nav-toggle" aria-hidden="true"></a><div class="devsite-nav-title devsite-nav-title-no-path" tabindex="0" role="button"> <span class="devsite-nav-text" tooltip>Legacy Logging agent</span> </div><ul class="devsite-nav-section"><li class="devsite-nav-item"><a href="/logging/docs/agent/logging" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/agent/logging" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/agent/logging" ><span class="devsite-nav-text" tooltip>Logging agent overview</span></a></li><li class="devsite-nav-item devsite-nav-expandable"><div class="devsite-expandable-nav"> <a class="devsite-nav-toggle" aria-hidden="true"></a><div class="devsite-nav-title devsite-nav-title-no-path" tabindex="0" role="button"> <span class="devsite-nav-text" tooltip>Install the Logging agent</span> </div><ul class="devsite-nav-section"><li class="devsite-nav-item"><a href="/logging/docs/agent/logging/install-index" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/agent/logging/install-index" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/agent/logging/install-index" ><span class="devsite-nav-text" tooltip>All installation methods</span></a></li><li class="devsite-nav-item devsite-nav-beta"><a href="/logging/docs/agent/logging/managing-agent-policies" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/agent/logging/managing-agent-policies" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/agent/logging/managing-agent-policies" ><span class="devsite-nav-text" tooltip>Install the Logging agent on a fleet of VMs using agent policies</span><span class="devsite-nav-icon material-icons" data-icon="beta" data-title="Beta" aria-hidden="true"></span></a></li><li class="devsite-nav-item"><a href="/logging/docs/agent/logging/fleet-installation" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/agent/logging/fleet-installation" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/agent/logging/fleet-installation" ><span class="devsite-nav-text" tooltip>Install the Logging agent on a fleet of VMs using automation tools</span></a></li><li class="devsite-nav-item"><a href="/logging/docs/agent/logging/installation" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/agent/logging/installation" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/agent/logging/installation" ><span class="devsite-nav-text" tooltip>Install the Logging agent on individual VMs</span></a></li></ul></div></li><li class="devsite-nav-item devsite-nav-expandable"><div class="devsite-expandable-nav"> <a class="devsite-nav-toggle" aria-hidden="true"></a><div class="devsite-nav-title devsite-nav-title-no-path" tabindex="0" role="button"> <span class="devsite-nav-text" tooltip>Manage the Logging agent</span> </div><ul class="devsite-nav-section"><li class="devsite-nav-item"><a href="/logging/docs/agent/logging/authorization" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/agent/logging/authorization" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/agent/logging/authorization" ><span class="devsite-nav-text" tooltip>Authorize the Logging agent</span></a></li><li class="devsite-nav-item"><a href="/logging/docs/agent/logging/configuration" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/agent/logging/configuration" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/agent/logging/configuration" ><span class="devsite-nav-text" tooltip>Configure the Logging agent</span></a></li><li class="devsite-nav-item"><a href="/logging/docs/agent/default-logs" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/agent/default-logs" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/agent/default-logs" ><span class="devsite-nav-text" tooltip>Default agent logs</span></a></li></ul></div></li></ul></div></li></ul></div></li> <li class="devsite-nav-item"><a href="/logging/docs/bindplane/on-premise-hybrid-logging" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/bindplane/on-premise-hybrid-logging" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/bindplane/on-premise-hybrid-logging" ><span class="devsite-nav-text" tooltip>Collect on-premises and multi-cloud logs</span></a></li> <li class="devsite-nav-item"><a href="/logging/docs/integrate/gke" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/integrate/gke" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/integrate/gke" ><span class="devsite-nav-text" tooltip>Collect Kubernetes Engine logs</span></a></li> <li class="devsite-nav-item devsite-nav-expandable"><div class="devsite-expandable-nav"> <a class="devsite-nav-toggle" aria-hidden="true"></a><div class="devsite-nav-title devsite-nav-title-no-path" tabindex="0" role="button"> <span class="devsite-nav-text" tooltip>Write application logs</span> </div><ul class="devsite-nav-section"><li class="devsite-nav-item"><a href="/logging/docs/setup" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/setup" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/setup" ><span class="devsite-nav-text" tooltip>Logging libraries overview</span></a></li><li class="devsite-nav-item"><a href="/logging/docs/integrate/dotnet" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/integrate/dotnet" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/integrate/dotnet" ><span class="devsite-nav-text" tooltip>C#: Use .NET logging frameworks or the API</span></a></li><li class="devsite-nav-item"><a href="/logging/docs/setup/java" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/setup/java" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/setup/java" ><span class="devsite-nav-text" tooltip>Java: Use Logback or java.util.logging</span></a></li><li class="devsite-nav-item"><a href="/logging/docs/setup/go" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/setup/go" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/setup/go" ><span class="devsite-nav-text" tooltip>Go: Use standard logging</span></a></li><li class="devsite-nav-item"><a href="/logging/docs/setup/nodejs" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/setup/nodejs" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/setup/nodejs" ><span class="devsite-nav-text" tooltip>Node.js: Use Winston and Bunyan</span></a></li><li class="devsite-nav-item"><a href="/logging/docs/setup/php" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/setup/php" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/setup/php" ><span class="devsite-nav-text" tooltip>PHP: Use PSR-3 logger</span></a></li><li class="devsite-nav-item"><a href="/logging/docs/setup/python" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/setup/python" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/setup/python" ><span class="devsite-nav-text" tooltip>Python: Use standard logging</span></a></li><li class="devsite-nav-item"><a href="/logging/docs/setup/ruby" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/setup/ruby" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/setup/ruby" ><span class="devsite-nav-text" tooltip>Ruby: Use the Stackdriver gem</span></a></li></ul></div></li> <li class="devsite-nav-item devsite-nav-heading"><div class="devsite-nav-title devsite-nav-title-no-path"> <span class="devsite-nav-text" tooltip>Control access</span> </div></li> <li class="devsite-nav-item"><a href="/logging/docs/access-control" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/access-control" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/access-control" ><span class="devsite-nav-text" tooltip>Access control with IAM</span></a></li> <li class="devsite-nav-item"><a href="/logging/docs/logs-views" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/logs-views" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/logs-views" ><span class="devsite-nav-text" tooltip>Configure log views on a log bucket</span></a></li> <li class="devsite-nav-item"><a href="/logging/docs/field-level-acl" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/field-level-acl" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/field-level-acl" ><span class="devsite-nav-text" tooltip>Configure field-level access</span></a></li> <li class="devsite-nav-item"><a href="/logging/docs/routing/managed-encryption-storage" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/routing/managed-encryption-storage" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/routing/managed-encryption-storage" ><span class="devsite-nav-text" tooltip>Configure CMEK for log buckets</span></a></li> <li class="devsite-nav-item devsite-nav-expandable"><div class="devsite-expandable-nav"> <a class="devsite-nav-toggle" aria-hidden="true"></a><div class="devsite-nav-title devsite-nav-title-no-path" tabindex="0" role="button"> <span class="devsite-nav-text" tooltip>Configure default resource settings for Logging</span> </div><ul class="devsite-nav-section"><li class="devsite-nav-item"><a href="/logging/docs/default-settings" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/default-settings" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/default-settings" ><span class="devsite-nav-text" tooltip>Configure default resource settings</span></a></li><li class="devsite-nav-item"><a href="/logging/docs/routing/managed-encryption" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/routing/managed-encryption" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/routing/managed-encryption" ><span class="devsite-nav-text" tooltip>Configure CMEK for Logging</span></a></li></ul></div></li> <li class="devsite-nav-item"><a href="/logging/docs/regionalized-logs" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/regionalized-logs" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/regionalized-logs" ><span class="devsite-nav-text" tooltip>Regionalize your logs</span></a></li> <li class="devsite-nav-item devsite-nav-heading"><div class="devsite-nav-title devsite-nav-title-no-path"> <span class="devsite-nav-text" tooltip>Query, analyze, and view logs</span> </div></li> <li class="devsite-nav-item"><a href="/logging/docs/log-analytics" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/log-analytics" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/log-analytics" ><span class="devsite-nav-text" tooltip>Query and view logs overview</span></a></li> <li class="devsite-nav-item devsite-nav-expandable"><div class="devsite-expandable-nav"> <a class="devsite-nav-toggle" aria-hidden="true"></a><div class="devsite-nav-title devsite-nav-title-no-path" tabindex="0" role="button"> <span class="devsite-nav-text" tooltip>Logs Explorer: Query and view logs</span> </div><ul class="devsite-nav-section"><li class="devsite-nav-item"><a href="/logging/docs/log-scope/create-and-manage" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/log-scope/create-and-manage" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/log-scope/create-and-manage" ><span class="devsite-nav-text" tooltip>Configure a log scope</span></a></li><li class="devsite-nav-item"><a href="/logging/docs/view/logs-explorer-interface" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/view/logs-explorer-interface" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/view/logs-explorer-interface" ><span class="devsite-nav-text" tooltip>Logs Explorer overview</span></a></li><li class="devsite-nav-item"><a href="/logging/docs/view/building-queries" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/view/building-queries" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/view/building-queries" ><span class="devsite-nav-text" tooltip>Build queries using the Logging query language</span></a></li><li class="devsite-nav-item"><a href="/logging/docs/view/correlate-logs" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/view/correlate-logs" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/view/correlate-logs" ><span class="devsite-nav-text" tooltip>Correlate log entries</span></a></li><li class="devsite-nav-item"><a href="/logging/docs/analyze/find-logs-error-groups" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/analyze/find-logs-error-groups" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/analyze/find-logs-error-groups" ><span class="devsite-nav-text" tooltip>Find log entries with error groups</span></a></li><li class="devsite-nav-item"><a href="/logging/docs/view/logging-query-language" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/view/logging-query-language" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/view/logging-query-language" ><span class="devsite-nav-text" tooltip>Logging query language</span></a></li><li class="devsite-nav-item"><a href="/logging/docs/view/query-library" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/view/query-library" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/view/query-library" ><span class="devsite-nav-text" tooltip>Sample queries</span></a></li><li class="devsite-nav-item"><a href="/logging/docs/log4j2-vulnerability" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/log4j2-vulnerability" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/log4j2-vulnerability" ><span class="devsite-nav-text" tooltip>Example: Detect Log4Shell security exploits</span></a></li></ul></div></li> <li class="devsite-nav-item devsite-nav-expandable"><div class="devsite-expandable-nav"> <a class="devsite-nav-toggle" aria-hidden="true"></a><div class="devsite-nav-title devsite-nav-title-no-path" tabindex="0" role="button"> <span class="devsite-nav-text" tooltip>Log Analytics: Query and analyze logs</span> </div><ul class="devsite-nav-section"><li class="devsite-nav-item"><a href="/logging/docs/analyze/query-and-view" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/analyze/query-and-view" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/analyze/query-and-view" ><span class="devsite-nav-text" tooltip>Query and analyze logs in Log Analytics</span></a></li><li class="devsite-nav-item"><a href="/logging/docs/analyze/charts" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/analyze/charts" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/analyze/charts" ><span class="devsite-nav-text" tooltip>Chart SQL query results</span></a></li><li class="devsite-nav-item"><a href="/logging/docs/analyze/save-share-query" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/analyze/save-share-query" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/analyze/save-share-query" ><span class="devsite-nav-text" tooltip>Save and share SQL queries</span></a></li><li class="devsite-nav-item"><a href="/logging/docs/analyze/examples" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/analyze/examples" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/analyze/examples" ><span class="devsite-nav-text" tooltip>Sample SQL queries</span></a></li><li class="devsite-nav-item devsite-nav-preview"><a href="/logging/docs/analyze/log-volume" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/analyze/log-volume" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/analyze/log-volume" ><span class="devsite-nav-text" tooltip>Analyze log volume</span><span class="devsite-nav-icon material-icons" data-icon="preview" data-title="Preview" aria-hidden="true"></span></a></li><li class="devsite-nav-item"><a href="/logging/docs/analyze/analyze-audit-logs" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/analyze/analyze-audit-logs" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/analyze/analyze-audit-logs" ><span class="devsite-nav-text" tooltip>SQL queries for security insights</span></a></li><li class="devsite-nav-item devsite-nav-expandable"><div class="devsite-expandable-nav"> <a class="devsite-nav-toggle" aria-hidden="true"></a><div class="devsite-nav-title devsite-nav-title-no-path" tabindex="0" role="button"> <span class="devsite-nav-text" tooltip>Create alerts or use BigQuery</span> </div><ul class="devsite-nav-section"><li class="devsite-nav-item"><a href="/logging/docs/analyze/query-linked-dataset" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/analyze/query-linked-dataset" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/analyze/query-linked-dataset" ><span class="devsite-nav-text" tooltip>Query a linked BigQuery dataset</span></a></li><li class="devsite-nav-item devsite-nav-preview"><a href="/logging/docs/analyze/sql-in-alerting" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/analyze/sql-in-alerting" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/analyze/sql-in-alerting" ><span class="devsite-nav-text" tooltip>Monitor your SQL query results with an alerting policy</span><span class="devsite-nav-icon material-icons" data-icon="preview" data-title="Preview" aria-hidden="true"></span></a></li></ul></div></li><li class="devsite-nav-item"><a href="/logging/docs/analyze/troubleshoot" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/analyze/troubleshoot" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/analyze/troubleshoot" ><span class="devsite-nav-text" tooltip>Troubleshoot Log Analytics configuration</span></a></li></ul></div></li> <li class="devsite-nav-item devsite-nav-expandable"><div class="devsite-expandable-nav"> <a class="devsite-nav-toggle" aria-hidden="true"></a><div class="devsite-nav-title devsite-nav-title-no-path" tabindex="0" role="button"> <span class="devsite-nav-text" tooltip>View logs in supported destinations</span> </div><ul class="devsite-nav-section"><li class="devsite-nav-item"><a href="/logging/docs/export/using_exported_logs" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/export/using_exported_logs" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/export/using_exported_logs" ><span class="devsite-nav-text" tooltip>View logs routed to Logging buckets</span></a></li><li class="devsite-nav-item"><a href="/logging/docs/export/bigquery" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/export/bigquery" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/export/bigquery" ><span class="devsite-nav-text" tooltip>View logs routed to BigQuery</span></a></li><li class="devsite-nav-item"><a href="/logging/docs/export/storage" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/export/storage" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/export/storage" ><span class="devsite-nav-text" tooltip>View logs routed to Cloud Storage</span></a></li><li class="devsite-nav-item"><a href="/logging/docs/export/pubsub" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/export/pubsub" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/export/pubsub" ><span class="devsite-nav-text" tooltip>View logs routed to Pub/Sub</span></a></li></ul></div></li> <li class="devsite-nav-item devsite-nav-heading"><div class="devsite-nav-title devsite-nav-title-no-path"> <span class="devsite-nav-text" tooltip>Visualize, stream, and monitor logs</span> </div></li> <li class="devsite-nav-item"><a href="/logging/docs/view/dashboard" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/view/dashboard" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/view/dashboard" ><span class="devsite-nav-text" tooltip>Visualize log severity and error metrics</span></a></li> <li class="devsite-nav-item"><a href="/logging/docs/view/streaming-live-tailing" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/view/streaming-live-tailing" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/view/streaming-live-tailing" ><span class="devsite-nav-text" tooltip>Stream and tail log entries</span></a></li> <li class="devsite-nav-item devsite-nav-expandable"><div class="devsite-expandable-nav"> <a class="devsite-nav-toggle" aria-hidden="true"></a><div class="devsite-nav-title devsite-nav-title-no-path" tabindex="0" role="button"> <span class="devsite-nav-text" tooltip>Monitor your logs</span> </div><ul class="devsite-nav-section"><li class="devsite-nav-item"><a href="/logging/docs/alerting/monitoring-logs" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/alerting/monitoring-logs" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/alerting/monitoring-logs" ><span class="devsite-nav-text" tooltip>Monitor your logs overview</span></a></li><li class="devsite-nav-item devsite-nav-expandable"><div class="devsite-expandable-nav"> <a class="devsite-nav-toggle" aria-hidden="true"></a><div class="devsite-nav-title devsite-nav-title-no-path" tabindex="0" role="button"> <span class="devsite-nav-text" tooltip>Create metrics from logs</span> </div><ul class="devsite-nav-section"><li class="devsite-nav-item"><a href="/logging/docs/logs-based-metrics" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/logs-based-metrics" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/logs-based-metrics" ><span class="devsite-nav-text" tooltip>Log-based metrics overview</span></a></li><li class="devsite-nav-item"><a href="/logging/docs/logs-based-metrics/view_your_log_based_metrics" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/logs-based-metrics/view_your_log_based_metrics" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/logs-based-metrics/view_your_log_based_metrics" ><span class="devsite-nav-text" tooltip>List and chart log-based metrics</span></a></li><li class="devsite-nav-item"><a href="/logging/docs/logs-based-metrics/bucket-lbm" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/logs-based-metrics/bucket-lbm" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/logs-based-metrics/bucket-lbm" ><span class="devsite-nav-text" tooltip>Bucket-scoped log-based metrics</span></a></li><li class="devsite-nav-item"><a href="/logging/docs/logs-based-metrics/counter-metrics" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/logs-based-metrics/counter-metrics" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/logs-based-metrics/counter-metrics" ><span class="devsite-nav-text" tooltip>Configure counter metrics</span></a></li><li class="devsite-nav-item"><a href="/logging/docs/logs-based-metrics/distribution-metrics" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/logs-based-metrics/distribution-metrics" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/logs-based-metrics/distribution-metrics" ><span class="devsite-nav-text" tooltip>Configure distribution metrics</span></a></li><li class="devsite-nav-item"><a href="/logging/docs/logs-based-metrics/labels" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/logs-based-metrics/labels" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/logs-based-metrics/labels" ><span class="devsite-nav-text" tooltip>Configure labels on log-based metrics</span></a></li><li class="devsite-nav-item"><a href="/logging/docs/logs-based-metrics/charts-and-alerts" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/logs-based-metrics/charts-and-alerts" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/logs-based-metrics/charts-and-alerts" ><span class="devsite-nav-text" tooltip>Configure notifications for log-based metrics</span></a></li></ul></div></li><li class="devsite-nav-item devsite-nav-expandable"><div class="devsite-expandable-nav"> <a class="devsite-nav-toggle" aria-hidden="true"></a><div class="devsite-nav-title devsite-nav-title-no-path" tabindex="0" role="button"> <span class="devsite-nav-text" tooltip>Create alerting policies that monitor logs</span> </div><ul class="devsite-nav-section"><li class="devsite-nav-item"><a href="/logging/docs/alerting/log-based-alerts" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/alerting/log-based-alerts" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/alerting/log-based-alerts" ><span class="devsite-nav-text" tooltip>Configure log-based alerting policies</span></a></li><li class="devsite-nav-item"><a href="/logging/docs/alerting/log-based-incidents" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/alerting/log-based-incidents" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/alerting/log-based-incidents" ><span class="devsite-nav-text" tooltip>Manage incidents for log-based alerting policies</span></a></li><li class="devsite-nav-item devsite-nav-preview"><a href="/logging/docs/alerting/sql-based-incidents" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/alerting/sql-based-incidents" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/alerting/sql-based-incidents" ><span class="devsite-nav-text" tooltip>Manage incidents for SQL-based alerting policies</span><span class="devsite-nav-icon material-icons" data-icon="preview" data-title="Preview" aria-hidden="true"></span></a></li></ul></div></li></ul></div></li> <li class="devsite-nav-item devsite-nav-heading"><div class="devsite-nav-title devsite-nav-title-no-path"> <span class="devsite-nav-text" tooltip>Route and store logs</span> </div></li> <li class="devsite-nav-item"><a href="/logging/docs/routing/overview" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/routing/overview" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/routing/overview" ><span class="devsite-nav-text" tooltip>Routing and storage overview</span></a></li> <li class="devsite-nav-item"><a href="/logging/docs/buckets" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/buckets" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/buckets" ><span class="devsite-nav-text" tooltip>Configure log buckets</span></a></li> <li class="devsite-nav-item"><a href="/logging/docs/manage-log-buckets-with-tags" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/manage-log-buckets-with-tags" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/manage-log-buckets-with-tags" ><span class="devsite-nav-text" tooltip>Manage log buckets by using Tags</span></a></li> <li class="devsite-nav-item devsite-nav-expandable"><div class="devsite-expandable-nav"> <a class="devsite-nav-toggle" aria-hidden="true"></a><div class="devsite-nav-title devsite-nav-title-no-path" tabindex="0" role="button"> <span class="devsite-nav-text" tooltip>Configure log sinks</span> </div><ul class="devsite-nav-section"><li class="devsite-nav-item"><a href="/logging/docs/export/configure_export_v2" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/export/configure_export_v2" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/export/configure_export_v2" ><span class="devsite-nav-text" tooltip>Route logs to supported destinations</span></a></li><li class="devsite-nav-item"><a href="/logging/docs/routing/user-managed-service-accounts" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/routing/user-managed-service-accounts" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/routing/user-managed-service-accounts" ><span class="devsite-nav-text" tooltip>Configure log sinks with user-managed service accounts</span></a></li><li class="devsite-nav-item"><a href="/logging/docs/export/third_party" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/export/third_party" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/export/third_party" ><span class="devsite-nav-text" tooltip>Route logs to third-party destinations</span></a></li></ul></div></li> <li class="devsite-nav-item devsite-nav-expandable"><div class="devsite-expandable-nav"> <a class="devsite-nav-toggle" aria-hidden="true"></a><div class="devsite-nav-title devsite-nav-title-no-path" tabindex="0" role="button"> <span class="devsite-nav-text" tooltip>Configure sinks for folders and organizations</span> </div><ul class="devsite-nav-section"><li class="devsite-nav-item"><a href="/logging/docs/export/aggregated_sinks" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/export/aggregated_sinks" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/export/aggregated_sinks" ><span class="devsite-nav-text" tooltip>Collate and route organization-level logs to supported destinations</span></a></li><li class="devsite-nav-item"><a href="/logging/docs/central-log-storage" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/central-log-storage" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/central-log-storage" ><span class="devsite-nav-text" tooltip>Aggregate and store your organization's logs</span></a></li></ul></div></li> <li class="devsite-nav-item devsite-nav-expandable"><div class="devsite-expandable-nav"> <a class="devsite-nav-toggle" aria-hidden="true"></a><div class="devsite-nav-title devsite-nav-title-no-path" tabindex="0" role="button"> <span class="devsite-nav-text" tooltip>Set up advanced log storage</span> </div><ul class="devsite-nav-section"><li class="devsite-nav-item"><a href="/logging/docs/analyze/custom-index" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/analyze/custom-index" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/analyze/custom-index" ><span class="devsite-nav-text" tooltip>Configure custom indexing</span></a></li><li class="devsite-nav-item"><a href="/logging/docs/routing/copy-logs" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/routing/copy-logs" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/routing/copy-logs" ><span class="devsite-nav-text" tooltip>Batch and route logs retroactively</span></a></li></ul></div></li> <li class="devsite-nav-item devsite-nav-heading"><div class="devsite-nav-title devsite-nav-title-no-path"> <span class="devsite-nav-text" tooltip>Cloud Audit Logs</span> </div></li> <li class="devsite-nav-item"><a href="/logging/docs/audit" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/audit" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/audit" ><span class="devsite-nav-text" tooltip>Cloud Audit Logs overview</span></a></li> <li class="devsite-nav-item"><a href="/logging/docs/audit/services" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/audit/services" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/audit/services" ><span class="devsite-nav-text" tooltip>Services with audit logs</span></a></li> <li class="devsite-nav-item"><a href="/logging/docs/audit/configure-data-access" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/audit/configure-data-access" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/audit/configure-data-access" ><span class="devsite-nav-text" tooltip>Enable Data Access audit logs</span></a></li> <li class="devsite-nav-item devsite-nav-expandable"><div class="devsite-expandable-nav"> <a class="devsite-nav-toggle" aria-hidden="true"></a><div class="devsite-nav-title devsite-nav-title-no-path" tabindex="0" role="button"> <span class="devsite-nav-text" tooltip>Audit logs in depth</span> </div><ul class="devsite-nav-section"><li class="devsite-nav-item"><a href="/logging/docs/audit/understanding-audit-logs" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/audit/understanding-audit-logs" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/audit/understanding-audit-logs" ><span class="devsite-nav-text" tooltip>Understand audit logs</span></a></li><li class="devsite-nav-item"><a href="/logging/docs/audit/split-logs" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/audit/split-logs" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/audit/split-logs" ><span class="devsite-nav-text" tooltip>Split log entries</span></a></li><li class="devsite-nav-item"><a href="/logging/docs/audit/best-practices" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/audit/best-practices" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/audit/best-practices" ><span class="devsite-nav-text" tooltip>Best practices</span></a></li></ul></div></li> <li class="devsite-nav-item"><a href="/logging/docs/audit-logging" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/audit-logging" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/audit-logging" ><span class="devsite-nav-text" tooltip>Cloud Logging audit logs</span></a></li> <li class="devsite-nav-item devsite-nav-expandable"><div class="devsite-expandable-nav"> <a class="devsite-nav-toggle" aria-hidden="true"></a><div class="devsite-nav-title devsite-nav-title-no-path" tabindex="0" role="button"> <span class="devsite-nav-text" tooltip>Google Workspace audit logs</span> </div><ul class="devsite-nav-section"><li class="devsite-nav-item"><a href="/logging/docs/audit/gsuite-audit-logging" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/audit/gsuite-audit-logging" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/audit/gsuite-audit-logging" ><span class="devsite-nav-text" tooltip>Workspace audit logs overview</span></a></li><li class="devsite-nav-item"><a href="/logging/docs/audit/configure-gsuite-audit-logs" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/audit/configure-gsuite-audit-logs" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/audit/configure-gsuite-audit-logs" ><span class="devsite-nav-text" tooltip>View and manage Workspace audit logs</span></a></li><li class="devsite-nav-item"><a href="/logging/docs/audit/gsuite-login-samples" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/audit/gsuite-login-samples" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/audit/gsuite-login-samples" ><span class="devsite-nav-text" tooltip>Login Audit samples</span></a></li></ul></div></li> <li class="devsite-nav-item devsite-nav-expandable"><div class="devsite-expandable-nav"> <a class="devsite-nav-toggle" aria-hidden="true"></a><div class="devsite-nav-title devsite-nav-title-no-path" tabindex="0" role="button"> <span class="devsite-nav-text" tooltip>Audit logs datatypes</span> </div><ul class="devsite-nav-section"><li class="devsite-nav-item devsite-nav-expandable"><div class="devsite-expandable-nav"> <a class="devsite-nav-toggle" aria-hidden="true"></a><div class="devsite-nav-title devsite-nav-title-no-path" tabindex="0" role="button"> <span class="devsite-nav-text" tooltip>AuditLog</span> </div><ul class="devsite-nav-section"><li class="devsite-nav-item devsite-nav-heading"><div class="devsite-nav-title devsite-nav-title-no-path"> <span class="devsite-nav-text" tooltip>Types</span> </div></li><li class="devsite-nav-item"><a href="/logging/docs/reference/audit/auditlog/rest/Shared.Types/AuditLog" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/reference/audit/auditlog/rest/Shared.Types/AuditLog" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/reference/audit/auditlog/rest/Shared.Types/AuditLog" ><span class="devsite-nav-text" tooltip>AuditLog</span></a></li><li class="devsite-nav-item"><a href="/logging/docs/reference/audit/auditlog/rest/Shared.Types/PolicyType" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/reference/audit/auditlog/rest/Shared.Types/PolicyType" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/reference/audit/auditlog/rest/Shared.Types/PolicyType" ><span class="devsite-nav-text" tooltip>PolicyType</span></a></li></ul></div></li><li class="devsite-nav-item devsite-nav-expandable"><div class="devsite-expandable-nav"> <a class="devsite-nav-toggle" aria-hidden="true"></a><div class="devsite-nav-title devsite-nav-title-no-path" tabindex="0" role="button"> <span class="devsite-nav-text" tooltip>App Engine AuditData</span> </div><ul class="devsite-nav-section"><li class="devsite-nav-item devsite-nav-heading"><div class="devsite-nav-title devsite-nav-title-no-path"> <span class="devsite-nav-text" tooltip>Types</span> </div></li><li class="devsite-nav-item"><a href="/logging/docs/reference/audit/appengine/rest/Shared.Types/ApiConfigHandler" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/reference/audit/appengine/rest/Shared.Types/ApiConfigHandler" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/reference/audit/appengine/rest/Shared.Types/ApiConfigHandler" ><span class="devsite-nav-text" tooltip>ApiConfigHandler</span></a></li><li class="devsite-nav-item"><a href="/logging/docs/reference/audit/appengine/rest/Shared.Types/ApiEndpointHandler" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/reference/audit/appengine/rest/Shared.Types/ApiEndpointHandler" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/reference/audit/appengine/rest/Shared.Types/ApiEndpointHandler" ><span class="devsite-nav-text" tooltip>ApiEndpointHandler</span></a></li><li class="devsite-nav-item"><a href="/logging/docs/reference/audit/appengine/rest/Shared.Types/AuditData" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/reference/audit/appengine/rest/Shared.Types/AuditData" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/reference/audit/appengine/rest/Shared.Types/AuditData" ><span class="devsite-nav-text" tooltip>AuditData</span></a></li><li class="devsite-nav-item"><a href="/logging/docs/reference/audit/appengine/rest/Shared.Types/AuthFailAction" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/reference/audit/appengine/rest/Shared.Types/AuthFailAction" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/reference/audit/appengine/rest/Shared.Types/AuthFailAction" ><span class="devsite-nav-text" tooltip>AuthFailAction</span></a></li><li class="devsite-nav-item"><a href="/logging/docs/reference/audit/appengine/rest/Shared.Types/ErrorCode" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/reference/audit/appengine/rest/Shared.Types/ErrorCode" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/reference/audit/appengine/rest/Shared.Types/ErrorCode" ><span class="devsite-nav-text" tooltip>ErrorCode</span></a></li><li class="devsite-nav-item"><a href="/logging/docs/reference/audit/appengine/rest/Shared.Types/FileInfo" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/reference/audit/appengine/rest/Shared.Types/FileInfo" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/reference/audit/appengine/rest/Shared.Types/FileInfo" ><span class="devsite-nav-text" tooltip>FileInfo</span></a></li><li class="devsite-nav-item"><a href="/logging/docs/reference/audit/appengine/rest/Shared.Types/InboundServiceType" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/reference/audit/appengine/rest/Shared.Types/InboundServiceType" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/reference/audit/appengine/rest/Shared.Types/InboundServiceType" ><span class="devsite-nav-text" tooltip>InboundServiceType</span></a></li><li class="devsite-nav-item"><a href="/logging/docs/reference/audit/appengine/rest/Shared.Types/LoginRequirement" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/reference/audit/appengine/rest/Shared.Types/LoginRequirement" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/reference/audit/appengine/rest/Shared.Types/LoginRequirement" ><span class="devsite-nav-text" tooltip>LoginRequirement</span></a></li><li class="devsite-nav-item"><a href="/logging/docs/reference/audit/appengine/rest/Shared.Types/RedirectHttpResponseCode" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/reference/audit/appengine/rest/Shared.Types/RedirectHttpResponseCode" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/reference/audit/appengine/rest/Shared.Types/RedirectHttpResponseCode" ><span class="devsite-nav-text" tooltip>RedirectHttpResponseCode</span></a></li><li class="devsite-nav-item"><a href="/logging/docs/reference/audit/appengine/rest/Shared.Types/RolloutStrategy" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/reference/audit/appengine/rest/Shared.Types/RolloutStrategy" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/reference/audit/appengine/rest/Shared.Types/RolloutStrategy" ><span class="devsite-nav-text" tooltip>RolloutStrategy</span></a></li><li class="devsite-nav-item"><a href="/logging/docs/reference/audit/appengine/rest/Shared.Types/SecurityLevel" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/reference/audit/appengine/rest/Shared.Types/SecurityLevel" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/reference/audit/appengine/rest/Shared.Types/SecurityLevel" ><span class="devsite-nav-text" tooltip>SecurityLevel</span></a></li><li class="devsite-nav-item"><a href="/logging/docs/reference/audit/appengine/rest/Shared.Types/ServingStatus" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/reference/audit/appengine/rest/Shared.Types/ServingStatus" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/reference/audit/appengine/rest/Shared.Types/ServingStatus" ><span class="devsite-nav-text" tooltip>ServingStatus</span></a></li><li class="devsite-nav-item"><a href="/logging/docs/reference/audit/appengine/rest/Shared.Types/ShardBy" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/reference/audit/appengine/rest/Shared.Types/ShardBy" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/reference/audit/appengine/rest/Shared.Types/ShardBy" ><span class="devsite-nav-text" tooltip>ShardBy</span></a></li></ul></div></li><li class="devsite-nav-item devsite-nav-expandable"><div class="devsite-expandable-nav"> <a class="devsite-nav-toggle" aria-hidden="true"></a><div class="devsite-nav-title devsite-nav-title-no-path" tabindex="0" role="button"> <span class="devsite-nav-text" tooltip>App Engine AuditData (legacy)</span> </div><ul class="devsite-nav-section"><li class="devsite-nav-item devsite-nav-heading"><div class="devsite-nav-title devsite-nav-title-no-path"> <span class="devsite-nav-text" tooltip>Types</span> </div></li><li class="devsite-nav-item"><a href="/logging/docs/reference/audit/ae_legacy/rest/Shared.Types/AuditData" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/reference/audit/ae_legacy/rest/Shared.Types/AuditData" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/reference/audit/ae_legacy/rest/Shared.Types/AuditData" ><span class="devsite-nav-text" tooltip>AuditData</span></a></li></ul></div></li><li class="devsite-nav-item devsite-nav-expandable"><div class="devsite-expandable-nav"> <a class="devsite-nav-toggle" aria-hidden="true"></a><div class="devsite-nav-title devsite-nav-title-no-path" tabindex="0" role="button"> <span class="devsite-nav-text" tooltip>BigQuery AuditData</span> </div><ul class="devsite-nav-section"><li class="devsite-nav-item devsite-nav-heading"><div class="devsite-nav-title devsite-nav-title-no-path"> <span class="devsite-nav-text" tooltip>Types</span> </div></li><li class="devsite-nav-item"><a href="/logging/docs/reference/audit/bigquery/rest/Shared.Types/AuditData" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/reference/audit/bigquery/rest/Shared.Types/AuditData" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/reference/audit/bigquery/rest/Shared.Types/AuditData" ><span class="devsite-nav-text" tooltip>AuditData</span></a></li><li class="devsite-nav-item"><a href="/logging/docs/reference/audit/bigquery/rest/Shared.Types/LogType" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/reference/audit/bigquery/rest/Shared.Types/LogType" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/reference/audit/bigquery/rest/Shared.Types/LogType" ><span class="devsite-nav-text" tooltip>LogType</span></a></li></ul></div></li><li class="devsite-nav-item devsite-nav-expandable"><div class="devsite-expandable-nav"> <a class="devsite-nav-toggle" aria-hidden="true"></a><div class="devsite-nav-title devsite-nav-title-no-path" tabindex="0" role="button"> <span class="devsite-nav-text" tooltip>IAM AuditData</span> </div><ul class="devsite-nav-section"><li class="devsite-nav-item devsite-nav-heading"><div class="devsite-nav-title devsite-nav-title-no-path"> <span class="devsite-nav-text" tooltip>Types</span> </div></li><li class="devsite-nav-item"><a href="/logging/docs/reference/audit/iam/rest/Shared.Types/AuditData" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/reference/audit/iam/rest/Shared.Types/AuditData" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/reference/audit/iam/rest/Shared.Types/AuditData" ><span class="devsite-nav-text" tooltip>AuditData</span></a></li></ul></div></li></ul></div></li> <li class="devsite-nav-item devsite-nav-heading"><div class="devsite-nav-title devsite-nav-title-no-path"> <span class="devsite-nav-text" tooltip>Troubleshoot</span> </div></li> <li class="devsite-nav-item devsite-nav-expandable"><div class="devsite-expandable-nav"> <a class="devsite-nav-toggle" aria-hidden="true"></a><div class="devsite-nav-title devsite-nav-title-no-path" tabindex="0" role="button"> <span class="devsite-nav-text" tooltip>Troubleshoot collecting and writing logs</span> </div><ul class="devsite-nav-section"><li class="devsite-nav-item devsite-nav-expandable"><div class="devsite-expandable-nav"> <a class="devsite-nav-toggle" aria-hidden="true"></a><div class="devsite-nav-title devsite-nav-title-no-path" tabindex="0" role="button"> <span class="devsite-nav-text" tooltip>Troubleshoot the Ops Agent</span> </div><ul class="devsite-nav-section"><li class="devsite-nav-item"><a href="/logging/docs/agent/ops-agent/troubleshooting" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/agent/ops-agent/troubleshooting" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/agent/ops-agent/troubleshooting" ><span class="devsite-nav-text" tooltip>Overview</span></a></li><li class="devsite-nav-item"><a href="/logging/docs/agent/ops-agent/troubleshoot-find-info" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/agent/ops-agent/troubleshoot-find-info" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/agent/ops-agent/troubleshoot-find-info" ><span class="devsite-nav-text" tooltip>Find troubleshooting information</span></a></li><li class="devsite-nav-item"><a href="/logging/docs/agent/ops-agent/troubleshoot-credentials" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/agent/ops-agent/troubleshoot-credentials" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/agent/ops-agent/troubleshoot-credentials" ><span class="devsite-nav-text" tooltip>Troubleshoot credentials</span></a></li><li class="devsite-nav-item"><a href="/logging/docs/agent/ops-agent/troubleshoot-install-startup" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/agent/ops-agent/troubleshoot-install-startup" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/agent/ops-agent/troubleshoot-install-startup" ><span class="devsite-nav-text" tooltip>Troubleshoot installation and start-up</span></a></li><li class="devsite-nav-item"><a href="/logging/docs/agent/ops-agent/troubleshoot-run-ingest" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/agent/ops-agent/troubleshoot-run-ingest" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/agent/ops-agent/troubleshoot-run-ingest" ><span class="devsite-nav-text" tooltip>Troubleshoot data ingestion</span></a></li></ul></div></li><li class="devsite-nav-item"><a href="/logging/docs/agent/logging/troubleshooting" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/agent/logging/troubleshooting" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/agent/logging/troubleshooting" ><span class="devsite-nav-text" tooltip>Troubleshoot the Logging agent</span></a></li></ul></div></li> <li class="devsite-nav-item"><a href="/logging/docs/export/troubleshoot" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/export/troubleshoot" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/export/troubleshoot" ><span class="devsite-nav-text" tooltip>Troubleshoot routing and storage</span></a></li> <li class="devsite-nav-item"><a href="/logging/docs/routing/troubleshoot-cmek-orgs" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/routing/troubleshoot-cmek-orgs" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/routing/troubleshoot-cmek-orgs" ><span class="devsite-nav-text" tooltip>Troubleshoot CMEK and default settings</span></a></li> <li class="devsite-nav-item devsite-nav-expandable"><div class="devsite-expandable-nav"> <a class="devsite-nav-toggle" aria-hidden="true"></a><div class="devsite-nav-title devsite-nav-title-no-path" tabindex="0" role="button"> <span class="devsite-nav-text" tooltip>Troubleshoot monitoring logs</span> </div><ul class="devsite-nav-section"><li class="devsite-nav-item"><a href="/logging/docs/alerting/troubleshooting" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/alerting/troubleshooting" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/alerting/troubleshooting" ><span class="devsite-nav-text" tooltip>Troubleshoot log-based alerting policies</span></a></li><li class="devsite-nav-item"><a href="/logging/docs/logs-based-metrics/troubleshooting" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/logs-based-metrics/troubleshooting" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/logs-based-metrics/troubleshooting" ><span class="devsite-nav-text" tooltip>Troubleshoot log-based metrics</span></a></li></ul></div></li> <li class="devsite-nav-item devsite-nav-expandable"><div class="devsite-expandable-nav"> <a class="devsite-nav-toggle" aria-hidden="true"></a><div class="devsite-nav-title devsite-nav-title-no-path" tabindex="0" role="button"> <span class="devsite-nav-text" tooltip>Troubleshoot querying and viewing logs</span> </div><ul class="devsite-nav-section"><li class="devsite-nav-item"><a href="/logging/docs/view/troubleshoot" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/view/troubleshoot" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/view/troubleshoot" ><span class="devsite-nav-text" tooltip>Troubleshoot Logs Explorer</span></a></li><li class="devsite-nav-item"><a href="/logging/docs/view/troubleshoot-lql" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/view/troubleshoot-lql" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/view/troubleshoot-lql" ><span class="devsite-nav-text" tooltip>Troubleshoot Logging query language</span></a></li><li class="devsite-nav-item"><a href="/logging/docs/analyze/troubleshoot" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/analyze/troubleshoot" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/analyze/troubleshoot" ><span class="devsite-nav-text" tooltip>Troubleshoot Log Analytics</span></a></li></ul></div></li> <li class="devsite-nav-item"><a href="/logging/docs/audit/troubleshooting-faq-gsuite" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/audit/troubleshooting-faq-gsuite" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/audit/troubleshooting-faq-gsuite" ><span class="devsite-nav-text" tooltip>Troubleshoot Workspace audit logs</span></a></li> <li class="devsite-nav-item devsite-nav-heading"><div class="devsite-nav-title devsite-nav-title-no-path"> <span class="devsite-nav-text" tooltip>Other Google Cloud Observability documentation</span> </div></li> <li class="devsite-nav-item"><a href="/stackdriver/docs" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /stackdriver/docs" track-type="bookNav" track-name="click" track-metadata-eventdetail="/stackdriver/docs" ><span class="devsite-nav-text" tooltip>Google Cloud Observability</span></a></li> <li class="devsite-nav-item"><a href="/monitoring/docs" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /monitoring/docs" track-type="bookNav" track-name="click" track-metadata-eventdetail="/monitoring/docs" ><span class="devsite-nav-text" tooltip>Cloud Monitoring</span></a></li> <li class="devsite-nav-item"><a href="/error-reporting/docs" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /error-reporting/docs" track-type="bookNav" track-name="click" track-metadata-eventdetail="/error-reporting/docs" ><span class="devsite-nav-text" tooltip>Error Reporting</span></a></li> <li class="devsite-nav-item"><a href="/trace/docs" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /trace/docs" track-type="bookNav" track-name="click" track-metadata-eventdetail="/trace/docs" ><span class="devsite-nav-text" tooltip>Cloud Trace</span></a></li> <li class="devsite-nav-item"><a href="/profiler/docs" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /profiler/docs" track-type="bookNav" track-name="click" track-metadata-eventdetail="/profiler/docs" ><span class="devsite-nav-text" tooltip>Cloud Profiler</span></a></li> </ul> <ul class="devsite-nav-list" menu="Technology areas" aria-label="Side menu" hidden> <li class="devsite-nav-item"> <a href="/docs/ai-ml" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Responsive Tab: AI and ML" track-type="navMenu" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > AI and ML </span> </a> </li> <li class="devsite-nav-item"> <a href="/docs/application-development" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Responsive Tab: Application development" track-type="navMenu" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Application development </span> </a> </li> <li class="devsite-nav-item"> <a href="/docs/application-hosting" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Responsive Tab: Application hosting" track-type="navMenu" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Application hosting </span> </a> </li> <li class="devsite-nav-item"> <a href="/docs/compute-area" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Responsive Tab: Compute" track-type="navMenu" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Compute </span> </a> </li> <li class="devsite-nav-item"> <a href="/docs/data" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Responsive Tab: Data analytics and pipelines" track-type="navMenu" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Data analytics and pipelines </span> </a> </li> <li class="devsite-nav-item"> <a href="/docs/databases" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Responsive Tab: Databases" track-type="navMenu" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Databases </span> </a> </li> <li class="devsite-nav-item"> <a href="/docs/dhm-cloud" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Responsive Tab: Distributed, hybrid, and multicloud" track-type="navMenu" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Distributed, hybrid, and multicloud </span> </a> </li> <li class="devsite-nav-item"> <a href="/docs/generative-ai" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Responsive Tab: Generative AI" track-type="navMenu" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Generative AI </span> </a> </li> <li class="devsite-nav-item"> <a href="/docs/industry" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Responsive Tab: Industry solutions" track-type="navMenu" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Industry solutions </span> </a> </li> <li class="devsite-nav-item"> <a href="/docs/networking" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Responsive Tab: Networking" track-type="navMenu" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Networking </span> </a> </li> <li class="devsite-nav-item"> <a href="/docs/observability" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Responsive Tab: Observability and monitoring" track-type="navMenu" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Observability and monitoring </span> </a> </li> <li class="devsite-nav-item"> <a href="/docs/security" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Responsive Tab: Security" track-type="navMenu" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Security </span> </a> </li> <li class="devsite-nav-item"> <a href="/docs/storage" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Responsive Tab: Storage" track-type="navMenu" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Storage </span> </a> </li> </ul> <ul class="devsite-nav-list" menu="Cross-product tools" aria-label="Side menu" hidden> <li class="devsite-nav-item"> <a href="/docs/access-resources" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Responsive Tab: Access and resources management" track-type="navMenu" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Access and resources management </span> </a> </li> <li class="devsite-nav-item"> <a href="/docs/costs-usage" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Responsive Tab: Costs and usage management" track-type="navMenu" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Costs and usage management </span> </a> </li> <li class="devsite-nav-item"> <a href="/docs/devtools" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Responsive Tab: Google Cloud SDK, languages, frameworks, and tools" track-type="navMenu" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Google Cloud SDK, languages, frameworks, and tools </span> </a> </li> <li class="devsite-nav-item"> <a href="/docs/iac" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Responsive Tab: Infrastructure as code" track-type="navMenu" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Infrastructure as code </span> </a> </li> <li class="devsite-nav-item"> <a href="/docs/migration" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Responsive Tab: Migration" track-type="navMenu" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Migration </span> </a> </li> </ul> <ul class="devsite-nav-list" menu="Related sites" aria-label="Side menu" hidden> <li class="devsite-nav-item"> <a href="/" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Responsive Tab: Google Cloud Home" track-type="navMenu" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Google Cloud Home </span> </a> </li> <li class="devsite-nav-item"> <a href="/free" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Responsive Tab: Free Trial and Free Tier" track-type="navMenu" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Free Trial and Free Tier </span> </a> </li> <li class="devsite-nav-item"> <a href="/architecture" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Responsive Tab: Architecture Center" track-type="navMenu" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Architecture Center </span> </a> </li> <li class="devsite-nav-item"> <a href="https://cloud.google.com/blog" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Responsive Tab: Blog" track-type="navMenu" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Blog </span> </a> </li> <li class="devsite-nav-item"> <a href="/contact" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Responsive Tab: Contact Sales" track-type="navMenu" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Contact Sales </span> </a> </li> <li class="devsite-nav-item"> <a href="/developers" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Responsive Tab: Google Cloud Developer Center" track-type="navMenu" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Google Cloud Developer Center </span> </a> </li> <li class="devsite-nav-item"> <a href="https://developers.google.com/" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Responsive Tab: Google Developer Center" track-type="navMenu" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Google Developer Center </span> </a> </li> <li class="devsite-nav-item"> <a href="https://console.cloud.google.com/marketplace" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Responsive Tab: Google Cloud Marketplace" track-type="navMenu" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Google Cloud Marketplace </span> </a> </li> <li class="devsite-nav-item"> <a href="/marketplace/docs" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Responsive Tab: Google Cloud Marketplace Documentation" track-type="navMenu" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Google Cloud Marketplace Documentation </span> </a> </li> <li class="devsite-nav-item"> <a href="https://www.cloudskillsboost.google/paths" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Responsive Tab: Google Cloud Skills Boost" track-type="navMenu" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Google Cloud Skills Boost </span> </a> </li> <li class="devsite-nav-item"> <a href="/solutions" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Responsive Tab: Google Cloud Solution Center" track-type="navMenu" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Google Cloud Solution Center </span> </a> </li> <li class="devsite-nav-item"> <a href="/support-hub" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Responsive Tab: Google Cloud Support" track-type="navMenu" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Google Cloud Support </span> </a> </li> <li class="devsite-nav-item"> <a href="https://www.youtube.com/@googlecloudtech" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Responsive Tab: Google Cloud Tech Youtube Channel" track-type="navMenu" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Google Cloud Tech Youtube Channel </span> </a> </li> </ul> </div> </div> </nav> </devsite-book-nav> <section id="gc-wrapper"> <main role="main" class="devsite-main-content" has-book-nav has-sidebar > <div class="devsite-sidebar"> <div class="devsite-sidebar-content"> <devsite-toc class="devsite-nav" role="navigation" aria-label="On this page" depth="2" scrollbars ></devsite-toc> <devsite-recommendations-sidebar class="nocontent devsite-nav"> </devsite-recommendations-sidebar> </div> </div> <devsite-content> <article class="devsite-article"> <div class="devsite-article-meta nocontent" role="navigation"> <ul class="devsite-breadcrumb-list" aria-label="Breadcrumb"> <li class="devsite-breadcrumb-item "> <a href="https://cloud.google.com/" class="devsite-breadcrumb-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Breadcrumbs" data-value="1" track-type="globalNav" track-name="breadcrumb" track-metadata-position="1" track-metadata-eventdetail="Google Cloud" > Home </a> </li> <li class="devsite-breadcrumb-item "> <div class="devsite-breadcrumb-guillemet material-icons" aria-hidden="true"></div> <a href="https://cloud.google.com/stackdriver/docs" class="devsite-breadcrumb-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Breadcrumbs" data-value="2" track-type="globalNav" track-name="breadcrumb" track-metadata-position="2" track-metadata-eventdetail="Google Cloud Observability" > Google Cloud Observability </a> </li> <li class="devsite-breadcrumb-item "> <div class="devsite-breadcrumb-guillemet material-icons" aria-hidden="true"></div> <a href="https://cloud.google.com/logging/docs" class="devsite-breadcrumb-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Breadcrumbs" data-value="3" track-type="globalNav" track-name="breadcrumb" track-metadata-position="3" track-metadata-eventdetail="Cloud Logging" > Logging </a> </li> <li class="devsite-breadcrumb-item "> <div class="devsite-breadcrumb-guillemet material-icons" aria-hidden="true"></div> <a href="https://cloud.google.com/logging/docs" class="devsite-breadcrumb-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Breadcrumbs" data-value="4" track-type="globalNav" track-name="breadcrumb" track-metadata-position="4" track-metadata-eventdetail="Cloud Logging" > Documentation </a> </li> <li class="devsite-breadcrumb-item "> <div class="devsite-breadcrumb-guillemet material-icons" aria-hidden="true"></div> <a href="https://cloud.google.com/logging/docs/overview" class="devsite-breadcrumb-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Breadcrumbs" data-value="5" track-type="globalNav" track-name="breadcrumb" track-metadata-position="5" track-metadata-eventdetail="" > Guides </a> </li> </ul> <devsite-thumb-rating position="header"> </devsite-thumb-rating> </div> <devsite-feedback position="header" project-name="Cloud Logging" product-id="714033" bucket="Documentation" context="Logging docs feedback link" version="t-devsite-webserver-20241114-r00-rc02.464922260396498922" data-label="Send Feedback Button" track-type="feedback" track-name="sendFeedbackLink" track-metadata-position="header" class="nocontent" project-icon="https://www.gstatic.com/devrel-devsite/prod/v870e399c64f7c43c99a3043db4b3a74327bb93d0914e84a0c3dba90bbfd67625/cloud/images/favicons/onecloud/super_cloud.png" > <button> Send feedback </button> </devsite-feedback> <h1 class="devsite-page-title" tabindex="-1"> Configure CMEK for Cloud Logging </h1> <devsite-feature-tooltip ack-key="AckCollectionsBookmarkTooltipDismiss" analytics-category="Site-Wide Custom Events" analytics-action-show="Callout Profile displayed" analytics-action-close="Callout Profile dismissed" analytics-label="Create Collection Callout" class="devsite-page-bookmark-tooltip nocontent" dismiss-button="true" id="devsite-collections-dropdown" dismiss-button-text="Dismiss" close-button-text="Got it"> <devsite-bookmark></devsite-bookmark> <span slot="popout-heading"> Stay organized with collections </span> <span slot="popout-contents"> Save and categorize content based on your preferences. </span> </devsite-feature-tooltip> <div class="devsite-page-title-meta"><devsite-view-release-notes></devsite-view-release-notes></div> <devsite-toc class="devsite-nav" depth="2" devsite-toc-embedded > </devsite-toc> <div class="devsite-article-body clearfix "> <p></p> <p>This document describes how to configure and manage customer-managed encryption keys (CMEK) for <a href="/logging/docs/routing/overview">Cloud Logging</a> to meet your organization's compliance needs. You can configure CMEK as a default resource setting for an <a href="/resource-manager/docs/cloud-platform-resource-hierarchy#organizations">organization</a>, a <a href="/resource-manager/docs/cloud-platform-resource-hierarchy#folders">folder</a>, or for both. When configured, Cloud Logging ensures that all new log buckets in the organization or folder are encrypted with a customer-managed key.</p> <p>You can configure a default settings for an organization and for folders. When you create new resources, those resources inherit the default settings of their parent. For example, if you configure CMEK as a default resource setting for an organization, then any new <code translate="no" dir="ltr">_Default</code> and <code translate="no" dir="ltr">_Required</code> log buckets that are created in projects, folders, or billing accounts in that organization are encrypted with the default key. Further, if you create a custom log bucket in a project that is a child of that organization, then the default key is automatically used unless you provide a different key when creating the log bucket.</p> <p>The instructions in this guide use the Google Cloud CLI.</p> <h2 id="cmek-intro" data-text="Overview" tabindex="-1">Overview</h2> <p>By default, Cloud Logging <a href="/docs/security/encryption/default-encryption">encrypts customer content stored at rest</a>. Data stored in log buckets by Logging is encrypted using key-encryption keys, a process known as <a href="/kms/docs/envelope-encryption">envelope encryption</a>. Access to your logging data requires access to those key-encryption keys, which Google Cloud manages for you without any actions on your part.</p> <p>Your organization might have regulatory, compliance-related, or advanced encryption requirements that our default encryption at rest doesn't provide. To meet your organization's requirements, instead of Google Cloud managing the encryption keys that protect your data, you can configure CMEK to control and manage your own encryption.</p> <p>For specific information about CMEK, including its advantages, and limitations, see <a href="/kms/docs/cmek">Customer-managed encryption keys</a>.</p> <p>When you configure CMEK as a default resource setting for Logging, the following occur:</p> <ul> <li>New log buckets in the organization or folder are automatically encrypted with the configured key. However, you can change that key or create log buckets and specify a different key. For more information, see <a href="/logging/docs/routing/managed-encryption-storage">Configure CMEK for log buckets</a>.</li> </ul> <ul> <li>If you use Log Analytics and query multiple log buckets, then the default key might be used to encrypt temporary data. For more information, see <a href="/logging/docs/log-analytics#restrictions">Log Analytics restrictions</a>.</li> </ul> <h2 id="getting-started" data-text="Before you begin" tabindex="-1">Before you begin</h2> <p>To get started, complete the following steps:</p> <ol> <li><p>Before you create a log bucket with CMEK enabled, review the <a href="#limits">Limitations</a>.</p></li> <li><p> <p>In the Google Cloud console, activate Cloud Shell.</p> <p><a href="https://console.cloud.google.com/?cloudshell=true" target="console" track-type="commonIncludes" track-name="consoleLink" track-metadata-end-goal="launchCloudShell" class="button button-primary">Activate Cloud Shell</a></p> <p> At the bottom of the Google Cloud console, a <a href="/shell/docs/how-cloud-shell-works">Cloud Shell</a> session starts and displays a command-line prompt. Cloud Shell is a shell environment with the Google Cloud CLI already installed and with values already set for your current project. It can take a few seconds for the session to initialize. </p> </p></li> <li><p>Configure the Google Cloud project where you plan to create your keys:</p> <ol> <li> <p> To get the permissions that you need to create keys, ask your administrator to grant you the <a href="https://cloud.google.com/iam/docs/understanding-roles#cloudkms.admin">Cloud KMS Admin </a> (<code translate="no" dir="ltr">roles/cloudkms.admin</code>) IAM role on your project. For more information about granting roles, see <a href="/iam/docs/granting-changing-revoking-access">Manage access to projects, folders, and organizations</a>. </p> <p> You might also be able to get the required permissions through <a href="/iam/docs/creating-custom-roles">custom roles</a> or other <a href="/iam/docs/understanding-roles">predefined roles</a>. </p> </li> <li><p><a href="https://console.cloud.google.com/flows/enableapi?apiid=cloudkms.googleapis.com">Enable the Cloud KMS API</a>.</p></li> <li><p><a href="/kms/docs/creating-keys">Create a key ring and keys</a>.</p> <p>Cloud Logging lets you use a key from any region. However, when you create a log bucket, the location of the log bucket must match the location of the key. For information about supported regions, see the following:</p> <ul> <li><a href="/kms/docs/locations">Cloud KMS locations</a></li> <li><a href="/logging/docs/region-support#bucket-regions">Logging Supported regions</a></li> </ul> <p>If you configure CMEK as a default resource setting for Logging by using the steps in this document, then new log buckets created in the organization or folder are automatically configured for CMEK. Also, because the location of a log bucket must match the location of the key, after you configure CMEK as a default resource setting, you can't create log buckets in the <code translate="no" dir="ltr">global</code> region.</p></li> </ol></li> <li><p>Ensure that your IAM role on the organization or folder whose default settings you want to configure includes the following Cloud Logging permissions:</p> <ul> <li><code translate="no" dir="ltr">logging.settings.get</code></li> <li><code translate="no" dir="ltr">logging.settings.update</code></li> </ul></li> </ol> <h2 id="enable" data-text="Enable CMEK for an organization or folder" tabindex="-1">Enable CMEK for an organization or folder</h2> <p>Follow these instructions to enable CMEK for your Google Cloud folder or organization.</p> <h3 id="service-account-id" data-text="Determine the service account ID" tabindex="-1">Determine the service account ID</h3> <p>To determine the service-account ID associated with the organization or folder for which CMEK will apply, run the following <a href="/sdk/gcloud/reference/logging/settings/describe"><code translate="no" dir="ltr">gcloud logging settings describe</code></a> command:</p> <div class="ds-selector-tabs" data-ds-scope="code-sample"> <section><h3 id="folder" data-text=" FOLDER " tabindex="-1"> FOLDER </h3><pre class="devsite-click-to-copy lang-none" translate="no" dir="ltr"> gcloud logging settings describe --folder=<var translate="no">FOLDER_ID</var> </pre> <p>Before running the previous command, make the following replacement:</p> <ul> <li><var translate="no">FOLDER_ID</var>: The unique numeric identifier of the folder. For information about using folders, see <a href="/resource-manager/docs/creating-managing-folders">Creating and managing folders</a>.</li> </ul></section> <section><h3 id="organization" data-text=" ORGANIZATION " tabindex="-1"> ORGANIZATION </h3><pre class="prettyprint devsite-click-to-copy lang-sh" translate="no" dir="ltr"> gcloud logging settings describe --organization=<var translate="no">ORGANIZATION_ID</var> </pre> <p>Before running the previous command, make the following replacement:</p> <ul> <li><var translate="no">ORGANIZATION_ID</var>: The unique numeric identifier of the organization. For information about getting this identifier, see <a href="/resource-manager/docs/creating-managing-organization#retrieving_your_organization_id">Getting your organization ID</a>.</li> </ul></section> </div> <p>The previous command generates service accounts for the organization or folder, when they doesn't exist. The command also returns the IDs of two service accounts, one in the <code translate="no" dir="ltr">kmsServiceAccountId</code> field and the other in the <code translate="no" dir="ltr">loggingServiceAccountId</code> field. To configure the CMEK as a default setting, use the value in the <code translate="no" dir="ltr">kmsServiceAccountId</code> field.</p> <p>The following illustrates a sample response to the previous command when an organization is specified:</p> <pre translate="no" dir="ltr"> kmsServiceAccountId: <var translate="no">KMS_SERVICE_ACCT_NAME</var>@gcp-sa-logging.iam.gserviceaccount.com loggingServiceAccountId: <var translate="no">SERVICE_ACCT_NAME</var>@gcp-sa-logging.iam.gserviceaccount.com name: organizations/<var translate="no">ORGANIZATION_ID</var>/settings </pre> <p>Run the provisioning process one time per resource. Running the <code translate="no" dir="ltr">describe</code> command multiple times returns the same value for the <code translate="no" dir="ltr">kmsServiceAccountId</code> field.</p> <p>If you can't use the Google Cloud CLI, then run the Cloud Logging API method <a href="/logging/docs/reference/v2/rest/v2/TopLevel/getSettings"><code translate="no" dir="ltr">getSettings</code></a>.</p> <h3 id="assign-role" data-text="Assign the Encrypter/Decrypter role" tabindex="-1">Assign the Encrypter/Decrypter role</h3> <p>To use CMEK, give the service account permission to use your Cloud KMS by assigning the <a href="/kms/docs/reference/permissions-and-roles#predefined_roles">Cloud KMS CryptoKey Encrypter/Decrypter</a> role to the service account:</p> <div class="ds-selector-tabs" data-ds-scope="code-sample"> <section><h3 id="gcloud" data-text=" gcloud " tabindex="-1"> gcloud </h3><pre class="prettyprint devsite-click-to-copy lang-sh" translate="no" dir="ltr"> gcloud kms keys add-iam-policy-binding \ --project=<var translate="no">KMS_PROJECT_ID</var> \ --member serviceAccount:<var translate="no">KMS_SERVICE_ACCT_NAME</var>@gcp-sa-logging.iam.gserviceaccount.com \ --role roles/cloudkms.cryptoKeyEncrypterDecrypter \ --location=<var translate="no">KMS_KEY_LOCATION</var> \ --keyring=<var translate="no">KMS_KEY_RING</var> \ <var translate="no">KMS_KEY_NAME</var> </pre> <p>Before running the previous command, make the following replacements:</p> <ul> <li><var translate="no">KMS_PROJECT_ID</var>: The unique alphanumeric identifier, composed of your Google Cloud project name and a randomly assigned number, of the Google Cloud project running Cloud KMS. For information about getting this identifier, see <a href="/resource-manager/docs/creating-managing-projects#identifying_projects">Identifying projects</a>.</li> <li><var translate="no">KMS_SERVICE_ACCT_NAME</var>: The name of the service account shown in the <code translate="no" dir="ltr">kmsServiceAccountId</code> field of the response of the <code translate="no" dir="ltr">gcloud logging settings describe</code> command.</li> <li><var translate="no">KMS_KEY_LOCATION</var>: The Cloud KMS key's region.</li> <li><var translate="no">KMS_KEY_RING</var>: The Cloud KMS key ring's name.</li> <li><var translate="no">KMS_KEY_NAME</var>: The Cloud KMS key's name. It is formatted like this: <code translate="no" dir="ltr">projects/<var translate="no">KMS_PROJECT_ID</var>/locations/<var translate="no">LOCATION</var>/keyRings/<var translate="no">KMS_KEY_RING</var>/cryptoKeys/<var translate="no">KEY</var></code>.</li> </ul></section> <section><h3 id="console" data-text="Console" tabindex="-1">Console</h3><ol> <li>Open the <strong>Cloud Key Management Service Keys</strong> browser in the Google Cloud console.<br> <a class="button button-primary" href="https://console.cloud.google.com/security/kms" target="console">Open the Cloud KMS Keys browser</a></li> <li><p>Select the name of the key ring that contains the key.</p></li> <li><p>Select the checkbox for the key.</p> <p>The <strong>Permissions</strong> tab becomes available.</p></li> <li><p>In the <strong>Add members</strong> dialog, specify the email address of the Logging service account you are granting access.</p></li> <li><p>In the <strong>Select a role</strong> drop down, select <strong>Cloud KMS CryptoKey Encrypter/Decrypter</strong>.</p></li> <li><p>Click <strong>Add</strong>.</p></li> </ol></section> </div> <h3 id="configure-key" data-text="Configure the organization policies" tabindex="-1">Configure the organization policies</h3> <aside class="note"><strong>Note:</strong><span> You aren't required to configure an organization policy when you want to configure Logging's default settings for either an organization or a folder to require CMEK. For information about organization policies and how to configure them, see <a href="/resource-manager/docs/organization-policy/overview">Introduction to the Organization Policy Service</a>.</span></aside> <p>Logging supports organization policies that can require CMEK protection and can limit which Cloud KMS CryptoKeys can be used for CMEK protection:</p> <ul> <li><p>When <code translate="no" dir="ltr">logging.googleapis.com</code> is in the <code translate="no" dir="ltr">Deny</code> policy list of services for the constraint <code translate="no" dir="ltr">constraints/gcp.restrictNonCmekServices</code>, Logging refuses to create new user-defined buckets that aren't CMEK-protected. However, this constraint doesn't prevent Cloud Logging from creating the <code translate="no" dir="ltr">_Required</code> and <code translate="no" dir="ltr">_Default</code> log buckets which are created when a Google Cloud project is created.</p></li> <li><p>When <code translate="no" dir="ltr">constraints/gcp.restrictCmekCryptoKeyProjects</code> is enforced, Logging creates CMEK-protected resources that are protected by a CryptoKey from an allowed project, folder, or organization.</p></li> </ul> <p>For more information about CMEK and organization policies, see <a href="/kms/docs/cmek-org-policy">CMEK organization policies</a>.</p> <p>When an organization policy that specifies a CMEK constraint exists, ensure that those constraints are consistent with Logging's default settings for an organization or a folder. Further, if you plan to modify your default settings, before you update the default settings, review and, if necessary, update the organization policies.</p> <p>To view or configure organization policies, do the following:</p> <ol> <li> <p>In the Google Cloud console, go to the <b>Organization Policies</b> page: <p><a class="button button-primary" href="https://console.cloud.google.com/projectselector/iam-admin/orgpolicies?supportedpurview=project,folder,organizationId" target="console" track-name="consoleLink" track-type="task" track-metadata-position="body" track-metadata-event-detail="projectselector/iam-admin/orgpolicies?supportedpurview=project,folder,organizationId" >Go to <b>Organization Policies</b></a> </p> </p> <p>If you use the search bar to find this page, then select the result whose subheading is <b>IAM & Admin</b>.</p></li> <li>Select your organization.</li> <li><p>Verify, and if necessary, update the constraints specific to CMEK.</p> <p>For information about how to modify an organization policy, see <a href="/resource-manager/docs/organization-policy/creating-managing-policies#creating_and_editing_policies">Creating and editing policies</a>.</p></li> </ol> <h3 id="configure-logging" data-text="Configure Cloud Logging with the Cloud KMS key" tabindex="-1">Configure Cloud Logging with the Cloud KMS key</h3> <p>To configure CMEK as a default resource setting for Logging, run the following <a href="/sdk/gcloud/reference/logging/settings/update"><code translate="no" dir="ltr">gcloud logging settings update</code></a> command:</p> <div class="ds-selector-tabs" data-ds-scope="code-sample"> <section><h3 id="folder_1" data-text=" FOLDER " tabindex="-1"> FOLDER </h3><pre class="devsite-click-to-copy lang-sh" translate="no" dir="ltr"> gcloud logging settings update \ --folder=<var translate="no">FOLDER_ID</var> \ --kms-location=<var translate="no">KMS_KEY_LOCATION</var> \ --kms-key-name=<var translate="no">KMS_KEY_NAME</var> \ --kms-keyring=<var translate="no">KMS_KEY_RING</var> \ --kms-project=<var translate="no">KMS_PROJECT_ID</var> </pre> <p>Before running the previous command, make the following replacements:</p> <ul> <li><var translate="no">FOLDER_ID</var>: The unique numeric identifier of the folder. For information about using folders, see <a href="/resource-manager/docs/creating-managing-folders">Creating and managing folders</a>.</li> <li><var translate="no">KMS_KEY_LOCATION</var>: The Cloud KMS key's region.</li> <li><var translate="no">KMS_KEY_NAME</var>: The Cloud KMS key's name. It is formatted like this: <code translate="no" dir="ltr">projects/<var translate="no">KMS_PROJECT_ID</var>/locations/<var translate="no">LOCATION</var>/keyRings/<var translate="no">KMS_KEY_RING</var>/cryptoKeys/<var translate="no">KEY</var></code>.</li> <li><var translate="no">KMS_KEY_RING</var>: The Cloud KMS key ring's name.</li> <li><var translate="no">KMS_PROJECT_ID</var>: The unique alphanumeric identifier, composed of your Google Cloud project name and a randomly assigned number, of the Google Cloud project running Cloud KMS. For information about getting this identifier, see <a href="/resource-manager/docs/creating-managing-projects#identifying_projects">Identifying projects</a>.</li> </ul> <p>The previous command updates the default settings to store information about the Cloud KMS key. You must ensure that the <a href="/logging/docs/default-settings#specify-region">default storage location</a> for the folder is set to the value of the <var translate="no">KMS_KEY_LOCATION</var>. If you haven't set the default storage location, or if the value of that location doesn't match the value of <var translate="no">KMS_KEY_LOCATION</var>, then append the following to the previous command:</p> <pre class="devsite-click-to-copy lang-sh" translate="no" dir="ltr"> --storage-location = <var translate="no">KMS_KEY_LOCATION</var> </pre> <p>The <code translate="no" dir="ltr">--storage-location</code> flag lets you set or update the default storage location for the folder.</p></section> <section><h3 id="organization_1" data-text=" ORGANIZATION " tabindex="-1"> ORGANIZATION </h3><pre class="devsite-click-to-copy lang-sh" translate="no" dir="ltr"> gcloud logging settings update \ --organization=<var translate="no">ORGANIZATION_ID</var> \ --kms-location=<var translate="no">KMS_KEY_LOCATION</var> \ --kms-key-name=<var translate="no">KMS_KEY_NAME</var> \ --kms-keyring=<var translate="no">KMS_KEY_RING</var> \ --kms-project=<var translate="no">KMS_PROJECT_ID</var> </pre> <p>Before running the previous command, make the following replacements:</p> <ul> <li><var translate="no">ORGANIZATION_ID</var>: The unique numeric identifier of the organization. For information about getting this identifier, see <a href="/resource-manager/docs/creating-managing-organization#retrieving_your_organization_id">Getting your organization ID</a>.</li> <li><var translate="no">KMS_KEY_LOCATION</var>: The Cloud KMS key's region.</li> <li><var translate="no">KMS_KEY_NAME</var>: The Cloud KMS key's name. It is formatted like this: <code translate="no" dir="ltr">projects/<var translate="no">KMS_PROJECT_ID</var>/locations/<var translate="no">LOCATION</var>/keyRings/<var translate="no">KMS_KEY_RING</var>/cryptoKeys/<var translate="no">KEY</var></code>.</li> <li><var translate="no">KMS_KEY_RING</var>: The Cloud KMS key ring's name.</li> <li><var translate="no">KMS_PROJECT_ID</var>: The unique alphanumeric identifier, composed of your Google Cloud project name and a randomly assigned number, of the Google Cloud project running Cloud KMS. For information about getting this identifier, see <a href="/resource-manager/docs/creating-managing-projects#identifying_projects">Identifying projects</a>.</li> </ul> <p>The previous command updates the default settings to store information about the Cloud KMS key. You must ensure that the <a href="/logging/docs/default-settings#specify-region">default storage location</a> for the organization is set to the value of the <var translate="no">KMS_KEY_LOCATION</var>. If you haven't set the default storage location, or if the value of that location doesn't match the value of <var translate="no">KMS_KEY_LOCATION</var>, then append the following to the previous command:</p> <pre class="devsite-click-to-copy lang-sh" translate="no" dir="ltr"> --storage-location = <var translate="no">KMS_KEY_LOCATION</var> </pre> <p>The <code translate="no" dir="ltr">--storage-location</code> flag lets you set or update the default storage location for the organization.</p></section> </div> <p>After the key is applied, new log buckets in the organization or folder are configured to encrypt their data at rest using this key. You can also <a href="/logging/docs/routing/managed-encryption-storage#change-key">change keys</a> for individual log buckets. You can't create log buckets in the <code translate="no" dir="ltr">global</code> region because you must use a key whose region matches the regional scope of your data.</p> <p>If you can't use the Google Cloud CLI, then run the Cloud Logging API method <a href="/logging/docs/reference/v2/rest/v2/TopLevel/updateSettings"><code translate="no" dir="ltr">updateSettings</code></a>.</p> <h3 id="verify-key" data-text="Verify key enablement" tabindex="-1">Verify key enablement</h3> <p>To verify that you've successfully enabled CMEK for an organization or a folder, run the following <a href="/sdk/gcloud/reference/logging/settings/describe"><code translate="no" dir="ltr">gcloud logging settings describe</code></a> command:</p> <div class="ds-selector-tabs" data-ds-scope="code-sample"> <section><h3 id="folder_2" data-text=" FOLDER " tabindex="-1"> FOLDER </h3><pre class="prettyprint devsite-click-to-copy lang-sh" translate="no" dir="ltr"> gcloud logging settings describe --folder=<var translate="no">FOLDER_ID</var> </pre> <p>Before running the previous command, make the following replacement:</p> <ul> <li><var translate="no">FOLDER_ID</var>: The unique numeric identifier of the folder. For information about using folders, see <a href="/resource-manager/docs/creating-managing-folders">Creating and managing folders</a>.</li> </ul></section> <section><h3 id="organization_2" data-text=" ORGANIZATION " tabindex="-1"> ORGANIZATION </h3><pre class="prettyprint devsite-click-to-copy lang-sh" translate="no" dir="ltr"> gcloud logging settings describe --organization=<var translate="no">ORGANIZATION_ID</var> </pre> <p>Before running the previous command, make the following replacement:</p> <ul> <li><var translate="no">ORGANIZATION_ID</var>: The unique numeric identifier of the organization. For information about getting this identifier, see <a href="/resource-manager/docs/creating-managing-organization#retrieving_your_organization_id">Getting your organization ID</a>.</li> </ul></section> </div> <p>When the previous command returns the Cloud KMS key name in the <code translate="no" dir="ltr">kmsKeyName</code> field is populated, CMEK is enabled for the organization or folder:</p> <pre translate="no" dir="ltr"> kmsKeyName: <var translate="no">KMS_KEY_NAME</var> kmsServiceAccountId: <var translate="no">KMS_SERVICE_ACCT_NAME</var>@gcp-sa-logging.iam.gserviceaccount.com loggingServiceAccountId: <var translate="no">SERVICE_ACCT_NAME</var>@gcp-sa-logging.iam.gserviceaccount.com </pre> <h2 id="exports" data-text="Route logs to supported destinations" tabindex="-1">Route logs to supported destinations</h2> <ul> <li><p>Cloud Logging log buckets can be configured to encrypt data with CMEK. When you configure CMEK as a default setting for an organization or folder, new log buckets in the organization or folder automatically use CMEK. You can change the key of these log buckets and you can create log buckets that use a different KMS key than the one specified by the default settings.</p> <p>For information about CMEK as applied to log buckets, including how to change keys and limitations when you enable CMEK on a log bucket, see <a href="/logging/docs/routing/managed-encryption-storage">Configure CMEK for log buckets</a>.</p></li> </ul> <ul> <li><p>Cloud Storage supports CMEK for routing logs. For instructions about how to configure CMEK for Cloud Storage, see <a href="/storage/docs/encryption/using-customer-managed-keys">Using customer-managed encryption keys</a>.</p> <p>If data is lost due to key unavailability when routing logs data to Cloud Storage, then you can retroactively copy logs in bulk to Cloud Storage when those logs are also stored in a log bucket. For details, see <a href="/logging/docs/routing/copy-logs">Copy log entries</a>.</p></li> </ul> <ul> <li>BigQuery, by default, encrypts customer content stored at rest. For details, see <a href="/bigquery/docs/customer-managed-encryption">Protecting data with Cloud Key Management Service keys</a>.</li> </ul> <ul> <li>Pub/Sub, by default, encrypts customer content stored at rest. For details, see <a href="/pubsub/docs/encryption">Configuring message encryption</a>.</li> </ul> <h2 id="manage-key" data-text="Manage your Cloud KMS key" tabindex="-1">Manage your Cloud KMS key</h2> <p>The following sections explain how to change, revoke access for, or disable your Cloud KMS key.</p> <aside class="note"><strong>Note:</strong><span> If Logging loses access to the Cloud KMS key, there are data loss and user implications; to learn more, see <a href="#limit-disaster-recovery">Limitations</a> on this page.</span></aside> <h3 id="change-key" data-text="Change your Cloud KMS key" tabindex="-1">Change your Cloud KMS key</h3> <p>To change the Cloud KMS key associated with an organization or a folder, <a href="/kms/docs/creating-keys#create_a_key">create a key</a>, and then run the <a href="/sdk/gcloud/reference/logging/settings/update"><code translate="no" dir="ltr">gcloud logging settings update</code></a> command and supply information about the new Cloud KMS key:</p> <div class="ds-selector-tabs" data-ds-scope="code-sample"> <section><h3 id="folder_3" data-text=" FOLDER " tabindex="-1"> FOLDER </h3><pre class="prettyprint devsite-click-to-copy lang-sh" translate="no" dir="ltr"> gcloud logging settings update \ --folder=<var translate="no">FOLDER_ID</var> --kms-key-name=<var translate="no">NEW_KMS_KEY_NAME</var> --kms-location=<var translate="no">NEW_KMS_KEY_LOCATION</var> \ --kms-keyring=<var translate="no">NEW_KMS_KEY_RING</var> \ --kms-project=<var translate="no">NEW_KMS_PROJECT_ID</var> </pre> <p>You must ensure that the <a href="/logging/docs/default-settings#specify-region">default storage location</a> for the folder is set to the value of the <var translate="no">KMS_KEY_LOCATION</var>. If you haven't set the default storage location, or if the value of that location doesn't match the value of <var translate="no">KMS_KEY_LOCATION</var>, then append the following to the previous command:</p> <pre class="devsite-click-to-copy lang-sh" translate="no" dir="ltr"> --storage-location = <var translate="no">NEW_KMS_KEY_LOCATION</var> </pre></section> <section><h3 id="organization_3" data-text=" ORGANIZATION " tabindex="-1"> ORGANIZATION </h3><pre class="prettyprint devsite-click-to-copy lang-sh" translate="no" dir="ltr"> gcloud logging settings update \ --organization=<var translate="no">ORGANIZATION_ID</var> --kms-key-name=<var translate="no">NEW_KMS_KEY_NAME</var> --kms-location=<var translate="no">NEW_KMS_KEY_LOCATION</var> \ --kms-keyring=<var translate="no">NEW_KMS_KEY_RING</var> \ --kms-project=<var translate="no">NEW_KMS_PROJECT_ID</var> </pre> <p>You must ensure that the <a href="/logging/docs/default-settings#specify-region">default storage location</a> for the organization is set to the value of the <var translate="no">KMS_KEY_LOCATION</var>. If you haven't set the default storage location, or if the value of that location doesn't match the value of <var translate="no">KMS_KEY_LOCATION</var>, then append the following to the previous command:</p> <pre class="devsite-click-to-copy lang-sh" translate="no" dir="ltr"> --storage-location = <var translate="no">NEW_KMS_KEY_LOCATION</var> </pre></section> </div> <h3 id="revoke-key" data-text="Revoke access to the Cloud KMS key" tabindex="-1">Revoke access to the Cloud KMS key</h3> <p>You can revoke Logging's access to the Cloud KMS key by removing the configured service account's IAM permission for that key.</p> <p>If you remove Logging's access to a key, then it can take up to one hour for the change to take effect.</p> <p>To revoke Logging's access to the Cloud KMS key, run the following Google Cloud CLI command:</p> <pre class="prettyprint devsite-click-to-copy lang-sh" translate="no" dir="ltr"> gcloud kms keys remove-iam-policy-binding \ --project=<var translate="no">KMS_PROJECT_ID</var> \ --member serviceAccount:<var translate="no">KMS_SERVICE_ACCT_NAME</var>@gcp-sa-logging.iam.gserviceaccount.com \ --role roles/cloudkms.cryptoKeyEncrypterDecrypter \ --location=<var translate="no">KMS_KEY_LOCATION</var> \ --keyring=<var translate="no">KMS_KEY_RING</var> \ <var translate="no">KMS_KEY_NAME</var> </pre> <p>Before running the previous command, make the following replacements:</p> <ul> <li><var translate="no">KMS_PROJECT_ID</var>: The unique alphanumeric identifier, composed of your Google Cloud project name and a randomly assigned number, of the Google Cloud project running Cloud KMS. For information about getting this identifier, see <a href="/resource-manager/docs/creating-managing-projects#identifying_projects">Identifying projects</a>.</li> <li><var translate="no">KMS_SERVICE_ACCT_NAME</var>: The name of the service account shown in the <code translate="no" dir="ltr">kmsServiceAccountId</code> field of the response of the <code translate="no" dir="ltr">gcloud logging settings describe</code> command.</li> <li><var translate="no">KMS_KEY_LOCATION</var>: The Cloud KMS key's region.</li> <li><var translate="no">KMS_KEY_RING</var>: The Cloud KMS key ring's name.</li> <li><var translate="no">KMS_KEY_NAME</var>: The Cloud KMS key's name. It is formatted like this: <code translate="no" dir="ltr">projects/<var translate="no">KMS_PROJECT_ID</var>/locations/<var translate="no">LOCATION</var>/keyRings/<var translate="no">KMS_KEY_RING</var>/cryptoKeys/<var translate="no">KEY</var></code>.</li> </ul> <h3 id="disable-cmek" data-text="Disable CMEK" tabindex="-1">Disable CMEK</h3> <aside class="note"><strong>Note:</strong><span> If you configure CMEK as a default resource setting for an organization but don't want CMEK applied to new resources in a specific folder, then configure the default storage location for that folder. For more information, see <a href="/logging/docs/default-settings#specify-region">Set the default storage location</a>.</span></aside> <p>Disabling CMEK for an organization or a folder removes CMEK policy enforcement for future operations only; any previously applied configurations remain intact.</p> <p>To disable CMEK on a resource that has CMEK configured as a default resource setting, run the following Google Cloud CLI command:</p> <div class="ds-selector-tabs" data-ds-scope="code-sample"> <section><h3 id="folder_4" data-text=" FOLDER " tabindex="-1"> FOLDER </h3><pre class="prettyprint devsite-click-to-copy lang-sh" translate="no" dir="ltr"> gcloud logging settings update --folder=<var translate="no">FOLDER_ID</var> --clear-kms-key </pre> <p>Before running the previous command, make the following replacement:</p> <ul> <li><var translate="no">FOLDER_ID</var>: The unique numeric identifier of the folder. For information about using folders, see <a href="/resource-manager/docs/creating-managing-folders">Creating and managing folders</a>.</li> </ul></section> <section><h3 id="organization_4" data-text=" ORGANIZATION " tabindex="-1"> ORGANIZATION </h3><pre class="prettyprint devsite-click-to-copy lang-sh" translate="no" dir="ltr"> gcloud logging settings update --organization=<var translate="no">ORGANIZATION_ID</var> --clear-kms-key </pre> <p>Before running the previous command, make the following replacement:</p> <ul> <li><var translate="no">ORGANIZATION_ID</var>: The unique numeric identifier of the organization. For information about getting this identifier, see <a href="/resource-manager/docs/creating-managing-organization#retrieving_your_organization_id">Getting your organization ID</a>.</li> </ul></section> </div> <p>If you want to destroy your key, see <a href="/kms/docs/destroy-restore">Destroying and restoring key versions</a>.</p> <h2 id="key-rotation" data-text="Cloud KMS key rotation considerations" tabindex="-1">Cloud KMS key rotation considerations</h2> <p>Cloud Logging doesn't automatically rotate the encryption key for temporary disaster recovery files when the Cloud KMS key associated with the Google Cloud organization or folder rotates. Existing recovery files continue to use the key version with which they were created. New recovery files use the current primary key version.</p> <h2 id="limits" data-text="Limitations" tabindex="-1">Limitations</h2> <p>The following are known limitations when you configure CMEK as a default resource setting for Logging.</p> <h3 id="limit-disaster-recovery" data-text="Disaster recovery file unavailability" tabindex="-1">Disaster recovery file unavailability</h3> <p>A Cloud KMS key is considered available and accessible by Logging when both of the following are true:</p> <ul> <li>The key is <a href="/kms/docs/key-states#enabled">enabled</a>.</li> <li>The service account listed in the <code translate="no" dir="ltr">kmsServiceAccountId</code> field of the response of the <code translate="no" dir="ltr">gcloud logging settings describe</code> command has encrypt and decrypt has permissions on the key.</li> </ul> <p>If Logging loses access to the Cloud KMS key, then Logging is unable to write temporary disaster-recovery files and, for users, queries stop functioning. Query performance may remain degraded even after key access is restored.</p> <p>Routing logs to Cloud Storage might also be affected because the Logging is unable to write temporary files required to facilitate the routing. If an error is encountered while encrypting or decrypting data, then a notification is sent to the Google Cloud project that contains the Cloud KMS key.</p> <h3 id="client-libraries" data-text="Client library availability" tabindex="-1">Client library availability</h3> <p>Logging client libraries don't provide methods for configuring CMEK.</p> <h3 id="degraded-external" data-text="Degradation due to Cloud EKM key unavailability" tabindex="-1">Degradation due to Cloud EKM key unavailability</h3> <p>When you use a Cloud EKM key, Google has no control over the availability of your externally managed key in the external key-management partner system.</p> <p>When CMEK is configured as default resource setting for an organization or a folder, if an externally managed key is unavailable, then Cloud Logging continually retries accessing the key. Cloud Logging also buffers the incoming log data for up to one hour. After an hour, if Cloud Logging is still unable to access the externally managed key, then Cloud Logging begins dropping the data.</p> <p>If CMEK is applied to a log bucket and if an externally managed key is unavailable, then Cloud Logging continues storing logs in log buckets, but users won't be able to access that data.</p> <p>See the <a href="/kms/docs/ekm#considerations">Cloud External Key Manager documentation</a> for more considerations, and potential alternatives, when using external keys.</p> <h3 id="limit-log-buckets" data-text="Limitations on log buckets" tabindex="-1">Limitations on log buckets</h3> <p>For limitations when you use CMEK with log buckets, see <a href="/logging/docs/routing/managed-encryption-storage#limits">Limitations</a>.</p> <h2 id="quotas" data-text="Quotas" tabindex="-1">Quotas</h2> <p>For details on Logging usage limits, see <a href="/logging/quotas">Quotas and limits</a>.</p> <h2 id="troubleshoot" data-text="Troubleshoot configuration errors" tabindex="-1">Troubleshoot configuration errors</h2> <p>For information about troubleshooting CMEK configuration errors, see <a href="/logging/docs/routing/troubleshoot-cmek-orgs">Troubleshoot CMEK and default setting errors</a>.</p> <devsite-hats-survey class="nocontent" hats-id="mwETRvWii0eU5NUYprb0Y9z5GVbc" listnr-id="83405"></devsite-hats-survey> </div> <devsite-thumb-rating position="footer"> </devsite-thumb-rating> <devsite-feedback position="footer" project-name="Cloud Logging" product-id="714033" bucket="Documentation" context="Logging docs feedback link" version="t-devsite-webserver-20241114-r00-rc02.464922260396498922" data-label="Send Feedback Button" track-type="feedback" track-name="sendFeedbackLink" track-metadata-position="footer" class="nocontent" project-icon="https://www.gstatic.com/devrel-devsite/prod/v870e399c64f7c43c99a3043db4b3a74327bb93d0914e84a0c3dba90bbfd67625/cloud/images/favicons/onecloud/super_cloud.png" > <button> Send feedback </button> </devsite-feedback> <div class="devsite-floating-action-buttons"> </div> </article> <devsite-content-footer class="nocontent"> <p>Except as otherwise noted, the content of this page is licensed under the <a href="https://creativecommons.org/licenses/by/4.0/">Creative Commons Attribution 4.0 License</a>, and code samples are licensed under the <a href="https://www.apache.org/licenses/LICENSE-2.0">Apache 2.0 License</a>. For details, see the <a href="https://developers.google.com/site-policies">Google Developers Site Policies</a>. Java is a registered trademark of Oracle and/or its affiliates.</p> <p>Last updated 2024-11-27 UTC.</p> </devsite-content-footer> <devsite-notification > </devsite-notification> <div class="devsite-content-data"> <template class="devsite-thumb-rating-feedback"> <devsite-feedback position="thumb-rating" project-name="Cloud Logging" product-id="714033" bucket="Documentation" context="Logging docs feedback link" version="t-devsite-webserver-20241114-r00-rc02.464922260396498922" data-label="Send Feedback Button" track-type="feedback" track-name="sendFeedbackLink" track-metadata-position="thumb-rating" class="nocontent" project-icon="https://www.gstatic.com/devrel-devsite/prod/v870e399c64f7c43c99a3043db4b3a74327bb93d0914e84a0c3dba90bbfd67625/cloud/images/favicons/onecloud/super_cloud.png" > <button> Need to tell us more? </button> </devsite-feedback> </template> <template class="devsite-content-data-template"> [[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Hard to understand","hardToUnderstand","thumb-down"],["Incorrect information or sample code","incorrectInformationOrSampleCode","thumb-down"],["Missing the information/samples I need","missingTheInformationSamplesINeed","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2024-11-27 UTC."],[],[]] </template> </div> </devsite-content> </main> <devsite-footer-promos class="devsite-footer"> </devsite-footer-promos> <devsite-footer-linkboxes class="devsite-footer"> <nav class="devsite-footer-linkboxes nocontent" aria-label="Footer links"> <ul class="devsite-footer-linkboxes-list"> <li class="devsite-footer-linkbox "> <h3 class="devsite-footer-linkbox-heading no-link">Why Google</h3> <ul class="devsite-footer-linkbox-list"> <li class="devsite-footer-linkbox-item"> <a href="/why-google-cloud/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 1)" track-metadata-position="footer"track-name="choosing google cloud"track-type="footer link"track-metadata-eventDetail="cloud.google.com/why-google-cloud/"track-metadata-module="footer"track-metadata-child_headline="why google"> Choosing Google Cloud </a> </li> <li class="devsite-footer-linkbox-item"> <a href="/trust-center/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 2)" track-metadata-module="footer"track-metadata-eventDetail="cloud.google.com/security/"track-metadata-position="footer"track-metadata-child_headline="why google"track-type="footer link"track-name="trust and security"> Trust and security </a> </li> <li class="devsite-footer-linkbox-item"> <a href="/solutions/modern-infrastructure/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 3)" track-type="footer link"track-metadata-child_headline="why google"track-metadata-module="footer"track-metadata-eventDetail="cloud.google.com/solutions/modern-infrastructure/"track-metadata-position="footer"track-name="modern infrastructure cloud"> Modern Infrastructure Cloud </a> </li> <li class="devsite-footer-linkbox-item"> <a href="/multicloud/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 4)" track-type="footer link"track-metadata-eventDetail="cloud.google.com/multicloud/"track-metadata-position="footer"track-name="multicloud"track-metadata-child_headline="why google"track-metadata-module="footer"> Multicloud </a> </li> <li class="devsite-footer-linkbox-item"> <a href="/infrastructure/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 5)" track-metadata-module="footer"track-metadata-child_headline="why google"track-metadata-position="footer"track-metadata-eventDetail="cloud.google.com/infrastructure/"track-name="global infrastructure"track-type="footer link"> Global infrastructure </a> </li> <li class="devsite-footer-linkbox-item"> <a href="/customers/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 6)" track-metadata-child_headline="why google"track-name="customers and case studies"track-metadata-module="footer"track-type="footer link"track-metadata-eventDetail="cloud.google.com/customers/"track-metadata-position="footer"> Customers and case studies </a> </li> <li class="devsite-footer-linkbox-item"> <a href="/analyst-reports/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 7)" track-metadata-module="footer"track-name="analyst reports"track-metadata-child_headline="why google"track-metadata-position="footer"track-type="footer link"track-metadata-eventDetail="cloud.google.com/analyst-reports/"> Analyst reports </a> </li> <li class="devsite-footer-linkbox-item"> <a href="/whitepapers/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 8)" track-name="whitepapers"track-metadata-module="footer"track-type="footer link"track-metadata-position="footer"track-metadata-eventDetail="cloud.google.com/whitepapers/"track-metadata-child_headline="why google"> Whitepapers </a> </li> <li class="devsite-footer-linkbox-item"> <a href="//cloud.google.com/blog/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 9)" track-metadata-child_headline="engage"track-metadata-module="footer"track-type="footer link"track-metadata-position="footer"track-name="blog"track-metadata-eventDetail="cloud.google.com/blog/"> Blog </a> </li> </ul> </li> <li class="devsite-footer-linkbox "> <h3 class="devsite-footer-linkbox-heading no-link">Products and pricing</h3> <ul class="devsite-footer-linkbox-list"> <li class="devsite-footer-linkbox-item"> <a href="/pricing/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 1)" track-metadata-position="footer"track-metadata-eventDetail="cloud.google.com/pricing/"track-metadata-child_headline="products and pricing"track-metadata-module="footer"track-type="footer link"track-name="google cloud pricing"> Google Cloud pricing </a> </li> <li class="devsite-footer-linkbox-item"> <a href="//workspace.google.com/pricing.html" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 2)" track-name="google workspace pricing"target="_blank"track-metadata-child_headline="products and pricing"track-type="footer link"track-metadata-module="footer"track-metadata-eventDetail="workspace.google.com/pricing.html"track-metadata-position="footer"> Google Workspace pricing </a> </li> <li class="devsite-footer-linkbox-item"> <a href="/products/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 3)" track-metadata-module="footer"track-metadata-child_headline="products and pricing"track-type="footer link"track-metadata-position="footer"track-metadata-eventDetail="cloud.google.com/products/"track-name="see all products"> See all products </a> </li> </ul> </li> <li class="devsite-footer-linkbox "> <h3 class="devsite-footer-linkbox-heading no-link">Solutions</h3> <ul class="devsite-footer-linkbox-list"> <li class="devsite-footer-linkbox-item"> <a href="/solutions/infrastructure-modernization/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 1)" track-type="footer link"track-metadata-eventDetail="cloud.google.com/solutions/infrastructure-modernization/"track-metadata-module="footer"track-name="infrastructure modernization"track-metadata-position="footer"track-metadata-child_headline="solutions"> Infrastructure modernization </a> </li> <li class="devsite-footer-linkbox-item"> <a href="/solutions/databases/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 2)" track-metadata-module="footer"track-type="footer link"track-metadata-eventDetail="cloud.google.com/solutions/databases"track-metadata-child_headline="solutions"track-metadata-position="footer"track-name="databases"> Databases </a> </li> <li class="devsite-footer-linkbox-item"> <a href="/solutions/application-modernization/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 3)" track-metadata-module="footer"track-type="footer link"track-name="application development"track-metadata-eventDetail="cloud.google.com/solutions/application-modernization/"track-metadata-child_headline="solutions"track-metadata-position="footer"> Application modernization </a> </li> <li class="devsite-footer-linkbox-item"> <a href="/solutions/smart-analytics/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 4)" track-metadata-eventDetail="cloud.google.com/solutions/smart-analytics/"track-metadata-position="footer"track-type="footer link"track-metadata-module="footer"track-metadata-child_headline="solutions"track-name="smart analytics"> Smart analytics </a> </li> <li class="devsite-footer-linkbox-item"> <a href="/solutions/ai/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 5)" track-name="artificial intelligence"track-type="footer link"track-metadata-eventDetail="cloud.google.com/solutions/ai/"track-metadata-module="footer"track-metadata-child_headline="solutions"track-metadata-position="footer"> Artificial Intelligence </a> </li> <li class="devsite-footer-linkbox-item"> <a href="/solutions/security/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 6)" track-name="security"track-metadata-position="footer"track-metadata-eventDetail="cloud.google.com/solutions/security/"track-metadata-child_headline="solutions"track-metadata-module="footer"track-type="footer link"> Security </a> </li> <li class="devsite-footer-linkbox-item"> <a href="https://workspace.google.com/enterprise/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 7)" track-metadata-eventDetail="workspace.google.com/enterprise/"track-metadata-child_headline="solutions"track-name="productivity and work transformation"track-metadata-position="footer"track-metadata-module="footer"target="_blank"track-type="footer link"> Productivity & work transformation </a> </li> <li class="devsite-footer-linkbox-item"> <a href="/solutions/#industry-solutions" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 8)" track-metadata-position="footer"track-metadata-module="footer"track-metadata-eventDetail="cloud.google.com/solutions/#industry-solutions"track-type="footer link"track-name="industry solutions"track-metadata-child_headline="solutions"> Industry solutions </a> </li> <li class="devsite-footer-linkbox-item"> <a href="/solutions/devops/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 9)" track-metadata-module="footer"track-metadata-eventDetail="cloud.google.com/solutions/devops/"track-metadata-position="footer"track-metadata-child_headline="solutions"track-name="devops solutions"track-type="footer link"> DevOps solutions </a> </li> <li class="devsite-footer-linkbox-item"> <a href="/solutions/#section-14" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 10)" track-type="footer link"track-metadata-child_headline="solutions"track-metadata-position="footer"track-name="small business solutions"track-metadata-eventDetail="cloud.google.com/solutions/#section-14"track-metadata-module="footer"> Small business solutions </a> </li> <li class="devsite-footer-linkbox-item"> <a href="/solutions/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 11)" track-metadata-module="footer"track-metadata-child_headline="solutions"track-metadata-position="footer"track-metadata-eventDetail="cloud.google.com/solutions/"track-name="see all solutions"track-type="footer link"> See all solutions </a> </li> </ul> </li> <li class="devsite-footer-linkbox "> <h3 class="devsite-footer-linkbox-heading no-link">Resources</h3> <ul class="devsite-footer-linkbox-list"> <li class="devsite-footer-linkbox-item"> <a href="/affiliate-program/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 1)" track-metadata-position="footer"track-name="google cloud affiliate program"track-metadata-eventDetail="cloud.google.com/affiliate-program/"track-metadata-child_headline="resources"track-type="footer link"track-metadata-module="footer"> Google Cloud Affiliate Program </a> </li> <li class="devsite-footer-linkbox-item"> <a href="/docs/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 2)" track-metadata-position="footer"track-metadata-eventDetail="cloud.google.com/docs/"track-name="google cloud documentation"track-metadata-child_headline="resources"track-type="footer link"track-metadata-module="footer"> Google Cloud documentation </a> </li> <li class="devsite-footer-linkbox-item"> <a href="/docs/get-started/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 3)" track-type="footer link"track-name="google cloud quickstarts"track-metadata-module="footer"track-metadata-child_headline="resources"track-metadata-eventDetail="cloud.google.com/docs/get-started/"track-metadata-position="footer"> Google Cloud quickstarts </a> </li> <li class="devsite-footer-linkbox-item"> <a href="/marketplace/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 4)" track-metadata-module="footer"track-type="footer link"track-metadata-eventDetail="cloud.google.com/marketplace/"track-metadata-position="footer"track-metadata-child_headline="resources"track-name="google cloud marketplace"> Google Cloud Marketplace </a> </li> <li class="devsite-footer-linkbox-item"> <a href="/discover/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 5)" track-metadata-module="footer"track-metadata-position="footer"track-type="footer link"track-name="learn about cloud computing"track-metadata-eventDetail="learn/"track-metadata-child_headline="resources"> Learn about cloud computing </a> </li> <li class="devsite-footer-linkbox-item"> <a href="/support-hub/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 6)" track-metadata-eventDetail="cloud.google.com/support-hub/"track-name="support"track-metadata-child_headline="resources"track-metadata-position="footer"track-type="footer link"track-metadata-module="footer"> Support </a> </li> <li class="devsite-footer-linkbox-item"> <a href="/docs/samples" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 7)" track-metadata-module="footer"track-type="footer link"track-metadata-eventDetail="cloud.google.com/docs/samples"track-metadata-child_headline="resources"track-metadata-position="footer"track-name="code samples"> Code samples </a> </li> <li class="devsite-footer-linkbox-item"> <a href="/architecture/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 8)" track-metadata-module="footer"track-metadata-position="footer"track-type="footer link"track-name="cloud architecture center"track-metadata-child_headline="resources"track-metadata-eventDetail="cloud.google.com/architecture/"> Cloud Architecture Center </a> </li> <li class="devsite-footer-linkbox-item"> <a href="/learn/training/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 9)" track-metadata-position="footer"track-metadata-child_headline="resources"track-name="training"track-metadata-eventDetail="cloud.google.com/training/"track-metadata-module="footer"track-type="footer link"> Training </a> </li> <li class="devsite-footer-linkbox-item"> <a href="/learn/certification/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 10)" track-metadata-child_headline="resources"track-metadata-position="footer"track-type="footer link"track-name="certifications"track-metadata-eventDetail="cloud.google.com/certification"track-metadata-module="footer"> Certifications </a> </li> <li class="devsite-footer-linkbox-item"> <a href="//developers.google.com" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 11)" track-type="footer link"track-metadata-position="footer"track-name="google developers"track-metadata-child_headline="resources"target="_blank"track-metadata-eventDetail="developers.google.com"track-metadata-module="footer"> Google for Developers </a> </li> <li class="devsite-footer-linkbox-item"> <a href="/startup/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 12)" track-name="google cloud for startups"track-metadata-module="footer"track-type="footer link"track-metadata-eventDetail="cloud.google.com/startup/"track-metadata-child_headline="resources"track-metadata-position="footer"> Google Cloud for Startups </a> </li> <li class="devsite-footer-linkbox-item"> <a href="//status.cloud.google.com" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 13)" track-metadata-module="footer"track-metadata-position="footer"track-metadata-child_headline="resources"track-name="system status"target="_blank"track-type="footer link"track-metadata-eventDetail="status.cloud.google.com"> System status </a> </li> <li class="devsite-footer-linkbox-item"> <a href="/release-notes" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 14)" track-metadata-module="footer"track-metadata-child_headline="resources"track-metadata-position="footer"track-type="footer link"track-name="release notes"track-metadata-eventDetail="cloud.google.com/release-notes/"> Release Notes </a> </li> </ul> </li> <li class="devsite-footer-linkbox "> <h3 class="devsite-footer-linkbox-heading no-link">Engage</h3> <ul class="devsite-footer-linkbox-list"> <li class="devsite-footer-linkbox-item"> <a href="/contact/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 1)" track-type="footer link"track-metadata-module="footer"track-metadata-position="footer"track-name="contact sales"track-metadata-eventDetail="cloud.google.com/contact/"track-metadata-child_headline="engage"> Contact sales </a> </li> <li class="devsite-footer-linkbox-item"> <a href="//cloud.google.com/find-a-partner" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 2)" track-metadata-position="footer"target="_blank"track-metadata-eventDetail="cloud.google.com/find-a-partner"track-name="find a partner"track-metadata-child_headline="engage"track-type="footer link"track-metadata-module="footer"> Find a Partner </a> </li> <li class="devsite-footer-linkbox-item"> <a href="/partners/become-a-partner/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 3)" track-metadata-position="footer"track-type="footer link"track-metadata-module="footer"track-metadata-eventDetail="cloud.google.com/partners/become-a-partner/"track-name="become a partner"track-metadata-child_headline="engage"> Become a Partner </a> </li> <li class="devsite-footer-linkbox-item"> <a href="/events/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 4)" track-metadata-eventDetail="cloud.withgoogle.com/events"track-metadata-module="footer"track-metadata-position="footer"track-type="footer link"track-name="events"track-metadata-child_headline="engage"> Events </a> </li> <li class="devsite-footer-linkbox-item"> <a href="/podcasts/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 5)" track-metadata-module="footer"track-metadata-eventDetail="cloud.google.com/podcasts/"track-name="podcasts"track-metadata-position="footer"target="_blank"track-metadata-child_headline="engage"track-type="footer link"rel="noopener"> Podcasts </a> </li> <li class="devsite-footer-linkbox-item"> <a href="/developers/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 6)" track-metadata-position="footer"track-metadata-module="footer"track-type="footer link"track-metadata-eventDetail="cloud.google.com/developers/"track-metadata-child_headline="engage"track-name="developer center"> Developer Center </a> </li> <li class="devsite-footer-linkbox-item"> <a href="https://www.googlecloudpresscorner.com/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 7)" track-metadata-eventDetail="www.googlecloudpresscorner.com"target="_blank"track-name="press corner"track-metadata-child_headline="engage"track-metadata-position="footer"rel="noopener"track-type="footer link"track-metadata-module="footer"> Press Corner </a> </li> <li class="devsite-footer-linkbox-item"> <a href="//www.youtube.com/googlecloud" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 8)" track-metadata-module="footer"track-metadata-position="footer"track-metadata-eventDetail="www.youtube.com/googlecloud"track-metadata-child_headline="engage"rel="noopener"track-name="google cloud on youtube"track-type="footer link"target="_blank"> Google Cloud on YouTube </a> </li> <li class="devsite-footer-linkbox-item"> <a href="//www.youtube.com/googlecloudplatform" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 9)" rel="noopener"track-name="google cloud tech on youtube"track-metadata-position="footer"track-metadata-module="footer"track-type="footer link"track-metadata-child_headline="engage"track-metadata-eventDetail="www.youtube.com/googlecloudplatform"target="_blank"> Google Cloud Tech on YouTube </a> </li> <li class="devsite-footer-linkbox-item"> <a href="//x.com/googlecloud" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 10)" track-metadata-module="footer"track-type="footer link"track-name="follow on x"track-metadata-position="footer"track-metadata-child_headline="engage"target="_blank"rel="noopener"track-metadata-eventDetail="x.com/googlecloud"> Follow on X </a> </li> <li class="devsite-footer-linkbox-item"> <a href="//userresearch.google.com/?reserved=1&utm_source=website&Q_Language=en&utm_medium=own_srch&utm_campaign=CloudWebFooter&utm_term=0&utm_content=0&productTag=clou&campaignDate=jul19&pType=devel&referral_code=jk212693" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 11)" track-metadata-module="footer"track-name="join user research"target="_blank"track-metadata-eventDetail="userresearch.google.com/?reserved=1&utm_source=website&Q_Language=en&utm_medium=own_srch&utm_campaign=CloudWebFooter&utm_term=0&utm_content=0&productTag=clou&campaignDate=jul19&pType=devel&referral_code=jk212693"track-type="footer link"track-metadata-child_headline="engage"track-metadata-position="footer"> Join User Research </a> </li> <li class="devsite-footer-linkbox-item"> <a href="//careers.google.com/cloud" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 12)" track-type="footer link"track-name="we are hiring join google cloud"track-metadata-child_headline="engage"track-metadata-eventDetail="careers.google.com/cloud"track-metadata-module="footer"track-metadata-position="footer"target="_blank"> We're hiring. Join Google Cloud! </a> </li> <li class="devsite-footer-linkbox-item"> <a href="https://www.googlecloudcommunity.com/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 13)" track-name="google cloud community"track-type="footer link"track-metadata-position="footer"track-metadata-child_headline="engage"track-metadata-eventDetail="www.googlecloudcommunity.com"target="_blank"rel="noopener"track-metadata-module="footer"> Google Cloud Community </a> </li> </ul> </li> </ul> </nav> </devsite-footer-linkboxes> <devsite-footer-utility class="devsite-footer"> <div class="devsite-footer-utility nocontent"> <nav class="devsite-footer-utility-links" aria-label="Utility links"> <ul class="devsite-footer-utility-list"> <li class="devsite-footer-utility-item "> <a class="devsite-footer-utility-link gc-analytics-event" href="//about.google/" data-category="Site-Wide Custom Events" data-label="Footer About Google link" track-metadata-eventDetail="//about.google/" track-metadata-position="footer" track-metadata-module="utility footer" target="_blank" track-type="footer link" track-name="about google" > About Google </a> </li> <li class="devsite-footer-utility-item devsite-footer-privacy-link"> <a class="devsite-footer-utility-link gc-analytics-event" href="//policies.google.com/privacy" data-category="Site-Wide Custom Events" data-label="Footer Privacy link" track-metadata-eventDetail="//policies.google.com/privacy" track-name="privacy" track-metadata-position="footer" track-type="footer link" target="_blank" track-metadata-module="utility footer" > Privacy </a> </li> <li class="devsite-footer-utility-item "> <a class="devsite-footer-utility-link gc-analytics-event" href="//www.google.com/intl/en/policies/terms/regional.html" data-category="Site-Wide Custom Events" data-label="Footer Site terms link" track-metadata-module="utility footer" target="_blank" track-name="site terms" track-metadata-eventDetail="//www.google.com/intl/en/policies/terms/regional.html" track-metadata-position="footer" track-type="footer link" > Site terms </a> </li> <li class="devsite-footer-utility-item "> <a class="devsite-footer-utility-link gc-analytics-event" href="/product-terms/" data-category="Site-Wide Custom Events" data-label="Footer Google Cloud terms link" track-metadata-module="utility footer" track-metadata-position="footer" track-metadata-eventDetail="/product-terms/" track-name="google cloud terms" track-type="footer link" > Google Cloud terms </a> </li> <li class="devsite-footer-utility-item glue-cookie-notification-bar-control"> <a class="devsite-footer-utility-link gc-analytics-event" href="#" data-category="Site-Wide Custom Events" data-label="Footer Manage cookies link" track-metadata-eventDetail="#" aria-hidden="true" track-metadata-module="utility footer" track-type="footer link" track-name="Manage cookies" track-metadata-position="footer" > Manage cookies </a> </li> <li class="devsite-footer-utility-item devsite-footer-carbon-button"> <a class="devsite-footer-utility-link gc-analytics-event" href="/sustainability" data-category="Site-Wide Custom Events" data-label="Footer Our third decade of climate action: join us link" track-metadata-module="utility footer" track-metadata-position="footer" track-type="footer link" track-metadata-eventDetail="/sustainability/" track-name="Our third decade of climate action: join us" > Our third decade of climate action: join us </a> </li> <li class="devsite-footer-utility-item devsite-footer-utility-button"> <span class="devsite-footer-utility-description">Sign up for the Google Cloud newsletter</span> <a class="devsite-footer-utility-link gc-analytics-event" href="/newsletter/" data-category="Site-Wide Custom Events" data-label="Footer Subscribe link" track-type="footer link" track-metadata-module="utility footer" track-metadata-position="footer" track-name="subscribe" track-metadata-eventDetail="/newsletter/" > Subscribe </a> </li> </ul> <devsite-language-selector> <ul role="presentation"> <li role="presentation"> <a role="menuitem" lang="en" >English</a> </li> <li role="presentation"> <a role="menuitem" lang="de" >Deutsch</a> </li> <li role="presentation"> <a role="menuitem" lang="es_419" >Español – América Latina</a> </li> <li role="presentation"> <a role="menuitem" lang="fr" >Français</a> </li> <li role="presentation"> <a role="menuitem" lang="id" >Indonesia</a> </li> <li role="presentation"> <a role="menuitem" lang="it" >Italiano</a> </li> <li role="presentation"> <a role="menuitem" lang="pt_br" >Português – Brasil</a> </li> <li role="presentation"> <a role="menuitem" lang="zh_cn" >中文 – 简体</a> </li> <li role="presentation"> <a role="menuitem" lang="ja" >日本語</a> </li> <li role="presentation"> <a role="menuitem" lang="ko" >한국어</a> </li> </ul> </devsite-language-selector> </nav> </div> </devsite-footer-utility> <devsite-panel></devsite-panel> </section></section> <devsite-sitemask></devsite-sitemask> <devsite-snackbar></devsite-snackbar> <devsite-tooltip ></devsite-tooltip> <devsite-heading-link></devsite-heading-link> <devsite-analytics> <script type="application/json" analytics>[]</script> <script type="application/json" tag-management>{"at": "True", "ga4": [], "ga4p": [], "gtm": [{"id": "GTM-5CVQBG", "purpose": 1}], "parameters": {"internalUser": "False", "language": {"machineTranslated": "False", "requested": "en", "served": "en"}, "pageType": "article", "projectName": "Cloud Logging", "signedIn": "False", "tenant": "cloud", "recommendations": {"sourcePage": "", "sourceType": 0, "sourceRank": 0, "sourceIdenticalDescriptions": 0, "sourceTitleWords": 0, "sourceDescriptionWords": 0, "experiment": ""}, "experiment": {"ids": ""}}}</script> </devsite-analytics> <devsite-badger></devsite-badger> <cloudx-user></cloudx-user> <cloudx-free-trial-eligible-store freeTrialEligible='true'></cloudx-free-trial-eligible-store> <cloudx-pricing-socket></cloudx-pricing-socket> <cloudx-experiments type="TestAACodivertedExperiment" path="/virtual/TestAACodivertedExperiment/configureExperiment" location="SG" variant="variant2" ></cloudx-experiments> <cloudx-experiment-ids userCountry="SG" devsiteExperimentIdList="[39300004, 39300012, 39300021, 39300118, 39300195, 39300241, 39300319, 39300320, 39300327, 39300346, 39300354, 39300364, 39300373, 39300412, 39300421, 39300436, 39300471, 39300488, 39300496, 39300498]"> </cloudx-experiment-ids> <script nonce="r4HynycduPp26AtB7Hld/5kd50mdkS"> (function(d,e,v,s,i,t,E){d['GoogleDevelopersObject']=i; t=e.createElement(v);t.async=1;t.src=s;E=e.getElementsByTagName(v)[0]; E.parentNode.insertBefore(t,E);})(window, document, 'script', 'https://www.gstatic.com/devrel-devsite/prod/v870e399c64f7c43c99a3043db4b3a74327bb93d0914e84a0c3dba90bbfd67625/cloud/js/app_loader.js', '[2,"en",null,"/js/devsite_app_module.js","https://www.gstatic.com/devrel-devsite/prod/v870e399c64f7c43c99a3043db4b3a74327bb93d0914e84a0c3dba90bbfd67625","https://www.gstatic.com/devrel-devsite/prod/v870e399c64f7c43c99a3043db4b3a74327bb93d0914e84a0c3dba90bbfd67625/cloud","https://cloud-dot-devsite-v2-prod.appspot.com",null,null,["/_pwa/cloud/manifest.json","https://www.gstatic.com/devrel-devsite/prod/v870e399c64f7c43c99a3043db4b3a74327bb93d0914e84a0c3dba90bbfd67625/images/video-placeholder.svg","https://www.gstatic.com/devrel-devsite/prod/v870e399c64f7c43c99a3043db4b3a74327bb93d0914e84a0c3dba90bbfd67625/cloud/images/favicons/onecloud/favicon.ico","https://www.gstatic.com/devrel-devsite/prod/v870e399c64f7c43c99a3043db4b3a74327bb93d0914e84a0c3dba90bbfd67625/cloud/images/cloud-logo.svg","https://fonts.googleapis.com/css?family=Google+Sans:400,500,700|Google+Sans+Text:400,400italic,500,500italic,700,700italic|Roboto:400,400italic,500,500italic,700,700italic|Roboto+Mono:400,500,700&display=swap"],1,null,[1,6,8,12,14,17,21,25,50,52,63,70,75,76,80,87,91,92,93,97,98,100,101,102,103,104,105,107,108,109,110,112,113,116,117,118,120,122,124,125,126,127,129,130,131,132,133,134,135,136,138,140,141,147,148,149,151,152,156,157,158,159,161,163,164,168,169,170,179,180,182,183,186,191,193,196],"AIzaSyAP-jjEJBzmIyKR4F-3XITp8yM9T1gEEI8","AIzaSyB6xiKGDR5O3Ak2okS4rLkauxGUG7XP0hg","cloud.google.com","AIzaSyAQk0fBONSGUqCNznf6Krs82Ap1-NV6J4o","AIzaSyCCxcqdrZ_7QMeLCRY20bh_SXdAYqy70KY",null,null,null,["TpcFeatures__enable_required_headers","Profiles__enable_recognition_badges","Concierge__enable_pushui","Cloud__enable_cloud_shell_fte_user_flow","Profiles__enable_release_notes_notifications","Cloud__enable_legacy_calculator_redirect","Cloud__enable_cloud_shell","Cloud__enable_free_trial_server_call","Profiles__enable_complete_playlist_endpoint","TpcFeatures__enable_mirror_tenant_redirects","Profiles__enable_dashboard_curated_recommendations","Cloud__enable_cloudx_experiment_ids","Profiles__enable_awarding_url","Search__enable_page_map","Search__enable_ai_search_summaries_restricted","Cloud__enable_cloud_facet_chat","Cloud__enable_cloudx_ping","MiscFeatureFlags__enable_project_variables","DevPro__enable_developer_subscriptions","Profiles__enable_completecodelab_endpoint","MiscFeatureFlags__enable_explain_this_code","EngEduTelemetry__enable_engedu_telemetry","Search__enable_dynamic_content_confidential_banner","BookNav__enable_tenant_cache_key","Profiles__enable_developer_profiles_callout","MiscFeatureFlags__enable_firebase_utm","CloudShell__cloud_shell_button","MiscFeatureFlags__developers_footer_image","DevPro__enable_cloud_innovators_plus","Profiles__enable_profile_collections","MiscFeatureFlags__enable_variable_operator","Search__enable_ai_eligibility_checks","MiscFeatureFlags__enable_view_transitions","Profiles__enable_page_saving","CloudShell__cloud_code_overflow_menu","Profiles__require_profile_eligibility_for_signin","Experiments__reqs_query_experiments","Search__enable_suggestions_from_borg","Concierge__enable_concierge_restricted","Cloud__enable_cloud_dlp_service","MiscFeatureFlags__developers_footer_dark_image","Analytics__enable_clearcut_logging","Search__scope_to_project_tenant","Profiles__enable_public_developer_profiles","MiscFeatureFlags__emergency_css","Search__enable_ai_search_summaries","Cloud__enable_llm_concierge_chat"],null,null,"AIzaSyBLEMok-5suZ67qRPzx0qUtbnLmyT_kCVE","https://developerscontentserving-pa.clients6.google.com","AIzaSyCM4QpTRSqP5qI4Dvjt4OAScIN8sOUlO-k","https://developerscontentsearch-pa.clients6.google.com",1,4,1,"https://developerprofiles-pa.clients6.google.com",[2,"cloud","Google Cloud","cloud.google.com",null,"cloud-dot-devsite-v2-prod.appspot.com",null,null,[1,1,null,null,null,null,null,null,null,null,null,[1],null,null,null,null,null,1,[1],[null,null,null,[1,20],"/terms/recommendations"],[1],null,[1],[1,null,1],[1,1,null,null,1,null,["/vertex-ai/"]]],null,[22,null,null,null,null,null,"/images/cloud-logo.svg","/images/favicons/onecloud/apple-icon.png",null,null,null,null,1,1,1,[6,5],[],null,null,[[],[],[],[],[],[],[],[]],null,1,null,null,null,null,[]],[],null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,[6,1,14,15,22,23,29,37],null,[[null,null,null,null,null,null,[1,[["docType","Choose a content type",[["ApiReference",null,null,null,null,null,null,null,null,"API reference"],["Sample",null,null,null,null,null,null,null,null,"Code sample"],["ReferenceArchitecture",null,null,null,null,null,null,null,null,"Reference architecture"],["Tutorial",null,null,null,null,null,null,null,null,"Tutorial"]]],["category","Choose a topic",[["AiAndMachineLearning",null,null,null,null,null,null,null,null,"Artificial intelligence and machine learning (AI/ML)"],["ApplicationDevelopment",null,null,null,null,null,null,null,null,"Application development"],["BigDataAndAnalytics",null,null,null,null,null,null,null,null,"Big data and analytics"],["Compute",null,null,null,null,null,null,null,null,"Compute"],["Containers",null,null,null,null,null,null,null,null,"Containers"],["Databases",null,null,null,null,null,null,null,null,"Databases"],["HybridCloud",null,null,null,null,null,null,null,null,"Hybrid and multicloud"],["LoggingAndMonitoring",null,null,null,null,null,null,null,null,"Logging and monitoring"],["Migrations",null,null,null,null,null,null,null,null,"Migrations"],["Networking",null,null,null,null,null,null,null,null,"Networking"],["SecurityAndCompliance",null,null,null,null,null,null,null,null,"Security and compliance"],["Serverless",null,null,null,null,null,null,null,null,"Serverless"],["Storage",null,null,null,null,null,null,null,null,"Storage"]]]]]],[1],null,1],[[null,null,null,null,null,["GTM-5CVQBG"],null,null,null,null,null,[["GTM-5CVQBG",2]],1],null,null,null,null,null,1],"mwETRvWii0eU5NUYprb0Y9z5GVbc",4,null,null,null,null,null,null,null,null,null,null,null,null,null,"cloud.devsite.google"],null,"pk_live_5170syrHvgGVmSx9sBrnWtA5luvk9BwnVcvIi7HizpwauFG96WedXsuXh790rtij9AmGllqPtMLfhe2RSwD6Pn38V00uBCydV4m"]') </script> <devsite-a11y-announce></devsite-a11y-announce> </body> </html>

CINXE.COM

Configure CMEK for Cloud Logging | Google Cloud