Audit logs for Google Workspace | Cloud Logging

<!doctype html> <html lang="en" dir="ltr"> <head> <meta name="google-signin-client-id" content="721724668570-nbkv1cfusk7kk4eni4pjvepaus73b13t.apps.googleusercontent.com"> <meta name="google-signin-scope" content="profile email https://www.googleapis.com/auth/developerprofiles https://www.googleapis.com/auth/developerprofiles.award https://www.googleapis.com/auth/cloud-platform https://www.googleapis.com/auth/webhistory"> <meta property="og:site_name" content="Google Cloud"> <meta property="og:type" content="website"><meta name="theme-color" content="#039be5"><meta charset="utf-8"> <meta content="IE=Edge" http-equiv="X-UA-Compatible"> <meta name="viewport" content="width=device-width, initial-scale=1"> <link rel="manifest" href="/_pwa/cloud/manifest.json" crossorigin="use-credentials"> <link rel="preconnect" href="//www.gstatic.com" crossorigin> <link rel="preconnect" href="//fonts.gstatic.com" crossorigin> <link rel="preconnect" href="//fonts.googleapis.com" crossorigin> <link rel="preconnect" href="//apis.google.com" crossorigin> <link rel="preconnect" href="//www.google-analytics.com" crossorigin><link rel="stylesheet" href="//fonts.googleapis.com/css?family=Google+Sans:400,500,700|Google+Sans+Text:400,400italic,500,500italic,700,700italic|Roboto:400,400italic,500,500italic,700,700italic|Roboto+Mono:400,500,700&display=swap"> <link rel="stylesheet" href="//fonts.googleapis.com/css2?family=Material+Icons&family=Material+Symbols+Outlined&display=block"><link rel="stylesheet" href="https://www.gstatic.com/devrel-devsite/prod/v870e399c64f7c43c99a3043db4b3a74327bb93d0914e84a0c3dba90bbfd67625/cloud/css/app.css"> <link rel="shortcut icon" href="https://www.gstatic.com/devrel-devsite/prod/v870e399c64f7c43c99a3043db4b3a74327bb93d0914e84a0c3dba90bbfd67625/cloud/images/favicons/onecloud/favicon.ico"> <link rel="apple-touch-icon" href="https://www.gstatic.com/devrel-devsite/prod/v870e399c64f7c43c99a3043db4b3a74327bb93d0914e84a0c3dba90bbfd67625/cloud/images/favicons/onecloud/super_cloud.png"><link rel="canonical" href="https://cloud.google.com/logging/docs/audit/gsuite-audit-logging"><link rel="search" type="application/opensearchdescription+xml" title="Google Cloud" href="https://cloud.google.com/s/opensearch.xml"> <link rel="alternate" hreflang="en" href="https://cloud.google.com/logging/docs/audit/gsuite-audit-logging" /><link rel="alternate" hreflang="x-default" href="https://cloud.google.com/logging/docs/audit/gsuite-audit-logging" /><link rel="alternate" hreflang="zh-Hans" href="https://cloud.google.com/logging/docs/audit/gsuite-audit-logging?hl=zh-cn" /><link rel="alternate" hreflang="fr" href="https://cloud.google.com/logging/docs/audit/gsuite-audit-logging?hl=fr" /><link rel="alternate" hreflang="de" href="https://cloud.google.com/logging/docs/audit/gsuite-audit-logging?hl=de" /><link rel="alternate" hreflang="id" href="https://cloud.google.com/logging/docs/audit/gsuite-audit-logging?hl=id" /><link rel="alternate" hreflang="it" href="https://cloud.google.com/logging/docs/audit/gsuite-audit-logging?hl=it" /><link rel="alternate" hreflang="ja" href="https://cloud.google.com/logging/docs/audit/gsuite-audit-logging?hl=ja" /><link rel="alternate" hreflang="ko" href="https://cloud.google.com/logging/docs/audit/gsuite-audit-logging?hl=ko" /><link rel="alternate" hreflang="pt-BR" href="https://cloud.google.com/logging/docs/audit/gsuite-audit-logging?hl=pt-br" /><link rel="alternate" hreflang="es-419" href="https://cloud.google.com/logging/docs/audit/gsuite-audit-logging?hl=es-419" /><title>Audit logs for Google Workspace  |  Cloud Logging  |  Google Cloud</title> <meta property="og:title" content="Audit logs for Google Workspace  |  Cloud Logging  |  Google Cloud"><meta property="og:url" content="https://cloud.google.com/logging/docs/audit/gsuite-audit-logging"><meta property="og:image" content="https://cloud.google.com/_static/cloud/images/social-icon-google-cloud-1200-630.png"> <meta property="og:image:width" content="1200"> <meta property="og:image:height" content="630"><meta property="og:locale" content="en"><meta name="twitter:card" content="summary_large_image"><script type="application/ld+json"> { "@context": "https://schema.org", "@type": "Article", "headline": "Audit logs for Google Workspace" } </script><script type="application/ld+json"> { "@context": "https://schema.org", "@type": "BreadcrumbList", "itemListElement": [{ "@type": "ListItem", "position": 1, "name": "Google Cloud Observability", "item": "https://cloud.google.com/stackdriver/docs" },{ "@type": "ListItem", "position": 2, "name": "Logging", "item": "https://cloud.google.com/logging/docs" },{ "@type": "ListItem", "position": 3, "name": "Documentation", "item": "https://cloud.google.com/logging/docs" },{ "@type": "ListItem", "position": 4, "name": "Audit logs for Google Workspace", "item": "https://cloud.google.com/logging/docs/audit/gsuite-audit-logging" }] } </script> <link rel="stylesheet" href="/extras.css"></head> <body class="" template="page" theme="cloud-theme" type="article" layout="docs" free-trial display-toc pending> <devsite-progress type="indeterminate" id="app-progress"></devsite-progress> <section class="devsite-wrapper"> <devsite-cookie-notification-bar></devsite-cookie-notification-bar><cloudx-track userCountry="SG"></cloudx-track> <cloudx-utils-init></cloudx-utils-init> <devsite-header keep-tabs-visible> <div class="devsite-header--inner nocontent"> <div class="devsite-top-logo-row-wrapper-wrapper"> <div class="devsite-top-logo-row-wrapper"> <div class="devsite-top-logo-row"> <button type="button" id="devsite-hamburger-menu" class="devsite-header-icon-button button-flat material-icons gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Navigation menu button" visually-hidden aria-label="Open menu"> </button> <div class="devsite-product-name-wrapper"> <a href="/" class="devsite-site-logo-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Site logo" track-type="globalNav" track-name="googleCloud" track-metadata-position="nav" track-metadata-eventDetail="nav"> <picture> <img src="https://www.gstatic.com/devrel-devsite/prod/v870e399c64f7c43c99a3043db4b3a74327bb93d0914e84a0c3dba90bbfd67625/cloud/images/cloud-logo.svg" class="devsite-site-logo" alt="Google Cloud"> </picture> </a> <span class="devsite-product-name"> <ul class="devsite-breadcrumb-list" > <li class="devsite-breadcrumb-item devsite-has-google-wordmark"> </li> </ul> </span> </div> <div class="devsite-top-logo-row-middle"> <div class="devsite-header-upper-tabs"> <cloudx-tabs-nav class="upper-tabs"> <nav class="devsite-tabs-wrapper" aria-label="Upper tabs"> <tab class="devsite-active"> <a href="https://cloud.google.com/docs" track-metadata-eventdetail="https://cloud.google.com/docs" class="devsite-tabs-content gc-analytics-event " track-type="nav" track-metadata-position="nav - docs-home" track-metadata-module="primary nav" aria-label="Documentation, selected" data-category="Site-Wide Custom Events" data-label="Tab: Documentation" track-name="docs-home" track-link-column-type="single-column" > Documentation </a> </tab> <tab class="devsite-dropdown devsite-clickable "> <a href="https://cloud.google.com/docs/tech-area-overviews" track-metadata-eventdetail="https://cloud.google.com/docs/tech-area-overviews" class="devsite-tabs-content gc-analytics-event " track-type="nav" track-metadata-position="nav - technology-areas" track-metadata-module="primary nav" data-category="Site-Wide Custom Events" data-label="Tab: Technology areas" track-name="technology-areas" track-link-column-type="single-column" > Technology areas </a> <a href="#" role="button" aria-haspopup="true" aria-expanded="false" aria-label="Dropdown menu for Technology areas" track-type="nav" track-metadata-eventdetail="https://cloud.google.com/docs/tech-area-overviews" track-metadata-position="nav - technology-areas" track-metadata-module="primary nav" data-category="Site-Wide Custom Events" data-label="Tab: Technology areas" track-name="technology-areas" track-link-column-type="single-column" class="devsite-tabs-dropdown-toggle devsite-icon devsite-icon-arrow-drop-down"></a> <div class="devsite-tabs-dropdown" aria-label="submenu" hidden> <button class="devsite-tabs-close-button material-icons button-flat gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Close dropdown menu" aria-label="Close dropdown menu" track-type="nav" track-name="close" track-metadata-eventdetail="#" track-metadata-position="nav - technology-areas" track-metadata-module="tertiary nav">close</button> <div class="devsite-tabs-dropdown-content"> <div class="devsite-tabs-dropdown-column "> <ul class="devsite-tabs-dropdown-section "> <li class="devsite-nav-item"> <a href="https://cloud.google.com/docs/ai-ml" track-type="nav" track-metadata-eventdetail="https://cloud.google.com/docs/ai-ml" track-metadata-position="nav - technology-areas" track-metadata-module="tertiary nav" tooltip > <div class="devsite-nav-item-title"> AI and ML </div> </a> </li> <li class="devsite-nav-item"> <a href="https://cloud.google.com/docs/application-development" track-type="nav" track-metadata-eventdetail="https://cloud.google.com/docs/application-development" track-metadata-position="nav - technology-areas" track-metadata-module="tertiary nav" tooltip > <div class="devsite-nav-item-title"> Application development </div> </a> </li> <li class="devsite-nav-item"> <a href="https://cloud.google.com/docs/application-hosting" track-type="nav" track-metadata-eventdetail="https://cloud.google.com/docs/application-hosting" track-metadata-position="nav - technology-areas" track-metadata-module="tertiary nav" tooltip > <div class="devsite-nav-item-title"> Application hosting </div> </a> </li> <li class="devsite-nav-item"> <a href="https://cloud.google.com/docs/compute-area" track-type="nav" track-metadata-eventdetail="https://cloud.google.com/docs/compute-area" track-metadata-position="nav - technology-areas" track-metadata-module="tertiary nav" tooltip > <div class="devsite-nav-item-title"> Compute </div> </a> </li> <li class="devsite-nav-item"> <a href="https://cloud.google.com/docs/data" track-type="nav" track-metadata-eventdetail="https://cloud.google.com/docs/data" track-metadata-position="nav - technology-areas" track-metadata-module="tertiary nav" tooltip > <div class="devsite-nav-item-title"> Data analytics and pipelines </div> </a> </li> <li class="devsite-nav-item"> <a href="https://cloud.google.com/docs/databases" track-type="nav" track-metadata-eventdetail="https://cloud.google.com/docs/databases" track-metadata-position="nav - technology-areas" track-metadata-module="tertiary nav" tooltip > <div class="devsite-nav-item-title"> Databases </div> </a> </li> <li class="devsite-nav-item"> <a href="https://cloud.google.com/docs/dhm-cloud" track-type="nav" track-metadata-eventdetail="https://cloud.google.com/docs/dhm-cloud" track-metadata-position="nav - technology-areas" track-metadata-module="tertiary nav" tooltip > <div class="devsite-nav-item-title"> Distributed, hybrid, and multicloud </div> </a> </li> <li class="devsite-nav-item"> <a href="https://cloud.google.com/docs/generative-ai" track-type="nav" track-metadata-eventdetail="https://cloud.google.com/docs/generative-ai" track-metadata-position="nav - technology-areas" track-metadata-module="tertiary nav" tooltip > <div class="devsite-nav-item-title"> Generative AI </div> </a> </li> <li class="devsite-nav-item"> <a href="https://cloud.google.com/docs/industry" track-type="nav" track-metadata-eventdetail="https://cloud.google.com/docs/industry" track-metadata-position="nav - technology-areas" track-metadata-module="tertiary nav" tooltip > <div class="devsite-nav-item-title"> Industry solutions </div> </a> </li> <li class="devsite-nav-item"> <a href="https://cloud.google.com/docs/networking" track-type="nav" track-metadata-eventdetail="https://cloud.google.com/docs/networking" track-metadata-position="nav - technology-areas" track-metadata-module="tertiary nav" tooltip > <div class="devsite-nav-item-title"> Networking </div> </a> </li> <li class="devsite-nav-item"> <a href="https://cloud.google.com/docs/observability" track-type="nav" track-metadata-eventdetail="https://cloud.google.com/docs/observability" track-metadata-position="nav - technology-areas" track-metadata-module="tertiary nav" tooltip > <div class="devsite-nav-item-title"> Observability and monitoring </div> </a> </li> <li class="devsite-nav-item"> <a href="https://cloud.google.com/docs/security" track-type="nav" track-metadata-eventdetail="https://cloud.google.com/docs/security" track-metadata-position="nav - technology-areas" track-metadata-module="tertiary nav" tooltip > <div class="devsite-nav-item-title"> Security </div> </a> </li> <li class="devsite-nav-item"> <a href="https://cloud.google.com/docs/storage" track-type="nav" track-metadata-eventdetail="https://cloud.google.com/docs/storage" track-metadata-position="nav - technology-areas" track-metadata-module="tertiary nav" tooltip > <div class="devsite-nav-item-title"> Storage </div> </a> </li> </ul> </div> </div> </div> </tab> <tab class="devsite-dropdown devsite-clickable "> <a href="https://cloud.google.com/docs/cross-product-overviews" track-metadata-eventdetail="https://cloud.google.com/docs/cross-product-overviews" class="devsite-tabs-content gc-analytics-event " track-type="nav" track-metadata-position="nav - crossproduct" track-metadata-module="primary nav" data-category="Site-Wide Custom Events" data-label="Tab: Cross-product tools" track-name="crossproduct" track-link-column-type="single-column" > Cross-product tools </a> <a href="#" role="button" aria-haspopup="true" aria-expanded="false" aria-label="Dropdown menu for Cross-product tools" track-type="nav" track-metadata-eventdetail="https://cloud.google.com/docs/cross-product-overviews" track-metadata-position="nav - crossproduct" track-metadata-module="primary nav" data-category="Site-Wide Custom Events" data-label="Tab: Cross-product tools" track-name="crossproduct" track-link-column-type="single-column" class="devsite-tabs-dropdown-toggle devsite-icon devsite-icon-arrow-drop-down"></a> <div class="devsite-tabs-dropdown" aria-label="submenu" hidden> <button class="devsite-tabs-close-button material-icons button-flat gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Close dropdown menu" aria-label="Close dropdown menu" track-type="nav" track-name="close" track-metadata-eventdetail="#" track-metadata-position="nav - crossproduct" track-metadata-module="tertiary nav">close</button> <div class="devsite-tabs-dropdown-content"> <div class="devsite-tabs-dropdown-column "> <ul class="devsite-tabs-dropdown-section "> <li class="devsite-nav-item"> <a href="https://cloud.google.com/docs/access-resources" track-type="nav" track-metadata-eventdetail="https://cloud.google.com/docs/access-resources" track-metadata-position="nav - crossproduct" track-metadata-module="tertiary nav" tooltip > <div class="devsite-nav-item-title"> Access and resources management </div> </a> </li> <li class="devsite-nav-item"> <a href="https://cloud.google.com/docs/costs-usage" track-type="nav" track-metadata-eventdetail="https://cloud.google.com/docs/costs-usage" track-metadata-position="nav - crossproduct" track-metadata-module="tertiary nav" tooltip > <div class="devsite-nav-item-title"> Costs and usage management </div> </a> </li> <li class="devsite-nav-item"> <a href="https://cloud.google.com/docs/devtools" track-type="nav" track-metadata-eventdetail="https://cloud.google.com/docs/devtools" track-metadata-position="nav - crossproduct" track-metadata-module="tertiary nav" tooltip > <div class="devsite-nav-item-title"> Google Cloud SDK, languages, frameworks, and tools </div> </a> </li> <li class="devsite-nav-item"> <a href="https://cloud.google.com/docs/iac" track-type="nav" track-metadata-eventdetail="https://cloud.google.com/docs/iac" track-metadata-position="nav - crossproduct" track-metadata-module="tertiary nav" tooltip > <div class="devsite-nav-item-title"> Infrastructure as code </div> </a> </li> <li class="devsite-nav-item"> <a href="https://cloud.google.com/docs/migration" track-type="nav" track-metadata-eventdetail="https://cloud.google.com/docs/migration" track-metadata-position="nav - crossproduct" track-metadata-module="tertiary nav" tooltip > <div class="devsite-nav-item-title"> Migration </div> </a> </li> </ul> </div> </div> </div> </tab> <tab class="devsite-dropdown devsite-clickable "> <a href="https://cloud.google.com/" track-metadata-eventdetail="https://cloud.google.com/" class="devsite-tabs-content gc-analytics-event " track-type="nav" track-metadata-position="nav - related-sites" track-metadata-module="primary nav" data-category="Site-Wide Custom Events" data-label="Tab: Related sites" track-name="related-sites" track-link-column-type="single-column" > Related sites </a> <a href="#" role="button" aria-haspopup="true" aria-expanded="false" aria-label="Dropdown menu for Related sites" track-type="nav" track-metadata-eventdetail="https://cloud.google.com/" track-metadata-position="nav - related-sites" track-metadata-module="primary nav" data-category="Site-Wide Custom Events" data-label="Tab: Related sites" track-name="related-sites" track-link-column-type="single-column" class="devsite-tabs-dropdown-toggle devsite-icon devsite-icon-arrow-drop-down"></a> <div class="devsite-tabs-dropdown" aria-label="submenu" hidden> <button class="devsite-tabs-close-button material-icons button-flat gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Close dropdown menu" aria-label="Close dropdown menu" track-type="nav" track-name="close" track-metadata-eventdetail="#" track-metadata-position="nav - related-sites" track-metadata-module="tertiary nav">close</button> <div class="devsite-tabs-dropdown-content"> <div class="devsite-tabs-dropdown-column "> <ul class="devsite-tabs-dropdown-section "> <li class="devsite-nav-item"> <a href="https://cloud.google.com/" track-type="nav" track-metadata-eventdetail="https://cloud.google.com/" track-metadata-position="nav - related-sites" track-metadata-module="tertiary nav" tooltip > <div class="devsite-nav-item-title"> Google Cloud Home </div> </a> </li> <li class="devsite-nav-item"> <a href="https://cloud.google.com/free" track-type="nav" track-metadata-eventdetail="https://cloud.google.com/free" track-metadata-position="nav - related-sites" track-metadata-module="tertiary nav" tooltip > <div class="devsite-nav-item-title"> Free Trial and Free Tier </div> </a> </li> <li class="devsite-nav-item"> <a href="https://cloud.google.com/architecture" track-type="nav" track-metadata-eventdetail="https://cloud.google.com/architecture" track-metadata-position="nav - related-sites" track-metadata-module="tertiary nav" tooltip > <div class="devsite-nav-item-title"> Architecture Center </div> </a> </li> <li class="devsite-nav-item"> <a href="https://cloud.google.com/blog" track-type="nav" track-metadata-eventdetail="https://cloud.google.com/blog" track-metadata-position="nav - related-sites" track-metadata-module="tertiary nav" tooltip > <div class="devsite-nav-item-title"> Blog </div> </a> </li> <li class="devsite-nav-item"> <a href="https://cloud.google.com/contact" track-type="nav" track-metadata-eventdetail="https://cloud.google.com/contact" track-metadata-position="nav - related-sites" track-metadata-module="tertiary nav" tooltip > <div class="devsite-nav-item-title"> Contact Sales </div> </a> </li> <li class="devsite-nav-item"> <a href="https://cloud.google.com/developers" track-type="nav" track-metadata-eventdetail="https://cloud.google.com/developers" track-metadata-position="nav - related-sites" track-metadata-module="tertiary nav" tooltip > <div class="devsite-nav-item-title"> Google Cloud Developer Center </div> </a> </li> <li class="devsite-nav-item"> <a href="https://developers.google.com/" track-type="nav" track-metadata-eventdetail="https://developers.google.com/" track-metadata-position="nav - related-sites" track-metadata-module="tertiary nav" tooltip > <div class="devsite-nav-item-title"> Google Developer Center </div> </a> </li> <li class="devsite-nav-item"> <a href="https://console.cloud.google.com/marketplace" track-type="nav" track-metadata-eventdetail="https://console.cloud.google.com/marketplace" track-metadata-position="nav - related-sites" track-metadata-module="tertiary nav" tooltip > <div class="devsite-nav-item-title"> Google Cloud Marketplace </div> </a> </li> <li class="devsite-nav-item"> <a href="https://cloud.google.com/marketplace/docs" track-type="nav" track-metadata-eventdetail="https://cloud.google.com/marketplace/docs" track-metadata-position="nav - related-sites" track-metadata-module="tertiary nav" tooltip > <div class="devsite-nav-item-title"> Google Cloud Marketplace Documentation </div> </a> </li> <li class="devsite-nav-item"> <a href="https://www.cloudskillsboost.google/paths" track-type="nav" track-metadata-eventdetail="https://www.cloudskillsboost.google/paths" track-metadata-position="nav - related-sites" track-metadata-module="tertiary nav" tooltip > <div class="devsite-nav-item-title"> Google Cloud Skills Boost </div> </a> </li> <li class="devsite-nav-item"> <a href="https://cloud.google.com/solutions" track-type="nav" track-metadata-eventdetail="https://cloud.google.com/solutions" track-metadata-position="nav - related-sites" track-metadata-module="tertiary nav" tooltip > <div class="devsite-nav-item-title"> Google Cloud Solution Center </div> </a> </li> <li class="devsite-nav-item"> <a href="https://cloud.google.com/support-hub" track-type="nav" track-metadata-eventdetail="https://cloud.google.com/support-hub" track-metadata-position="nav - related-sites" track-metadata-module="tertiary nav" tooltip > <div class="devsite-nav-item-title"> Google Cloud Support </div> </a> </li> <li class="devsite-nav-item"> <a href="https://www.youtube.com/@googlecloudtech" track-type="nav" track-metadata-eventdetail="https://www.youtube.com/@googlecloudtech" track-metadata-position="nav - related-sites" track-metadata-module="tertiary nav" tooltip > <div class="devsite-nav-item-title"> Google Cloud Tech Youtube Channel </div> </a> </li> </ul> </div> </div> </div> </tab> </nav> </cloudx-tabs-nav> </div> <devsite-search enable-signin enable-search enable-suggestions project-name="Cloud Logging" tenant-name="Google Cloud" project-scope="/logging/docs" url-scoped="https://cloud.google.com/s/results/logging/docs" > <form class="devsite-search-form" action="https://cloud.google.com/s/results" method="GET"> <div class="devsite-search-container"> <button type="button" search-open class="devsite-search-button devsite-header-icon-button button-flat material-icons" aria-label="Open search"></button> <div class="devsite-searchbox"> <input aria-activedescendant="" aria-autocomplete="list" aria-label="Search" aria-expanded="false" aria-haspopup="listbox" autocomplete="off" class="devsite-search-field devsite-search-query" name="q" placeholder="Search" role="combobox" type="text" value="" > <div class="devsite-search-image material-icons" aria-hidden="true"> </div> <div class="devsite-search-shortcut-icon-container" aria-hidden="true"> <kbd class="devsite-search-shortcut-icon">/</kbd> </div> </div> </div> </form> <button type="button" search-close class="devsite-search-button devsite-header-icon-button button-flat material-icons" aria-label="Close search"></button> </devsite-search> </div> <devsite-language-selector> <ul role="presentation"> <li role="presentation"> <a role="menuitem" lang="en" >English</a> </li> <li role="presentation"> <a role="menuitem" lang="de" >Deutsch</a> </li> <li role="presentation"> <a role="menuitem" lang="es_419" >Español – América Latina</a> </li> <li role="presentation"> <a role="menuitem" lang="fr" >Français</a> </li> <li role="presentation"> <a role="menuitem" lang="id" >Indonesia</a> </li> <li role="presentation"> <a role="menuitem" lang="it" >Italiano</a> </li> <li role="presentation"> <a role="menuitem" lang="pt_br" >Português – Brasil</a> </li> <li role="presentation"> <a role="menuitem" lang="zh_cn" >中文 – 简体</a> </li> <li role="presentation"> <a role="menuitem" lang="ja" >日本語</a> </li> <li role="presentation"> <a role="menuitem" lang="ko" >한국어</a> </li> </ul> </devsite-language-selector> <devsite-user enable-profiles fp-auth id="devsite-user"> <span class="button devsite-top-button" aria-hidden="true" visually-hidden>Sign in</span> </devsite-user> </div> </div> </div> <div class="devsite-collapsible-section "> <div class="devsite-header-background"> <div class="devsite-product-id-row" hidden> <div class="devsite-product-description-row"> </div> </div> <div class="devsite-doc-set-nav-row"> <ul class="devsite-breadcrumb-list" > <li class="devsite-breadcrumb-item "> <a href="https://cloud.google.com/stackdriver/docs" class="devsite-breadcrumb-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Lower Header" data-value="1" track-type="globalNav" track-name="breadcrumb" track-metadata-position="1" track-metadata-eventdetail="Google Cloud Observability" > Google Cloud Observability </a> </li> </ul> <cloudx-tabs-nav class="lower-tabs"> <nav class="devsite-tabs-wrapper" aria-label="Lower tabs"> <tab class="devsite-active"> <a href="https://cloud.google.com/logging/docs/overview" track-metadata-eventdetail="https://cloud.google.com/logging/docs/overview" class="devsite-tabs-content gc-analytics-event " track-type="nav" track-metadata-position="nav - guides" track-metadata-module="primary nav" aria-label="Guides, selected" data-category="Site-Wide Custom Events" data-label="Tab: Guides" track-name="guides" > Guides </a> </tab> <tab > <a href="https://cloud.google.com/logging/docs/apis" track-metadata-eventdetail="https://cloud.google.com/logging/docs/apis" class="devsite-tabs-content gc-analytics-event " track-type="nav" track-metadata-position="nav - reference" track-metadata-module="primary nav" data-category="Site-Wide Custom Events" data-label="Tab: Reference" track-name="reference" > Reference </a> </tab> <tab > <a href="https://cloud.google.com/logging/docs/samples" track-metadata-eventdetail="https://cloud.google.com/logging/docs/samples" class="devsite-tabs-content gc-analytics-event " track-type="nav" track-metadata-position="nav - samples" track-metadata-module="primary nav" data-category="Site-Wide Custom Events" data-label="Tab: Samples" track-name="samples" > Samples </a> </tab> <tab > <a href="https://cloud.google.com/logging/quotas" track-metadata-eventdetail="https://cloud.google.com/logging/quotas" class="devsite-tabs-content gc-analytics-event " track-type="nav" track-metadata-position="nav - resources" track-metadata-module="primary nav" data-category="Site-Wide Custom Events" data-label="Tab: Resources" track-name="resources" > Resources </a> </tab> </nav> </cloudx-tabs-nav> <div class="devsite-product-button-row"> <a href="https://cloud.google.com/contact" class="cta-button-secondary button " data-overflow-container="left" data-overflow="devsite-tabs-wrapper" track-metadata-position="nav" track-type="contact" data-overflow-wrapper="tab" track-metadata-eventDetail="nav" track-name="sales" >Contact Us</a> <a href="//console.cloud.google.com/freetrial" class="cloud-free-trial-button cta-button-primary button-primary button cloud-button cloud-button--primary " track-type="freeTrial" track-metadata-eventDetail="nav" data-overflow-class="devsite-header-link devsite-top-button button cloud-free-trial-button cloud-free-trial-enabled cloud-button cloud-button--primary" data-overflow-container="right" track-metadata-position="nav" track-name="gcpCta" data-overflow="devsite-top-logo-row" referrerpolicy="no-referrer-when-downgrade" >Start free</a> </div> </div> </div> </div> </div> </devsite-header> <devsite-book-nav scrollbars > <div class="devsite-book-nav-filter" > <span class="filter-list-icon material-icons" aria-hidden="true"></span> <input type="text" placeholder="Filter" aria-label="Type to filter" role="searchbox"> <span class="filter-clear-button hidden" data-title="Clear filter" aria-label="Clear filter" role="button" tabindex="0"></span> </div> <nav class="devsite-book-nav devsite-nav nocontent" aria-label="Side menu"> <div class="devsite-mobile-header"> <button type="button" id="devsite-close-nav" class="devsite-header-icon-button button-flat material-icons gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Close navigation" aria-label="Close navigation"> </button> <div class="devsite-product-name-wrapper"> <a href="/" class="devsite-site-logo-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Site logo" track-type="globalNav" track-name="googleCloud" track-metadata-position="nav" track-metadata-eventDetail="nav"> <picture> <img src="https://www.gstatic.com/devrel-devsite/prod/v870e399c64f7c43c99a3043db4b3a74327bb93d0914e84a0c3dba90bbfd67625/cloud/images/cloud-logo.svg" class="devsite-site-logo" alt="Google Cloud"> </picture> </a> <span class="devsite-product-name"> <ul class="devsite-breadcrumb-list" > <li class="devsite-breadcrumb-item devsite-has-google-wordmark"> </li> </ul> </span> </div> </div> <div class="devsite-book-nav-wrapper"> <div class="devsite-mobile-nav-top"> <ul class="devsite-nav-list"> <li class="devsite-nav-item"> <a href="/docs" class="devsite-nav-title gc-analytics-event devsite-nav-active" data-category="Site-Wide Custom Events" data-label="Tab: Documentation" track-name="docs-home" track-link-column-type="single-column" data-category="Site-Wide Custom Events" data-label="Responsive Tab: Documentation" track-type="globalNav" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Documentation </span> </a> <ul class="devsite-nav-responsive-tabs"> <li class="devsite-nav-item"> <a href="/logging/docs/overview" class="devsite-nav-title gc-analytics-event devsite-nav-has-children devsite-nav-active" data-category="Site-Wide Custom Events" data-label="Tab: Guides" track-name="guides" data-category="Site-Wide Custom Events" data-label="Responsive Tab: Guides" track-type="globalNav" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip menu="_book"> Guides </span> <span class="devsite-nav-icon material-icons" data-icon="forward" menu="_book"> </span> </a> </li> <li class="devsite-nav-item"> <a href="/logging/docs/apis" class="devsite-nav-title gc-analytics-event devsite-nav-has-children " data-category="Site-Wide Custom Events" data-label="Tab: Reference" track-name="reference" data-category="Site-Wide Custom Events" data-label="Responsive Tab: Reference" track-type="globalNav" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Reference </span> <span class="devsite-nav-icon material-icons" data-icon="forward" > </span> </a> </li> <li class="devsite-nav-item"> <a href="/logging/docs/samples" class="devsite-nav-title gc-analytics-event devsite-nav-has-children " data-category="Site-Wide Custom Events" data-label="Tab: Samples" track-name="samples" data-category="Site-Wide Custom Events" data-label="Responsive Tab: Samples" track-type="globalNav" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Samples </span> <span class="devsite-nav-icon material-icons" data-icon="forward" > </span> </a> </li> <li class="devsite-nav-item"> <a href="/logging/quotas" class="devsite-nav-title gc-analytics-event devsite-nav-has-children " data-category="Site-Wide Custom Events" data-label="Tab: Resources" track-name="resources" data-category="Site-Wide Custom Events" data-label="Responsive Tab: Resources" track-type="globalNav" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Resources </span> <span class="devsite-nav-icon material-icons" data-icon="forward" > </span> </a> </li> </ul> </li> <li class="devsite-nav-item"> <a href="/docs/tech-area-overviews" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Tab: Technology areas" track-name="technology-areas" track-link-column-type="single-column" data-category="Site-Wide Custom Events" data-label="Responsive Tab: Technology areas" track-type="globalNav" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Technology areas </span> </a> <ul class="devsite-nav-responsive-tabs devsite-nav-has-menu "> <li class="devsite-nav-item"> <span class="devsite-nav-title" tooltip data-category="Site-Wide Custom Events" data-label="Tab: Technology areas" track-name="technology-areas" track-link-column-type="single-column" > <span class="devsite-nav-text" tooltip menu="Technology areas"> More </span> <span class="devsite-nav-icon material-icons" data-icon="forward" menu="Technology areas"> </span> </span> </li> </ul> </li> <li class="devsite-nav-item"> <a href="/docs/cross-product-overviews" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Tab: Cross-product tools" track-name="crossproduct" track-link-column-type="single-column" data-category="Site-Wide Custom Events" data-label="Responsive Tab: Cross-product tools" track-type="globalNav" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Cross-product tools </span> </a> <ul class="devsite-nav-responsive-tabs devsite-nav-has-menu "> <li class="devsite-nav-item"> <span class="devsite-nav-title" tooltip data-category="Site-Wide Custom Events" data-label="Tab: Cross-product tools" track-name="crossproduct" track-link-column-type="single-column" > <span class="devsite-nav-text" tooltip menu="Cross-product tools"> More </span> <span class="devsite-nav-icon material-icons" data-icon="forward" menu="Cross-product tools"> </span> </span> </li> </ul> </li> <li class="devsite-nav-item"> <a href="/" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Tab: Related sites" track-name="related-sites" track-link-column-type="single-column" data-category="Site-Wide Custom Events" data-label="Responsive Tab: Related sites" track-type="globalNav" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Related sites </span> </a> <ul class="devsite-nav-responsive-tabs devsite-nav-has-menu "> <li class="devsite-nav-item"> <span class="devsite-nav-title" tooltip data-category="Site-Wide Custom Events" data-label="Tab: Related sites" track-name="related-sites" track-link-column-type="single-column" > <span class="devsite-nav-text" tooltip menu="Related sites"> More </span> <span class="devsite-nav-icon material-icons" data-icon="forward" menu="Related sites"> </span> </span> </li> </ul> </li> <li class="devsite-nav-item"> <a href="//console.cloud.google.com/" class="devsite-nav-title gc-analytics-event " referrerpolicy="no-referrer-when-downgrade" track-name="console" track-metadata-eventDetail="nav" track-type="globalNav" track-metadata-position="nav" data-category="Site-Wide Custom Events" data-label="Responsive Tab: Console" track-type="navMenu" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Console </span> </a> </li> <li class="devsite-nav-item"> <a href="/contact" class="cta-button-secondary button" data-overflow-container="left" data-overflow="devsite-tabs-wrapper" track-metadata-position="nav" track-type="contact" data-overflow-wrapper="tab" track-metadata-eventDetail="nav" track-name="sales" data-category="Site-Wide Custom Events" data-label="Responsive Tab: Contact Us" track-type="navMenu" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Contact Us </span> </a> </li> <li class="devsite-nav-item"> <a href="//console.cloud.google.com/freetrial" class="cloud-free-trial-button cta-button-primary button-primary button cloud-button cloud-button--primary" track-type="freeTrial" track-metadata-eventDetail="nav" data-overflow-class="devsite-header-link devsite-top-button button cloud-free-trial-button cloud-free-trial-enabled cloud-button cloud-button--primary" data-overflow-container="right" track-metadata-position="nav" track-name="gcpCta" data-overflow="devsite-top-logo-row" referrerpolicy="no-referrer-when-downgrade" data-category="Site-Wide Custom Events" data-label="Responsive Tab: Start free" track-type="navMenu" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Start free </span> </a> </li> </ul> </div> <div class="devsite-mobile-nav-bottom"> <ul class="devsite-nav-list" menu="_book"> <li class="devsite-nav-item devsite-nav-heading"><div class="devsite-nav-title devsite-nav-title-no-path"> <span class="devsite-nav-text" tooltip>Discover</span> </div></li> <li class="devsite-nav-item"><a href="/logging/docs/overview" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/overview" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/overview" ><span class="devsite-nav-text" tooltip>Cloud Logging overview</span></a></li> <li class="devsite-nav-item devsite-nav-heading"><div class="devsite-nav-title devsite-nav-title-no-path"> <span class="devsite-nav-text" tooltip>Get started</span> </div></li> <li class="devsite-nav-item"><a href="/logging/docs/logging-gce-quickstart" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/logging-gce-quickstart" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/logging-gce-quickstart" ><span class="devsite-nav-text" tooltip>Quickstart: Logging for Compute Engine VMs</span></a></li> <li class="devsite-nav-item"><a href="/logging/docs/write-query-log-entries-gcloud" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/write-query-log-entries-gcloud" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/write-query-log-entries-gcloud" ><span class="devsite-nav-text" tooltip>Quickstart: Write and query logs with the gcloud CLI</span></a></li> <li class="devsite-nav-item"><a href="/logging/docs/write-query-log-entries-python" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/write-query-log-entries-python" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/write-query-log-entries-python" ><span class="devsite-nav-text" tooltip>Quickstart: Write and query logs using a Python script</span></a></li> <li class="devsite-nav-item devsite-nav-heading"><div class="devsite-nav-title devsite-nav-title-no-path"> <span class="devsite-nav-text" tooltip>Collect and write logs</span> </div></li> <li class="devsite-nav-item"><a href="/logging/docs/agent-or-library" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/agent-or-library" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/agent-or-library" ><span class="devsite-nav-text" tooltip>Which should you use: agent or client library?</span></a></li> <li class="devsite-nav-item"><a href="/logging/docs/structured-logging" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/structured-logging" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/structured-logging" ><span class="devsite-nav-text" tooltip>Structured logging</span></a></li> <li class="devsite-nav-item devsite-nav-expandable"><div class="devsite-expandable-nav"> <a class="devsite-nav-toggle" aria-hidden="true"></a><div class="devsite-nav-title devsite-nav-title-no-path" tabindex="0" role="button"> <span class="devsite-nav-text" tooltip>Collect logs from VMs and third-party applications</span> </div><ul class="devsite-nav-section"><li class="devsite-nav-item"><a href="/logging/docs/agent" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/agent" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/agent" ><span class="devsite-nav-text" tooltip>Manage logging agents on VMs</span></a></li><li class="devsite-nav-item devsite-nav-expandable"><div class="devsite-expandable-nav"> <a class="devsite-nav-toggle" aria-hidden="true"></a><div class="devsite-nav-title devsite-nav-title-no-path" tabindex="0" role="button"> <span class="devsite-nav-text" tooltip>Ops Agent</span> </div><ul class="devsite-nav-section"><li class="devsite-nav-item"><a href="/logging/docs/agent/ops-agent" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/agent/ops-agent" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/agent/ops-agent" ><span class="devsite-nav-text" tooltip>Ops Agent overview</span></a></li><li class="devsite-nav-item devsite-nav-expandable"><div class="devsite-expandable-nav"> <a class="devsite-nav-toggle" aria-hidden="true"></a><div class="devsite-nav-title devsite-nav-title-no-path" tabindex="0" role="button"> <span class="devsite-nav-text" tooltip>Install the Ops Agent</span> </div><ul class="devsite-nav-section"><li class="devsite-nav-item"><a href="/logging/docs/agent/ops-agent/install-index" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/agent/ops-agent/install-index" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/agent/ops-agent/install-index" ><span class="devsite-nav-text" tooltip>All installation methods</span></a></li><li class="devsite-nav-item"><a href="/logging/docs/agent/ops-agent/install-agent-vm-creation" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/agent/ops-agent/install-agent-vm-creation" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/agent/ops-agent/install-agent-vm-creation" ><span class="devsite-nav-text" tooltip>Install the Ops Agent during VM creation</span></a></li><li class="devsite-nav-item devsite-nav-expandable"><div class="devsite-expandable-nav"> <a class="devsite-nav-toggle" aria-hidden="true"></a><div class="devsite-nav-title devsite-nav-title-no-path" tabindex="0" role="button"> <span class="devsite-nav-text" tooltip>Install the Ops Agent on a fleet of VMs using agent policies</span> </div><ul class="devsite-nav-section"><li class="devsite-nav-item"><a href="/logging/docs/agent/ops-agent/agent-policies-overview" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/agent/ops-agent/agent-policies-overview" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/agent/ops-agent/agent-policies-overview" ><span class="devsite-nav-text" tooltip>Overview</span></a></li><li class="devsite-nav-item"><a href="/logging/docs/agent/ops-agent/agent-policies" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/agent/ops-agent/agent-policies" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/agent/ops-agent/agent-policies" ><span class="devsite-nav-text" tooltip>Use agent policies (GA)</span></a></li><li class="devsite-nav-item devsite-nav-beta"><a href="/logging/docs/agent/ops-agent/managing-agent-policies" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/agent/ops-agent/managing-agent-policies" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/agent/ops-agent/managing-agent-policies" ><span class="devsite-nav-text" tooltip>Use agent policies (beta)</span><span class="devsite-nav-icon material-icons" data-icon="beta" data-title="Beta" aria-hidden="true"></span></a></li></ul></div></li><li class="devsite-nav-item"><a href="/logging/docs/agent/ops-agent/fleet-installation" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/agent/ops-agent/fleet-installation" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/agent/ops-agent/fleet-installation" ><span class="devsite-nav-text" tooltip>Install the Ops Agent on a fleet of VMs using automation tools</span></a></li><li class="devsite-nav-item"><a href="/logging/docs/agent/ops-agent/installation" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/agent/ops-agent/installation" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/agent/ops-agent/installation" ><span class="devsite-nav-text" tooltip>Install the Ops Agent on individual VMs</span></a></li></ul></div></li><li class="devsite-nav-item devsite-nav-expandable"><div class="devsite-expandable-nav"> <a class="devsite-nav-toggle" aria-hidden="true"></a><div class="devsite-nav-title devsite-nav-title-no-path" tabindex="0" role="button"> <span class="devsite-nav-text" tooltip>Manage the Ops Agent</span> </div><ul class="devsite-nav-section"><li class="devsite-nav-item"><a href="/logging/docs/agent/ops-agent/authorization" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/agent/ops-agent/authorization" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/agent/ops-agent/authorization" ><span class="devsite-nav-text" tooltip>Authorize the Ops Agent</span></a></li><li class="devsite-nav-item"><a href="/logging/docs/agent/ops-agent/configuration" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/agent/ops-agent/configuration" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/agent/ops-agent/configuration" ><span class="devsite-nav-text" tooltip>Configure the Ops Agent</span></a></li><li class="devsite-nav-item"><a href="/logging/docs/agent/ops-agent/rotate-logs" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/agent/ops-agent/rotate-logs" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/agent/ops-agent/rotate-logs" ><span class="devsite-nav-text" tooltip>Use log rotation for Ops Agent self logs</span></a></li><li class="devsite-nav-item"><a href="/logging/docs/agent/ops-agent/manage-policies-auto-install" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/agent/ops-agent/manage-policies-auto-install" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/agent/ops-agent/manage-policies-auto-install" ><span class="devsite-nav-text" tooltip>Manage VMs covered the Ops Agent OS policy</span></a></li></ul></div></li><li class="devsite-nav-item devsite-nav-expandable"><div class="devsite-expandable-nav"> <a class="devsite-nav-toggle" aria-hidden="true"></a><div class="devsite-nav-title devsite-nav-title-no-path" tabindex="0" role="button"> <span class="devsite-nav-text" tooltip>Collect logs from third-party applications</span> </div><ul class="devsite-nav-section"><li class="devsite-nav-item"><a href="/logging/docs/agent/ops-agent/third-party" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/agent/ops-agent/third-party" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/agent/ops-agent/third-party" ><span class="devsite-nav-text" tooltip>Overview</span></a></li><li class="devsite-nav-item"><a href="/logging/docs/agent/ops-agent/third-party/active_directory_ds" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/agent/ops-agent/third-party/active_directory_ds" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/agent/ops-agent/third-party/active_directory_ds" ><span class="devsite-nav-text" tooltip>Active Directory Domain Services (AD DS)</span></a></li><li class="devsite-nav-item"><a href="/logging/docs/agent/ops-agent/third-party/aerospike" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/agent/ops-agent/third-party/aerospike" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/agent/ops-agent/third-party/aerospike" ><span class="devsite-nav-text" tooltip>Aerospike</span></a></li><li class="devsite-nav-item"><a href="/logging/docs/agent/ops-agent/third-party/activemq" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/agent/ops-agent/third-party/activemq" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/agent/ops-agent/third-party/activemq" ><span class="devsite-nav-text" tooltip>Apache ActiveMQ</span></a></li><li class="devsite-nav-item"><a href="/logging/docs/agent/ops-agent/third-party/cassandra" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/agent/ops-agent/third-party/cassandra" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/agent/ops-agent/third-party/cassandra" ><span class="devsite-nav-text" tooltip>Apache Cassandra</span></a></li><li class="devsite-nav-item"><a href="/logging/docs/agent/ops-agent/third-party/couchdb" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/agent/ops-agent/third-party/couchdb" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/agent/ops-agent/third-party/couchdb" ><span class="devsite-nav-text" tooltip>Apache CouchDB</span></a></li><li class="devsite-nav-item"><a href="/logging/docs/agent/ops-agent/third-party/flink" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/agent/ops-agent/third-party/flink" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/agent/ops-agent/third-party/flink" ><span class="devsite-nav-text" tooltip>Apache Flink</span></a></li><li class="devsite-nav-item"><a href="/logging/docs/agent/ops-agent/third-party/hadoop" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/agent/ops-agent/third-party/hadoop" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/agent/ops-agent/third-party/hadoop" ><span class="devsite-nav-text" tooltip>Apache Hadoop</span></a></li><li class="devsite-nav-item"><a href="/logging/docs/agent/ops-agent/third-party/hbase" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/agent/ops-agent/third-party/hbase" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/agent/ops-agent/third-party/hbase" ><span class="devsite-nav-text" tooltip>Apache HBase</span></a></li><li class="devsite-nav-item"><a href="/logging/docs/agent/ops-agent/third-party/kafka" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/agent/ops-agent/third-party/kafka" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/agent/ops-agent/third-party/kafka" ><span class="devsite-nav-text" tooltip>Apache Kafka</span></a></li><li class="devsite-nav-item"><a href="/logging/docs/agent/ops-agent/third-party/solr" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/agent/ops-agent/third-party/solr" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/agent/ops-agent/third-party/solr" ><span class="devsite-nav-text" tooltip>Apache Solr</span></a></li><li class="devsite-nav-item"><a href="/logging/docs/agent/ops-agent/third-party/tomcat" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/agent/ops-agent/third-party/tomcat" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/agent/ops-agent/third-party/tomcat" ><span class="devsite-nav-text" tooltip>Apache Tomcat</span></a></li><li class="devsite-nav-item"><a href="/logging/docs/agent/ops-agent/third-party/apache" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/agent/ops-agent/third-party/apache" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/agent/ops-agent/third-party/apache" ><span class="devsite-nav-text" tooltip>Apache Web Server (httpd)</span></a></li><li class="devsite-nav-item"><a href="/logging/docs/agent/ops-agent/third-party/zookeeper" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/agent/ops-agent/third-party/zookeeper" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/agent/ops-agent/third-party/zookeeper" ><span class="devsite-nav-text" tooltip>Apache ZooKeeper</span></a></li><li class="devsite-nav-item"><a href="/logging/docs/agent/ops-agent/third-party/couchbase" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/agent/ops-agent/third-party/couchbase" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/agent/ops-agent/third-party/couchbase" ><span class="devsite-nav-text" tooltip>Couchbase</span></a></li><li class="devsite-nav-item"><a href="/logging/docs/agent/ops-agent/third-party/elasticsearch" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/agent/ops-agent/third-party/elasticsearch" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/agent/ops-agent/third-party/elasticsearch" ><span class="devsite-nav-text" tooltip>Elasticsearch</span></a></li><li class="devsite-nav-item"><a href="/logging/docs/agent/ops-agent/third-party/vault" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/agent/ops-agent/third-party/vault" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/agent/ops-agent/third-party/vault" ><span class="devsite-nav-text" tooltip>Hashicorp Vault</span></a></li><li class="devsite-nav-item"><a href="/logging/docs/agent/ops-agent/third-party/iis" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/agent/ops-agent/third-party/iis" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/agent/ops-agent/third-party/iis" ><span class="devsite-nav-text" tooltip>Internet Information Services</span></a></li><li class="devsite-nav-item"><a href="/logging/docs/agent/ops-agent/third-party/jetty" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/agent/ops-agent/third-party/jetty" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/agent/ops-agent/third-party/jetty" ><span class="devsite-nav-text" tooltip>Jetty</span></a></li><li class="devsite-nav-item"><a href="/logging/docs/agent/ops-agent/third-party/mariadb" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/agent/ops-agent/third-party/mariadb" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/agent/ops-agent/third-party/mariadb" ><span class="devsite-nav-text" tooltip>MariaDB</span></a></li><li class="devsite-nav-item"><a href="/logging/docs/agent/ops-agent/third-party/memcached" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/agent/ops-agent/third-party/memcached" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/agent/ops-agent/third-party/memcached" ><span class="devsite-nav-text" tooltip>Memcached</span></a></li><li class="devsite-nav-item"><a href="/logging/docs/agent/ops-agent/third-party/mongodb" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/agent/ops-agent/third-party/mongodb" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/agent/ops-agent/third-party/mongodb" ><span class="devsite-nav-text" tooltip>MongoDB</span></a></li><li class="devsite-nav-item"><a href="/logging/docs/agent/ops-agent/third-party/mysql" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/agent/ops-agent/third-party/mysql" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/agent/ops-agent/third-party/mysql" ><span class="devsite-nav-text" tooltip>MySQL</span></a></li><li class="devsite-nav-item"><a href="/logging/docs/agent/ops-agent/third-party/nginx" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/agent/ops-agent/third-party/nginx" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/agent/ops-agent/third-party/nginx" ><span class="devsite-nav-text" tooltip>nginx</span></a></li><li class="devsite-nav-item"><a href="/logging/docs/agent/ops-agent/third-party/oracledb" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/agent/ops-agent/third-party/oracledb" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/agent/ops-agent/third-party/oracledb" ><span class="devsite-nav-text" tooltip>Oracle Database</span></a></li><li class="devsite-nav-item"><a href="/logging/docs/agent/ops-agent/third-party/postgresql" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/agent/ops-agent/third-party/postgresql" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/agent/ops-agent/third-party/postgresql" ><span class="devsite-nav-text" tooltip>PostgreSQL</span></a></li><li class="devsite-nav-item"><a href="/logging/docs/agent/ops-agent/third-party/rabbitmq" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/agent/ops-agent/third-party/rabbitmq" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/agent/ops-agent/third-party/rabbitmq" ><span class="devsite-nav-text" tooltip>RabbitMQ</span></a></li><li class="devsite-nav-item"><a href="/logging/docs/agent/ops-agent/third-party/redis" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/agent/ops-agent/third-party/redis" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/agent/ops-agent/third-party/redis" ><span class="devsite-nav-text" tooltip>Redis</span></a></li><li class="devsite-nav-item"><a href="/logging/docs/agent/ops-agent/third-party/saphana" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/agent/ops-agent/third-party/saphana" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/agent/ops-agent/third-party/saphana" ><span class="devsite-nav-text" tooltip>SAP HANA</span></a></li><li class="devsite-nav-item"><a href="/logging/docs/agent/ops-agent/third-party/varnish" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/agent/ops-agent/third-party/varnish" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/agent/ops-agent/third-party/varnish" ><span class="devsite-nav-text" tooltip>Varnish HTTP Cache</span></a></li><li class="devsite-nav-item"><a href="/logging/docs/agent/ops-agent/third-party/wildfly" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/agent/ops-agent/third-party/wildfly" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/agent/ops-agent/third-party/wildfly" ><span class="devsite-nav-text" tooltip>WildFly</span></a></li></ul></div></li></ul></div></li><li class="devsite-nav-item devsite-nav-expandable"><div class="devsite-expandable-nav"> <a class="devsite-nav-toggle" aria-hidden="true"></a><div class="devsite-nav-title devsite-nav-title-no-path" tabindex="0" role="button"> <span class="devsite-nav-text" tooltip>Legacy Logging agent</span> </div><ul class="devsite-nav-section"><li class="devsite-nav-item"><a href="/logging/docs/agent/logging" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/agent/logging" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/agent/logging" ><span class="devsite-nav-text" tooltip>Logging agent overview</span></a></li><li class="devsite-nav-item devsite-nav-expandable"><div class="devsite-expandable-nav"> <a class="devsite-nav-toggle" aria-hidden="true"></a><div class="devsite-nav-title devsite-nav-title-no-path" tabindex="0" role="button"> <span class="devsite-nav-text" tooltip>Install the Logging agent</span> </div><ul class="devsite-nav-section"><li class="devsite-nav-item"><a href="/logging/docs/agent/logging/install-index" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/agent/logging/install-index" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/agent/logging/install-index" ><span class="devsite-nav-text" tooltip>All installation methods</span></a></li><li class="devsite-nav-item devsite-nav-beta"><a href="/logging/docs/agent/logging/managing-agent-policies" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/agent/logging/managing-agent-policies" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/agent/logging/managing-agent-policies" ><span class="devsite-nav-text" tooltip>Install the Logging agent on a fleet of VMs using agent policies</span><span class="devsite-nav-icon material-icons" data-icon="beta" data-title="Beta" aria-hidden="true"></span></a></li><li class="devsite-nav-item"><a href="/logging/docs/agent/logging/fleet-installation" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/agent/logging/fleet-installation" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/agent/logging/fleet-installation" ><span class="devsite-nav-text" tooltip>Install the Logging agent on a fleet of VMs using automation tools</span></a></li><li class="devsite-nav-item"><a href="/logging/docs/agent/logging/installation" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/agent/logging/installation" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/agent/logging/installation" ><span class="devsite-nav-text" tooltip>Install the Logging agent on individual VMs</span></a></li></ul></div></li><li class="devsite-nav-item devsite-nav-expandable"><div class="devsite-expandable-nav"> <a class="devsite-nav-toggle" aria-hidden="true"></a><div class="devsite-nav-title devsite-nav-title-no-path" tabindex="0" role="button"> <span class="devsite-nav-text" tooltip>Manage the Logging agent</span> </div><ul class="devsite-nav-section"><li class="devsite-nav-item"><a href="/logging/docs/agent/logging/authorization" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/agent/logging/authorization" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/agent/logging/authorization" ><span class="devsite-nav-text" tooltip>Authorize the Logging agent</span></a></li><li class="devsite-nav-item"><a href="/logging/docs/agent/logging/configuration" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/agent/logging/configuration" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/agent/logging/configuration" ><span class="devsite-nav-text" tooltip>Configure the Logging agent</span></a></li><li class="devsite-nav-item"><a href="/logging/docs/agent/default-logs" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/agent/default-logs" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/agent/default-logs" ><span class="devsite-nav-text" tooltip>Default agent logs</span></a></li></ul></div></li></ul></div></li></ul></div></li> <li class="devsite-nav-item"><a href="/logging/docs/bindplane/on-premise-hybrid-logging" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/bindplane/on-premise-hybrid-logging" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/bindplane/on-premise-hybrid-logging" ><span class="devsite-nav-text" tooltip>Collect on-premises and multi-cloud logs</span></a></li> <li class="devsite-nav-item"><a href="/logging/docs/integrate/gke" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/integrate/gke" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/integrate/gke" ><span class="devsite-nav-text" tooltip>Collect Kubernetes Engine logs</span></a></li> <li class="devsite-nav-item devsite-nav-expandable"><div class="devsite-expandable-nav"> <a class="devsite-nav-toggle" aria-hidden="true"></a><div class="devsite-nav-title devsite-nav-title-no-path" tabindex="0" role="button"> <span class="devsite-nav-text" tooltip>Write application logs</span> </div><ul class="devsite-nav-section"><li class="devsite-nav-item"><a href="/logging/docs/setup" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/setup" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/setup" ><span class="devsite-nav-text" tooltip>Logging libraries overview</span></a></li><li class="devsite-nav-item"><a href="/logging/docs/integrate/dotnet" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/integrate/dotnet" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/integrate/dotnet" ><span class="devsite-nav-text" tooltip>C#: Use .NET logging frameworks or the API</span></a></li><li class="devsite-nav-item"><a href="/logging/docs/setup/java" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/setup/java" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/setup/java" ><span class="devsite-nav-text" tooltip>Java: Use Logback or java.util.logging</span></a></li><li class="devsite-nav-item"><a href="/logging/docs/setup/go" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/setup/go" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/setup/go" ><span class="devsite-nav-text" tooltip>Go: Use standard logging</span></a></li><li class="devsite-nav-item"><a href="/logging/docs/setup/nodejs" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/setup/nodejs" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/setup/nodejs" ><span class="devsite-nav-text" tooltip>Node.js: Use Winston and Bunyan</span></a></li><li class="devsite-nav-item"><a href="/logging/docs/setup/php" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/setup/php" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/setup/php" ><span class="devsite-nav-text" tooltip>PHP: Use PSR-3 logger</span></a></li><li class="devsite-nav-item"><a href="/logging/docs/setup/python" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/setup/python" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/setup/python" ><span class="devsite-nav-text" tooltip>Python: Use standard logging</span></a></li><li class="devsite-nav-item"><a href="/logging/docs/setup/ruby" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/setup/ruby" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/setup/ruby" ><span class="devsite-nav-text" tooltip>Ruby: Use the Stackdriver gem</span></a></li></ul></div></li> <li class="devsite-nav-item devsite-nav-heading"><div class="devsite-nav-title devsite-nav-title-no-path"> <span class="devsite-nav-text" tooltip>Control access</span> </div></li> <li class="devsite-nav-item"><a href="/logging/docs/access-control" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/access-control" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/access-control" ><span class="devsite-nav-text" tooltip>Access control with IAM</span></a></li> <li class="devsite-nav-item"><a href="/logging/docs/logs-views" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/logs-views" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/logs-views" ><span class="devsite-nav-text" tooltip>Configure log views on a log bucket</span></a></li> <li class="devsite-nav-item"><a href="/logging/docs/field-level-acl" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/field-level-acl" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/field-level-acl" ><span class="devsite-nav-text" tooltip>Configure field-level access</span></a></li> <li class="devsite-nav-item"><a href="/logging/docs/routing/managed-encryption-storage" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/routing/managed-encryption-storage" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/routing/managed-encryption-storage" ><span class="devsite-nav-text" tooltip>Configure CMEK for log buckets</span></a></li> <li class="devsite-nav-item devsite-nav-expandable"><div class="devsite-expandable-nav"> <a class="devsite-nav-toggle" aria-hidden="true"></a><div class="devsite-nav-title devsite-nav-title-no-path" tabindex="0" role="button"> <span class="devsite-nav-text" tooltip>Configure default resource settings for Logging</span> </div><ul class="devsite-nav-section"><li class="devsite-nav-item"><a href="/logging/docs/default-settings" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/default-settings" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/default-settings" ><span class="devsite-nav-text" tooltip>Configure default resource settings</span></a></li><li class="devsite-nav-item"><a href="/logging/docs/routing/managed-encryption" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/routing/managed-encryption" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/routing/managed-encryption" ><span class="devsite-nav-text" tooltip>Configure CMEK for Logging</span></a></li></ul></div></li> <li class="devsite-nav-item"><a href="/logging/docs/regionalized-logs" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/regionalized-logs" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/regionalized-logs" ><span class="devsite-nav-text" tooltip>Regionalize your logs</span></a></li> <li class="devsite-nav-item devsite-nav-heading"><div class="devsite-nav-title devsite-nav-title-no-path"> <span class="devsite-nav-text" tooltip>Query, analyze, and view logs</span> </div></li> <li class="devsite-nav-item"><a href="/logging/docs/log-analytics" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/log-analytics" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/log-analytics" ><span class="devsite-nav-text" tooltip>Query and view logs overview</span></a></li> <li class="devsite-nav-item devsite-nav-expandable"><div class="devsite-expandable-nav"> <a class="devsite-nav-toggle" aria-hidden="true"></a><div class="devsite-nav-title devsite-nav-title-no-path" tabindex="0" role="button"> <span class="devsite-nav-text" tooltip>Logs Explorer: Query and view logs</span> </div><ul class="devsite-nav-section"><li class="devsite-nav-item"><a href="/logging/docs/log-scope/create-and-manage" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/log-scope/create-and-manage" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/log-scope/create-and-manage" ><span class="devsite-nav-text" tooltip>Configure a log scope</span></a></li><li class="devsite-nav-item"><a href="/logging/docs/view/logs-explorer-interface" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/view/logs-explorer-interface" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/view/logs-explorer-interface" ><span class="devsite-nav-text" tooltip>Logs Explorer overview</span></a></li><li class="devsite-nav-item"><a href="/logging/docs/view/building-queries" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/view/building-queries" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/view/building-queries" ><span class="devsite-nav-text" tooltip>Build queries using the Logging query language</span></a></li><li class="devsite-nav-item"><a href="/logging/docs/view/correlate-logs" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/view/correlate-logs" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/view/correlate-logs" ><span class="devsite-nav-text" tooltip>Correlate log entries</span></a></li><li class="devsite-nav-item"><a href="/logging/docs/analyze/find-logs-error-groups" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/analyze/find-logs-error-groups" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/analyze/find-logs-error-groups" ><span class="devsite-nav-text" tooltip>Find log entries with error groups</span></a></li><li class="devsite-nav-item"><a href="/logging/docs/view/logging-query-language" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/view/logging-query-language" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/view/logging-query-language" ><span class="devsite-nav-text" tooltip>Logging query language</span></a></li><li class="devsite-nav-item"><a href="/logging/docs/view/query-library" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/view/query-library" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/view/query-library" ><span class="devsite-nav-text" tooltip>Sample queries</span></a></li><li class="devsite-nav-item"><a href="/logging/docs/log4j2-vulnerability" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/log4j2-vulnerability" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/log4j2-vulnerability" ><span class="devsite-nav-text" tooltip>Example: Detect Log4Shell security exploits</span></a></li></ul></div></li> <li class="devsite-nav-item devsite-nav-expandable"><div class="devsite-expandable-nav"> <a class="devsite-nav-toggle" aria-hidden="true"></a><div class="devsite-nav-title devsite-nav-title-no-path" tabindex="0" role="button"> <span class="devsite-nav-text" tooltip>Log Analytics: Query and analyze logs</span> </div><ul class="devsite-nav-section"><li class="devsite-nav-item"><a href="/logging/docs/analyze/query-and-view" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/analyze/query-and-view" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/analyze/query-and-view" ><span class="devsite-nav-text" tooltip>Query and analyze logs in Log Analytics</span></a></li><li class="devsite-nav-item"><a href="/logging/docs/analyze/charts" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/analyze/charts" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/analyze/charts" ><span class="devsite-nav-text" tooltip>Chart SQL query results</span></a></li><li class="devsite-nav-item"><a href="/logging/docs/analyze/save-share-query" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/analyze/save-share-query" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/analyze/save-share-query" ><span class="devsite-nav-text" tooltip>Save and share SQL queries</span></a></li><li class="devsite-nav-item"><a href="/logging/docs/analyze/examples" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/analyze/examples" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/analyze/examples" ><span class="devsite-nav-text" tooltip>Sample SQL queries</span></a></li><li class="devsite-nav-item devsite-nav-preview"><a href="/logging/docs/analyze/log-volume" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/analyze/log-volume" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/analyze/log-volume" ><span class="devsite-nav-text" tooltip>Analyze log volume</span><span class="devsite-nav-icon material-icons" data-icon="preview" data-title="Preview" aria-hidden="true"></span></a></li><li class="devsite-nav-item"><a href="/logging/docs/analyze/analyze-audit-logs" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/analyze/analyze-audit-logs" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/analyze/analyze-audit-logs" ><span class="devsite-nav-text" tooltip>SQL queries for security insights</span></a></li><li class="devsite-nav-item devsite-nav-expandable"><div class="devsite-expandable-nav"> <a class="devsite-nav-toggle" aria-hidden="true"></a><div class="devsite-nav-title devsite-nav-title-no-path" tabindex="0" role="button"> <span class="devsite-nav-text" tooltip>Create alerts or use BigQuery</span> </div><ul class="devsite-nav-section"><li class="devsite-nav-item"><a href="/logging/docs/analyze/query-linked-dataset" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/analyze/query-linked-dataset" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/analyze/query-linked-dataset" ><span class="devsite-nav-text" tooltip>Query a linked BigQuery dataset</span></a></li><li class="devsite-nav-item devsite-nav-preview"><a href="/logging/docs/analyze/sql-in-alerting" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/analyze/sql-in-alerting" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/analyze/sql-in-alerting" ><span class="devsite-nav-text" tooltip>Monitor your SQL query results with an alerting policy</span><span class="devsite-nav-icon material-icons" data-icon="preview" data-title="Preview" aria-hidden="true"></span></a></li></ul></div></li><li class="devsite-nav-item"><a href="/logging/docs/analyze/troubleshoot" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/analyze/troubleshoot" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/analyze/troubleshoot" ><span class="devsite-nav-text" tooltip>Troubleshoot Log Analytics configuration</span></a></li></ul></div></li> <li class="devsite-nav-item devsite-nav-expandable"><div class="devsite-expandable-nav"> <a class="devsite-nav-toggle" aria-hidden="true"></a><div class="devsite-nav-title devsite-nav-title-no-path" tabindex="0" role="button"> <span class="devsite-nav-text" tooltip>View logs in supported destinations</span> </div><ul class="devsite-nav-section"><li class="devsite-nav-item"><a href="/logging/docs/export/using_exported_logs" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/export/using_exported_logs" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/export/using_exported_logs" ><span class="devsite-nav-text" tooltip>View logs routed to Logging buckets</span></a></li><li class="devsite-nav-item"><a href="/logging/docs/export/bigquery" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/export/bigquery" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/export/bigquery" ><span class="devsite-nav-text" tooltip>View logs routed to BigQuery</span></a></li><li class="devsite-nav-item"><a href="/logging/docs/export/storage" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/export/storage" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/export/storage" ><span class="devsite-nav-text" tooltip>View logs routed to Cloud Storage</span></a></li><li class="devsite-nav-item"><a href="/logging/docs/export/pubsub" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/export/pubsub" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/export/pubsub" ><span class="devsite-nav-text" tooltip>View logs routed to Pub/Sub</span></a></li></ul></div></li> <li class="devsite-nav-item devsite-nav-heading"><div class="devsite-nav-title devsite-nav-title-no-path"> <span class="devsite-nav-text" tooltip>Visualize, stream, and monitor logs</span> </div></li> <li class="devsite-nav-item"><a href="/logging/docs/view/dashboard" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/view/dashboard" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/view/dashboard" ><span class="devsite-nav-text" tooltip>Visualize log severity and error metrics</span></a></li> <li class="devsite-nav-item"><a href="/logging/docs/view/streaming-live-tailing" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/view/streaming-live-tailing" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/view/streaming-live-tailing" ><span class="devsite-nav-text" tooltip>Stream and tail log entries</span></a></li> <li class="devsite-nav-item devsite-nav-expandable"><div class="devsite-expandable-nav"> <a class="devsite-nav-toggle" aria-hidden="true"></a><div class="devsite-nav-title devsite-nav-title-no-path" tabindex="0" role="button"> <span class="devsite-nav-text" tooltip>Monitor your logs</span> </div><ul class="devsite-nav-section"><li class="devsite-nav-item"><a href="/logging/docs/alerting/monitoring-logs" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/alerting/monitoring-logs" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/alerting/monitoring-logs" ><span class="devsite-nav-text" tooltip>Monitor your logs overview</span></a></li><li class="devsite-nav-item devsite-nav-expandable"><div class="devsite-expandable-nav"> <a class="devsite-nav-toggle" aria-hidden="true"></a><div class="devsite-nav-title devsite-nav-title-no-path" tabindex="0" role="button"> <span class="devsite-nav-text" tooltip>Create metrics from logs</span> </div><ul class="devsite-nav-section"><li class="devsite-nav-item"><a href="/logging/docs/logs-based-metrics" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/logs-based-metrics" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/logs-based-metrics" ><span class="devsite-nav-text" tooltip>Log-based metrics overview</span></a></li><li class="devsite-nav-item"><a href="/logging/docs/logs-based-metrics/view_your_log_based_metrics" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/logs-based-metrics/view_your_log_based_metrics" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/logs-based-metrics/view_your_log_based_metrics" ><span class="devsite-nav-text" tooltip>List and chart log-based metrics</span></a></li><li class="devsite-nav-item"><a href="/logging/docs/logs-based-metrics/bucket-lbm" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/logs-based-metrics/bucket-lbm" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/logs-based-metrics/bucket-lbm" ><span class="devsite-nav-text" tooltip>Bucket-scoped log-based metrics</span></a></li><li class="devsite-nav-item"><a href="/logging/docs/logs-based-metrics/counter-metrics" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/logs-based-metrics/counter-metrics" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/logs-based-metrics/counter-metrics" ><span class="devsite-nav-text" tooltip>Configure counter metrics</span></a></li><li class="devsite-nav-item"><a href="/logging/docs/logs-based-metrics/distribution-metrics" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/logs-based-metrics/distribution-metrics" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/logs-based-metrics/distribution-metrics" ><span class="devsite-nav-text" tooltip>Configure distribution metrics</span></a></li><li class="devsite-nav-item"><a href="/logging/docs/logs-based-metrics/labels" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/logs-based-metrics/labels" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/logs-based-metrics/labels" ><span class="devsite-nav-text" tooltip>Configure labels on log-based metrics</span></a></li><li class="devsite-nav-item"><a href="/logging/docs/logs-based-metrics/charts-and-alerts" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/logs-based-metrics/charts-and-alerts" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/logs-based-metrics/charts-and-alerts" ><span class="devsite-nav-text" tooltip>Configure notifications for log-based metrics</span></a></li></ul></div></li><li class="devsite-nav-item devsite-nav-expandable"><div class="devsite-expandable-nav"> <a class="devsite-nav-toggle" aria-hidden="true"></a><div class="devsite-nav-title devsite-nav-title-no-path" tabindex="0" role="button"> <span class="devsite-nav-text" tooltip>Create alerting policies that monitor logs</span> </div><ul class="devsite-nav-section"><li class="devsite-nav-item"><a href="/logging/docs/alerting/log-based-alerts" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/alerting/log-based-alerts" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/alerting/log-based-alerts" ><span class="devsite-nav-text" tooltip>Configure log-based alerting policies</span></a></li><li class="devsite-nav-item"><a href="/logging/docs/alerting/log-based-incidents" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/alerting/log-based-incidents" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/alerting/log-based-incidents" ><span class="devsite-nav-text" tooltip>Manage incidents for log-based alerting policies</span></a></li><li class="devsite-nav-item devsite-nav-preview"><a href="/logging/docs/alerting/sql-based-incidents" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/alerting/sql-based-incidents" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/alerting/sql-based-incidents" ><span class="devsite-nav-text" tooltip>Manage incidents for SQL-based alerting policies</span><span class="devsite-nav-icon material-icons" data-icon="preview" data-title="Preview" aria-hidden="true"></span></a></li></ul></div></li></ul></div></li> <li class="devsite-nav-item devsite-nav-heading"><div class="devsite-nav-title devsite-nav-title-no-path"> <span class="devsite-nav-text" tooltip>Route and store logs</span> </div></li> <li class="devsite-nav-item"><a href="/logging/docs/routing/overview" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/routing/overview" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/routing/overview" ><span class="devsite-nav-text" tooltip>Routing and storage overview</span></a></li> <li class="devsite-nav-item"><a href="/logging/docs/buckets" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/buckets" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/buckets" ><span class="devsite-nav-text" tooltip>Configure log buckets</span></a></li> <li class="devsite-nav-item"><a href="/logging/docs/manage-log-buckets-with-tags" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/manage-log-buckets-with-tags" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/manage-log-buckets-with-tags" ><span class="devsite-nav-text" tooltip>Manage log buckets by using Tags</span></a></li> <li class="devsite-nav-item devsite-nav-expandable"><div class="devsite-expandable-nav"> <a class="devsite-nav-toggle" aria-hidden="true"></a><div class="devsite-nav-title devsite-nav-title-no-path" tabindex="0" role="button"> <span class="devsite-nav-text" tooltip>Configure log sinks</span> </div><ul class="devsite-nav-section"><li class="devsite-nav-item"><a href="/logging/docs/export/configure_export_v2" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/export/configure_export_v2" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/export/configure_export_v2" ><span class="devsite-nav-text" tooltip>Route logs to supported destinations</span></a></li><li class="devsite-nav-item"><a href="/logging/docs/routing/user-managed-service-accounts" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/routing/user-managed-service-accounts" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/routing/user-managed-service-accounts" ><span class="devsite-nav-text" tooltip>Configure log sinks with user-managed service accounts</span></a></li><li class="devsite-nav-item"><a href="/logging/docs/export/third_party" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/export/third_party" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/export/third_party" ><span class="devsite-nav-text" tooltip>Route logs to third-party destinations</span></a></li></ul></div></li> <li class="devsite-nav-item devsite-nav-expandable"><div class="devsite-expandable-nav"> <a class="devsite-nav-toggle" aria-hidden="true"></a><div class="devsite-nav-title devsite-nav-title-no-path" tabindex="0" role="button"> <span class="devsite-nav-text" tooltip>Configure sinks for folders and organizations</span> </div><ul class="devsite-nav-section"><li class="devsite-nav-item"><a href="/logging/docs/export/aggregated_sinks" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/export/aggregated_sinks" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/export/aggregated_sinks" ><span class="devsite-nav-text" tooltip>Collate and route organization-level logs to supported destinations</span></a></li><li class="devsite-nav-item"><a href="/logging/docs/central-log-storage" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/central-log-storage" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/central-log-storage" ><span class="devsite-nav-text" tooltip>Aggregate and store your organization's logs</span></a></li></ul></div></li> <li class="devsite-nav-item devsite-nav-expandable"><div class="devsite-expandable-nav"> <a class="devsite-nav-toggle" aria-hidden="true"></a><div class="devsite-nav-title devsite-nav-title-no-path" tabindex="0" role="button"> <span class="devsite-nav-text" tooltip>Set up advanced log storage</span> </div><ul class="devsite-nav-section"><li class="devsite-nav-item"><a href="/logging/docs/analyze/custom-index" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/analyze/custom-index" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/analyze/custom-index" ><span class="devsite-nav-text" tooltip>Configure custom indexing</span></a></li><li class="devsite-nav-item"><a href="/logging/docs/routing/copy-logs" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/routing/copy-logs" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/routing/copy-logs" ><span class="devsite-nav-text" tooltip>Batch and route logs retroactively</span></a></li></ul></div></li> <li class="devsite-nav-item devsite-nav-heading"><div class="devsite-nav-title devsite-nav-title-no-path"> <span class="devsite-nav-text" tooltip>Cloud Audit Logs</span> </div></li> <li class="devsite-nav-item"><a href="/logging/docs/audit" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/audit" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/audit" ><span class="devsite-nav-text" tooltip>Cloud Audit Logs overview</span></a></li> <li class="devsite-nav-item"><a href="/logging/docs/audit/services" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/audit/services" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/audit/services" ><span class="devsite-nav-text" tooltip>Services with audit logs</span></a></li> <li class="devsite-nav-item"><a href="/logging/docs/audit/configure-data-access" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/audit/configure-data-access" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/audit/configure-data-access" ><span class="devsite-nav-text" tooltip>Enable Data Access audit logs</span></a></li> <li class="devsite-nav-item devsite-nav-expandable"><div class="devsite-expandable-nav"> <a class="devsite-nav-toggle" aria-hidden="true"></a><div class="devsite-nav-title devsite-nav-title-no-path" tabindex="0" role="button"> <span class="devsite-nav-text" tooltip>Audit logs in depth</span> </div><ul class="devsite-nav-section"><li class="devsite-nav-item"><a href="/logging/docs/audit/understanding-audit-logs" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/audit/understanding-audit-logs" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/audit/understanding-audit-logs" ><span class="devsite-nav-text" tooltip>Understand audit logs</span></a></li><li class="devsite-nav-item"><a href="/logging/docs/audit/split-logs" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/audit/split-logs" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/audit/split-logs" ><span class="devsite-nav-text" tooltip>Split log entries</span></a></li><li class="devsite-nav-item"><a href="/logging/docs/audit/best-practices" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/audit/best-practices" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/audit/best-practices" ><span class="devsite-nav-text" tooltip>Best practices</span></a></li></ul></div></li> <li class="devsite-nav-item"><a href="/logging/docs/audit-logging" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/audit-logging" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/audit-logging" ><span class="devsite-nav-text" tooltip>Cloud Logging audit logs</span></a></li> <li class="devsite-nav-item devsite-nav-expandable"><div class="devsite-expandable-nav"> <a class="devsite-nav-toggle" aria-hidden="true"></a><div class="devsite-nav-title devsite-nav-title-no-path" tabindex="0" role="button"> <span class="devsite-nav-text" tooltip>Google Workspace audit logs</span> </div><ul class="devsite-nav-section"><li class="devsite-nav-item"><a href="/logging/docs/audit/gsuite-audit-logging" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/audit/gsuite-audit-logging" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/audit/gsuite-audit-logging" ><span class="devsite-nav-text" tooltip>Workspace audit logs overview</span></a></li><li class="devsite-nav-item"><a href="/logging/docs/audit/configure-gsuite-audit-logs" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/audit/configure-gsuite-audit-logs" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/audit/configure-gsuite-audit-logs" ><span class="devsite-nav-text" tooltip>View and manage Workspace audit logs</span></a></li><li class="devsite-nav-item"><a href="/logging/docs/audit/gsuite-login-samples" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/audit/gsuite-login-samples" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/audit/gsuite-login-samples" ><span class="devsite-nav-text" tooltip>Login Audit samples</span></a></li></ul></div></li> <li class="devsite-nav-item devsite-nav-expandable"><div class="devsite-expandable-nav"> <a class="devsite-nav-toggle" aria-hidden="true"></a><div class="devsite-nav-title devsite-nav-title-no-path" tabindex="0" role="button"> <span class="devsite-nav-text" tooltip>Audit logs datatypes</span> </div><ul class="devsite-nav-section"><li class="devsite-nav-item devsite-nav-expandable"><div class="devsite-expandable-nav"> <a class="devsite-nav-toggle" aria-hidden="true"></a><div class="devsite-nav-title devsite-nav-title-no-path" tabindex="0" role="button"> <span class="devsite-nav-text" tooltip>AuditLog</span> </div><ul class="devsite-nav-section"><li class="devsite-nav-item devsite-nav-heading"><div class="devsite-nav-title devsite-nav-title-no-path"> <span class="devsite-nav-text" tooltip>Types</span> </div></li><li class="devsite-nav-item"><a href="/logging/docs/reference/audit/auditlog/rest/Shared.Types/AuditLog" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/reference/audit/auditlog/rest/Shared.Types/AuditLog" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/reference/audit/auditlog/rest/Shared.Types/AuditLog" ><span class="devsite-nav-text" tooltip>AuditLog</span></a></li><li class="devsite-nav-item"><a href="/logging/docs/reference/audit/auditlog/rest/Shared.Types/PolicyType" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/reference/audit/auditlog/rest/Shared.Types/PolicyType" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/reference/audit/auditlog/rest/Shared.Types/PolicyType" ><span class="devsite-nav-text" tooltip>PolicyType</span></a></li></ul></div></li><li class="devsite-nav-item devsite-nav-expandable"><div class="devsite-expandable-nav"> <a class="devsite-nav-toggle" aria-hidden="true"></a><div class="devsite-nav-title devsite-nav-title-no-path" tabindex="0" role="button"> <span class="devsite-nav-text" tooltip>App Engine AuditData</span> </div><ul class="devsite-nav-section"><li class="devsite-nav-item devsite-nav-heading"><div class="devsite-nav-title devsite-nav-title-no-path"> <span class="devsite-nav-text" tooltip>Types</span> </div></li><li class="devsite-nav-item"><a href="/logging/docs/reference/audit/appengine/rest/Shared.Types/ApiConfigHandler" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/reference/audit/appengine/rest/Shared.Types/ApiConfigHandler" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/reference/audit/appengine/rest/Shared.Types/ApiConfigHandler" ><span class="devsite-nav-text" tooltip>ApiConfigHandler</span></a></li><li class="devsite-nav-item"><a href="/logging/docs/reference/audit/appengine/rest/Shared.Types/ApiEndpointHandler" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/reference/audit/appengine/rest/Shared.Types/ApiEndpointHandler" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/reference/audit/appengine/rest/Shared.Types/ApiEndpointHandler" ><span class="devsite-nav-text" tooltip>ApiEndpointHandler</span></a></li><li class="devsite-nav-item"><a href="/logging/docs/reference/audit/appengine/rest/Shared.Types/AuditData" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/reference/audit/appengine/rest/Shared.Types/AuditData" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/reference/audit/appengine/rest/Shared.Types/AuditData" ><span class="devsite-nav-text" tooltip>AuditData</span></a></li><li class="devsite-nav-item"><a href="/logging/docs/reference/audit/appengine/rest/Shared.Types/AuthFailAction" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/reference/audit/appengine/rest/Shared.Types/AuthFailAction" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/reference/audit/appengine/rest/Shared.Types/AuthFailAction" ><span class="devsite-nav-text" tooltip>AuthFailAction</span></a></li><li class="devsite-nav-item"><a href="/logging/docs/reference/audit/appengine/rest/Shared.Types/ErrorCode" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/reference/audit/appengine/rest/Shared.Types/ErrorCode" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/reference/audit/appengine/rest/Shared.Types/ErrorCode" ><span class="devsite-nav-text" tooltip>ErrorCode</span></a></li><li class="devsite-nav-item"><a href="/logging/docs/reference/audit/appengine/rest/Shared.Types/FileInfo" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/reference/audit/appengine/rest/Shared.Types/FileInfo" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/reference/audit/appengine/rest/Shared.Types/FileInfo" ><span class="devsite-nav-text" tooltip>FileInfo</span></a></li><li class="devsite-nav-item"><a href="/logging/docs/reference/audit/appengine/rest/Shared.Types/InboundServiceType" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/reference/audit/appengine/rest/Shared.Types/InboundServiceType" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/reference/audit/appengine/rest/Shared.Types/InboundServiceType" ><span class="devsite-nav-text" tooltip>InboundServiceType</span></a></li><li class="devsite-nav-item"><a href="/logging/docs/reference/audit/appengine/rest/Shared.Types/LoginRequirement" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/reference/audit/appengine/rest/Shared.Types/LoginRequirement" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/reference/audit/appengine/rest/Shared.Types/LoginRequirement" ><span class="devsite-nav-text" tooltip>LoginRequirement</span></a></li><li class="devsite-nav-item"><a href="/logging/docs/reference/audit/appengine/rest/Shared.Types/RedirectHttpResponseCode" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/reference/audit/appengine/rest/Shared.Types/RedirectHttpResponseCode" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/reference/audit/appengine/rest/Shared.Types/RedirectHttpResponseCode" ><span class="devsite-nav-text" tooltip>RedirectHttpResponseCode</span></a></li><li class="devsite-nav-item"><a href="/logging/docs/reference/audit/appengine/rest/Shared.Types/RolloutStrategy" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/reference/audit/appengine/rest/Shared.Types/RolloutStrategy" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/reference/audit/appengine/rest/Shared.Types/RolloutStrategy" ><span class="devsite-nav-text" tooltip>RolloutStrategy</span></a></li><li class="devsite-nav-item"><a href="/logging/docs/reference/audit/appengine/rest/Shared.Types/SecurityLevel" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/reference/audit/appengine/rest/Shared.Types/SecurityLevel" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/reference/audit/appengine/rest/Shared.Types/SecurityLevel" ><span class="devsite-nav-text" tooltip>SecurityLevel</span></a></li><li class="devsite-nav-item"><a href="/logging/docs/reference/audit/appengine/rest/Shared.Types/ServingStatus" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/reference/audit/appengine/rest/Shared.Types/ServingStatus" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/reference/audit/appengine/rest/Shared.Types/ServingStatus" ><span class="devsite-nav-text" tooltip>ServingStatus</span></a></li><li class="devsite-nav-item"><a href="/logging/docs/reference/audit/appengine/rest/Shared.Types/ShardBy" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/reference/audit/appengine/rest/Shared.Types/ShardBy" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/reference/audit/appengine/rest/Shared.Types/ShardBy" ><span class="devsite-nav-text" tooltip>ShardBy</span></a></li></ul></div></li><li class="devsite-nav-item devsite-nav-expandable"><div class="devsite-expandable-nav"> <a class="devsite-nav-toggle" aria-hidden="true"></a><div class="devsite-nav-title devsite-nav-title-no-path" tabindex="0" role="button"> <span class="devsite-nav-text" tooltip>App Engine AuditData (legacy)</span> </div><ul class="devsite-nav-section"><li class="devsite-nav-item devsite-nav-heading"><div class="devsite-nav-title devsite-nav-title-no-path"> <span class="devsite-nav-text" tooltip>Types</span> </div></li><li class="devsite-nav-item"><a href="/logging/docs/reference/audit/ae_legacy/rest/Shared.Types/AuditData" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/reference/audit/ae_legacy/rest/Shared.Types/AuditData" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/reference/audit/ae_legacy/rest/Shared.Types/AuditData" ><span class="devsite-nav-text" tooltip>AuditData</span></a></li></ul></div></li><li class="devsite-nav-item devsite-nav-expandable"><div class="devsite-expandable-nav"> <a class="devsite-nav-toggle" aria-hidden="true"></a><div class="devsite-nav-title devsite-nav-title-no-path" tabindex="0" role="button"> <span class="devsite-nav-text" tooltip>BigQuery AuditData</span> </div><ul class="devsite-nav-section"><li class="devsite-nav-item devsite-nav-heading"><div class="devsite-nav-title devsite-nav-title-no-path"> <span class="devsite-nav-text" tooltip>Types</span> </div></li><li class="devsite-nav-item"><a href="/logging/docs/reference/audit/bigquery/rest/Shared.Types/AuditData" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/reference/audit/bigquery/rest/Shared.Types/AuditData" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/reference/audit/bigquery/rest/Shared.Types/AuditData" ><span class="devsite-nav-text" tooltip>AuditData</span></a></li><li class="devsite-nav-item"><a href="/logging/docs/reference/audit/bigquery/rest/Shared.Types/LogType" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/reference/audit/bigquery/rest/Shared.Types/LogType" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/reference/audit/bigquery/rest/Shared.Types/LogType" ><span class="devsite-nav-text" tooltip>LogType</span></a></li></ul></div></li><li class="devsite-nav-item devsite-nav-expandable"><div class="devsite-expandable-nav"> <a class="devsite-nav-toggle" aria-hidden="true"></a><div class="devsite-nav-title devsite-nav-title-no-path" tabindex="0" role="button"> <span class="devsite-nav-text" tooltip>IAM AuditData</span> </div><ul class="devsite-nav-section"><li class="devsite-nav-item devsite-nav-heading"><div class="devsite-nav-title devsite-nav-title-no-path"> <span class="devsite-nav-text" tooltip>Types</span> </div></li><li class="devsite-nav-item"><a href="/logging/docs/reference/audit/iam/rest/Shared.Types/AuditData" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/reference/audit/iam/rest/Shared.Types/AuditData" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/reference/audit/iam/rest/Shared.Types/AuditData" ><span class="devsite-nav-text" tooltip>AuditData</span></a></li></ul></div></li></ul></div></li> <li class="devsite-nav-item devsite-nav-heading"><div class="devsite-nav-title devsite-nav-title-no-path"> <span class="devsite-nav-text" tooltip>Troubleshoot</span> </div></li> <li class="devsite-nav-item devsite-nav-expandable"><div class="devsite-expandable-nav"> <a class="devsite-nav-toggle" aria-hidden="true"></a><div class="devsite-nav-title devsite-nav-title-no-path" tabindex="0" role="button"> <span class="devsite-nav-text" tooltip>Troubleshoot collecting and writing logs</span> </div><ul class="devsite-nav-section"><li class="devsite-nav-item devsite-nav-expandable"><div class="devsite-expandable-nav"> <a class="devsite-nav-toggle" aria-hidden="true"></a><div class="devsite-nav-title devsite-nav-title-no-path" tabindex="0" role="button"> <span class="devsite-nav-text" tooltip>Troubleshoot the Ops Agent</span> </div><ul class="devsite-nav-section"><li class="devsite-nav-item"><a href="/logging/docs/agent/ops-agent/troubleshooting" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/agent/ops-agent/troubleshooting" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/agent/ops-agent/troubleshooting" ><span class="devsite-nav-text" tooltip>Overview</span></a></li><li class="devsite-nav-item"><a href="/logging/docs/agent/ops-agent/troubleshoot-find-info" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/agent/ops-agent/troubleshoot-find-info" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/agent/ops-agent/troubleshoot-find-info" ><span class="devsite-nav-text" tooltip>Find troubleshooting information</span></a></li><li class="devsite-nav-item"><a href="/logging/docs/agent/ops-agent/troubleshoot-credentials" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/agent/ops-agent/troubleshoot-credentials" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/agent/ops-agent/troubleshoot-credentials" ><span class="devsite-nav-text" tooltip>Troubleshoot credentials</span></a></li><li class="devsite-nav-item"><a href="/logging/docs/agent/ops-agent/troubleshoot-install-startup" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/agent/ops-agent/troubleshoot-install-startup" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/agent/ops-agent/troubleshoot-install-startup" ><span class="devsite-nav-text" tooltip>Troubleshoot installation and start-up</span></a></li><li class="devsite-nav-item"><a href="/logging/docs/agent/ops-agent/troubleshoot-run-ingest" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/agent/ops-agent/troubleshoot-run-ingest" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/agent/ops-agent/troubleshoot-run-ingest" ><span class="devsite-nav-text" tooltip>Troubleshoot data ingestion</span></a></li></ul></div></li><li class="devsite-nav-item"><a href="/logging/docs/agent/logging/troubleshooting" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/agent/logging/troubleshooting" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/agent/logging/troubleshooting" ><span class="devsite-nav-text" tooltip>Troubleshoot the Logging agent</span></a></li></ul></div></li> <li class="devsite-nav-item"><a href="/logging/docs/export/troubleshoot" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/export/troubleshoot" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/export/troubleshoot" ><span class="devsite-nav-text" tooltip>Troubleshoot routing and storage</span></a></li> <li class="devsite-nav-item"><a href="/logging/docs/routing/troubleshoot-cmek-orgs" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/routing/troubleshoot-cmek-orgs" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/routing/troubleshoot-cmek-orgs" ><span class="devsite-nav-text" tooltip>Troubleshoot CMEK and default settings</span></a></li> <li class="devsite-nav-item devsite-nav-expandable"><div class="devsite-expandable-nav"> <a class="devsite-nav-toggle" aria-hidden="true"></a><div class="devsite-nav-title devsite-nav-title-no-path" tabindex="0" role="button"> <span class="devsite-nav-text" tooltip>Troubleshoot monitoring logs</span> </div><ul class="devsite-nav-section"><li class="devsite-nav-item"><a href="/logging/docs/alerting/troubleshooting" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/alerting/troubleshooting" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/alerting/troubleshooting" ><span class="devsite-nav-text" tooltip>Troubleshoot log-based alerting policies</span></a></li><li class="devsite-nav-item"><a href="/logging/docs/logs-based-metrics/troubleshooting" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/logs-based-metrics/troubleshooting" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/logs-based-metrics/troubleshooting" ><span class="devsite-nav-text" tooltip>Troubleshoot log-based metrics</span></a></li></ul></div></li> <li class="devsite-nav-item devsite-nav-expandable"><div class="devsite-expandable-nav"> <a class="devsite-nav-toggle" aria-hidden="true"></a><div class="devsite-nav-title devsite-nav-title-no-path" tabindex="0" role="button"> <span class="devsite-nav-text" tooltip>Troubleshoot querying and viewing logs</span> </div><ul class="devsite-nav-section"><li class="devsite-nav-item"><a href="/logging/docs/view/troubleshoot" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/view/troubleshoot" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/view/troubleshoot" ><span class="devsite-nav-text" tooltip>Troubleshoot Logs Explorer</span></a></li><li class="devsite-nav-item"><a href="/logging/docs/view/troubleshoot-lql" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/view/troubleshoot-lql" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/view/troubleshoot-lql" ><span class="devsite-nav-text" tooltip>Troubleshoot Logging query language</span></a></li><li class="devsite-nav-item"><a href="/logging/docs/analyze/troubleshoot" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/analyze/troubleshoot" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/analyze/troubleshoot" ><span class="devsite-nav-text" tooltip>Troubleshoot Log Analytics</span></a></li></ul></div></li> <li class="devsite-nav-item"><a href="/logging/docs/audit/troubleshooting-faq-gsuite" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /logging/docs/audit/troubleshooting-faq-gsuite" track-type="bookNav" track-name="click" track-metadata-eventdetail="/logging/docs/audit/troubleshooting-faq-gsuite" ><span class="devsite-nav-text" tooltip>Troubleshoot Workspace audit logs</span></a></li> <li class="devsite-nav-item devsite-nav-heading"><div class="devsite-nav-title devsite-nav-title-no-path"> <span class="devsite-nav-text" tooltip>Other Google Cloud Observability documentation</span> </div></li> <li class="devsite-nav-item"><a href="/stackdriver/docs" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /stackdriver/docs" track-type="bookNav" track-name="click" track-metadata-eventdetail="/stackdriver/docs" ><span class="devsite-nav-text" tooltip>Google Cloud Observability</span></a></li> <li class="devsite-nav-item"><a href="/monitoring/docs" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /monitoring/docs" track-type="bookNav" track-name="click" track-metadata-eventdetail="/monitoring/docs" ><span class="devsite-nav-text" tooltip>Cloud Monitoring</span></a></li> <li class="devsite-nav-item"><a href="/error-reporting/docs" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /error-reporting/docs" track-type="bookNav" track-name="click" track-metadata-eventdetail="/error-reporting/docs" ><span class="devsite-nav-text" tooltip>Error Reporting</span></a></li> <li class="devsite-nav-item"><a href="/trace/docs" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /trace/docs" track-type="bookNav" track-name="click" track-metadata-eventdetail="/trace/docs" ><span class="devsite-nav-text" tooltip>Cloud Trace</span></a></li> <li class="devsite-nav-item"><a href="/profiler/docs" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /profiler/docs" track-type="bookNav" track-name="click" track-metadata-eventdetail="/profiler/docs" ><span class="devsite-nav-text" tooltip>Cloud Profiler</span></a></li> </ul> <ul class="devsite-nav-list" menu="Technology areas" aria-label="Side menu" hidden> <li class="devsite-nav-item"> <a href="/docs/ai-ml" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Responsive Tab: AI and ML" track-type="navMenu" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > AI and ML </span> </a> </li> <li class="devsite-nav-item"> <a href="/docs/application-development" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Responsive Tab: Application development" track-type="navMenu" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Application development </span> </a> </li> <li class="devsite-nav-item"> <a href="/docs/application-hosting" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Responsive Tab: Application hosting" track-type="navMenu" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Application hosting </span> </a> </li> <li class="devsite-nav-item"> <a href="/docs/compute-area" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Responsive Tab: Compute" track-type="navMenu" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Compute </span> </a> </li> <li class="devsite-nav-item"> <a href="/docs/data" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Responsive Tab: Data analytics and pipelines" track-type="navMenu" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Data analytics and pipelines </span> </a> </li> <li class="devsite-nav-item"> <a href="/docs/databases" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Responsive Tab: Databases" track-type="navMenu" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Databases </span> </a> </li> <li class="devsite-nav-item"> <a href="/docs/dhm-cloud" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Responsive Tab: Distributed, hybrid, and multicloud" track-type="navMenu" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Distributed, hybrid, and multicloud </span> </a> </li> <li class="devsite-nav-item"> <a href="/docs/generative-ai" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Responsive Tab: Generative AI" track-type="navMenu" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Generative AI </span> </a> </li> <li class="devsite-nav-item"> <a href="/docs/industry" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Responsive Tab: Industry solutions" track-type="navMenu" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Industry solutions </span> </a> </li> <li class="devsite-nav-item"> <a href="/docs/networking" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Responsive Tab: Networking" track-type="navMenu" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Networking </span> </a> </li> <li class="devsite-nav-item"> <a href="/docs/observability" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Responsive Tab: Observability and monitoring" track-type="navMenu" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Observability and monitoring </span> </a> </li> <li class="devsite-nav-item"> <a href="/docs/security" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Responsive Tab: Security" track-type="navMenu" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Security </span> </a> </li> <li class="devsite-nav-item"> <a href="/docs/storage" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Responsive Tab: Storage" track-type="navMenu" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Storage </span> </a> </li> </ul> <ul class="devsite-nav-list" menu="Cross-product tools" aria-label="Side menu" hidden> <li class="devsite-nav-item"> <a href="/docs/access-resources" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Responsive Tab: Access and resources management" track-type="navMenu" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Access and resources management </span> </a> </li> <li class="devsite-nav-item"> <a href="/docs/costs-usage" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Responsive Tab: Costs and usage management" track-type="navMenu" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Costs and usage management </span> </a> </li> <li class="devsite-nav-item"> <a href="/docs/devtools" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Responsive Tab: Google Cloud SDK, languages, frameworks, and tools" track-type="navMenu" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Google Cloud SDK, languages, frameworks, and tools </span> </a> </li> <li class="devsite-nav-item"> <a href="/docs/iac" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Responsive Tab: Infrastructure as code" track-type="navMenu" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Infrastructure as code </span> </a> </li> <li class="devsite-nav-item"> <a href="/docs/migration" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Responsive Tab: Migration" track-type="navMenu" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Migration </span> </a> </li> </ul> <ul class="devsite-nav-list" menu="Related sites" aria-label="Side menu" hidden> <li class="devsite-nav-item"> <a href="/" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Responsive Tab: Google Cloud Home" track-type="navMenu" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Google Cloud Home </span> </a> </li> <li class="devsite-nav-item"> <a href="/free" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Responsive Tab: Free Trial and Free Tier" track-type="navMenu" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Free Trial and Free Tier </span> </a> </li> <li class="devsite-nav-item"> <a href="/architecture" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Responsive Tab: Architecture Center" track-type="navMenu" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Architecture Center </span> </a> </li> <li class="devsite-nav-item"> <a href="https://cloud.google.com/blog" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Responsive Tab: Blog" track-type="navMenu" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Blog </span> </a> </li> <li class="devsite-nav-item"> <a href="/contact" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Responsive Tab: Contact Sales" track-type="navMenu" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Contact Sales </span> </a> </li> <li class="devsite-nav-item"> <a href="/developers" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Responsive Tab: Google Cloud Developer Center" track-type="navMenu" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Google Cloud Developer Center </span> </a> </li> <li class="devsite-nav-item"> <a href="https://developers.google.com/" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Responsive Tab: Google Developer Center" track-type="navMenu" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Google Developer Center </span> </a> </li> <li class="devsite-nav-item"> <a href="https://console.cloud.google.com/marketplace" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Responsive Tab: Google Cloud Marketplace" track-type="navMenu" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Google Cloud Marketplace </span> </a> </li> <li class="devsite-nav-item"> <a href="/marketplace/docs" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Responsive Tab: Google Cloud Marketplace Documentation" track-type="navMenu" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Google Cloud Marketplace Documentation </span> </a> </li> <li class="devsite-nav-item"> <a href="https://www.cloudskillsboost.google/paths" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Responsive Tab: Google Cloud Skills Boost" track-type="navMenu" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Google Cloud Skills Boost </span> </a> </li> <li class="devsite-nav-item"> <a href="/solutions" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Responsive Tab: Google Cloud Solution Center" track-type="navMenu" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Google Cloud Solution Center </span> </a> </li> <li class="devsite-nav-item"> <a href="/support-hub" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Responsive Tab: Google Cloud Support" track-type="navMenu" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Google Cloud Support </span> </a> </li> <li class="devsite-nav-item"> <a href="https://www.youtube.com/@googlecloudtech" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Responsive Tab: Google Cloud Tech Youtube Channel" track-type="navMenu" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Google Cloud Tech Youtube Channel </span> </a> </li> </ul> </div> </div> </nav> </devsite-book-nav> <section id="gc-wrapper"> <main role="main" class="devsite-main-content" has-book-nav has-sidebar > <div class="devsite-sidebar"> <div class="devsite-sidebar-content"> <devsite-toc class="devsite-nav" role="navigation" aria-label="On this page" depth="2" scrollbars ></devsite-toc> <devsite-recommendations-sidebar class="nocontent devsite-nav"> </devsite-recommendations-sidebar> </div> </div> <devsite-content> <article class="devsite-article"> <div class="devsite-article-meta nocontent" role="navigation"> <ul class="devsite-breadcrumb-list" aria-label="Breadcrumb"> <li class="devsite-breadcrumb-item "> <a href="https://cloud.google.com/" class="devsite-breadcrumb-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Breadcrumbs" data-value="1" track-type="globalNav" track-name="breadcrumb" track-metadata-position="1" track-metadata-eventdetail="Google Cloud" > Home </a> </li> <li class="devsite-breadcrumb-item "> <div class="devsite-breadcrumb-guillemet material-icons" aria-hidden="true"></div> <a href="https://cloud.google.com/stackdriver/docs" class="devsite-breadcrumb-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Breadcrumbs" data-value="2" track-type="globalNav" track-name="breadcrumb" track-metadata-position="2" track-metadata-eventdetail="Google Cloud Observability" > Google Cloud Observability </a> </li> <li class="devsite-breadcrumb-item "> <div class="devsite-breadcrumb-guillemet material-icons" aria-hidden="true"></div> <a href="https://cloud.google.com/logging/docs" class="devsite-breadcrumb-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Breadcrumbs" data-value="3" track-type="globalNav" track-name="breadcrumb" track-metadata-position="3" track-metadata-eventdetail="Cloud Logging" > Logging </a> </li> <li class="devsite-breadcrumb-item "> <div class="devsite-breadcrumb-guillemet material-icons" aria-hidden="true"></div> <a href="https://cloud.google.com/logging/docs" class="devsite-breadcrumb-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Breadcrumbs" data-value="4" track-type="globalNav" track-name="breadcrumb" track-metadata-position="4" track-metadata-eventdetail="Cloud Logging" > Documentation </a> </li> <li class="devsite-breadcrumb-item "> <div class="devsite-breadcrumb-guillemet material-icons" aria-hidden="true"></div> <a href="https://cloud.google.com/logging/docs/overview" class="devsite-breadcrumb-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Breadcrumbs" data-value="5" track-type="globalNav" track-name="breadcrumb" track-metadata-position="5" track-metadata-eventdetail="" > Guides </a> </li> </ul> <devsite-thumb-rating position="header"> </devsite-thumb-rating> </div> <devsite-feedback position="header" project-name="Cloud Logging" product-id="714033" bucket="Documentation" context="Logging docs feedback link" version="t-devsite-webserver-20241114-r00-rc02.464922260396498922" data-label="Send Feedback Button" track-type="feedback" track-name="sendFeedbackLink" track-metadata-position="header" class="nocontent" project-icon="https://www.gstatic.com/devrel-devsite/prod/v870e399c64f7c43c99a3043db4b3a74327bb93d0914e84a0c3dba90bbfd67625/cloud/images/favicons/onecloud/super_cloud.png" > <button> Send feedback </button> </devsite-feedback> <h1 class="devsite-page-title" tabindex="-1"> Audit logs for Google Workspace </h1> <devsite-feature-tooltip ack-key="AckCollectionsBookmarkTooltipDismiss" analytics-category="Site-Wide Custom Events" analytics-action-show="Callout Profile displayed" analytics-action-close="Callout Profile dismissed" analytics-label="Create Collection Callout" class="devsite-page-bookmark-tooltip nocontent" dismiss-button="true" id="devsite-collections-dropdown" dismiss-button-text="Dismiss" close-button-text="Got it"> <devsite-bookmark></devsite-bookmark> <span slot="popout-heading"> Stay organized with collections </span> <span slot="popout-contents"> Save and categorize content based on your preferences. </span> </devsite-feature-tooltip> <div class="devsite-page-title-meta"><devsite-view-release-notes></devsite-view-release-notes></div> <devsite-toc class="devsite-nav" depth="2" devsite-toc-embedded > </devsite-toc> <div class="devsite-article-body clearfix "> <p>This document provides a conceptual overview of the audit logs that Google Workspace provides as a part of Cloud Audit Logs.</p> <p>For information about managing your Google Workspace audit logs, see <a href="/logging/docs/audit/configure-gsuite-audit-logs">View and manage audit logs for Google Workspace</a>.</p> <h2 id="overview" data-text="Overview" tabindex="-1">Overview</h2> <p>Google Cloud services write audit logs to help you answer the questions, "Who did what, where, and when?". You can share your Google Workspace audit logs with Google Cloud to store, analyze, monitor, and alert on your Google Workspace data.</p> <p>Audit logs for Google Workspace are available for Cloud Identity, Cloud Identity Premium, and all Google Workspace customers.</p> <p>If you've <a href="/logging/docs/audit/configure-gsuite-audit-logs">enabled Google Workspace data sharing</a> with Google Cloud, then audit logs are always enabled for Google Workspace.</p> <p>Disabling Google Workspace data sharing stops new Google Workspace audit log events from being sent to Google Cloud. Any existing logs remain through their <a href="/logging/quotas#logs_retention_periods">default retention periods</a>, unless you have configured <a href="/logging/docs/buckets#custom-retention">custom retention</a> to retain your logs for a longer period.</p> <p>If you don't enable Google Workspace data sharing with Google Cloud, then you can't see audit logs for Google Workspace in Google Cloud.</p> <aside class="note"><strong>Note:</strong><span> Some Enterprise Groups Audit membership changes automatically populate the <code translate="no" dir="ltr">principalEmail</code> field in the audit log with <code translate="no" dir="ltr">cloud-support@google.com</code>. For example, an audit log might show <code translate="no" dir="ltr">cloud-support@google.com</code> as the principal removing a user from the group, when the removal of the user is automatic due to the expiration of a user's membership.</span></aside> <h2 id="log-types" data-text="Types of audit logs" tabindex="-1">Types of audit logs</h2> <p><a href="/logging/docs/audit#admin-activity">Admin Activity audit logs</a> contain log entries for API calls or other actions that modify the configuration or metadata of resources. For example, these logs record when users create VM instances or change Identity and Access Management (IAM) permissions.</p> <p><a href="/logging/docs/audit#data-access">Data Access audit logs</a> contain API calls that read the configuration or metadata of resources, as well as user-driven API calls that create, modify, or read user-provided resource data. Data Access audit logs don't record the data-access operations on resources that are publicly shared (available to All Users or All Authenticated Users) or that can be accessed without logging into Google Cloud, Google Workspace, Cloud Identity, or Drive Enterprise account.</p> <h2 id="services" data-text="Google Workspace services forwarding audit logs to Google Cloud" tabindex="-1">Google Workspace services forwarding audit logs to Google Cloud</h2> <p>Google Workspace provides the following audit logs at the Google Cloud organization level:</p> <ul> <li><p><a href="/cloud-provider-access-management/access-transparency/docs/understanding-workspace-logs"><strong>Access Transparency</strong></a>: Access Transparency logs provide a record of actions when Google personnel access customer content in your Google Workspace resources. In contrast to Access Transparency, Cloud Audit Logs record the actions that members of your Google Cloud organization have taken in your Google Cloud resources.</p> <p>For more information about the structure of Access Transparency logs and the types of accesses that are logged, see <a href="/assured-workloads/access-transparency/docs/reading-logs#axt-log-entry-sample">Log field descriptions</a>.</p></li> <li><p><a href="https://developers.google.com/admin-sdk/reports/v1/reference/activity-ref-appendix-a/admin-event-names"><strong>Google Workspace Admin Audit</strong></a>: Admin Audit logs provide a record of actions performed in your Google Admin console. For example, you can see when an administrator added a user or turned on a Google Workspace service.</p> <p> Admin Audit writes Admin Activity audit logs only.</p> <aside class="note"><strong>Note:</strong><span> Unless you use the Google Admin console, changes to Group settings are captured in the Google Workspace Enterprise Groups Audit logs. When you use the Google Admin console, changes to Group settings are captured in the Google Workspace Admin Audit logs. For example, if you changed a Group email address in groups.google.com, then those changes are captured in Google Workspace Enterprise Groups Audit logs.</span></aside></li> <li><p><a href="https://developers.google.com/admin-sdk/reports/v1/appendix/activity/groups-enterprise"><strong>Google Workspace Enterprise Groups Audit</strong></a>: Enterprise Groups Audit logs provide a record of actions performed on groups and group memberships. For example, you can see when an administrator added a user or when a group owner deleted their group.</p> <p>Enterprise Groups Audit writes Admin Activity audit logs only.</p></li> <li><p><a href="https://developers.google.com/admin-sdk/reports/v1/appendix/activity/login"><strong>Google Workspace Login Audit</strong></a>: Login Audit logs track user sign-ins to your domain. These logs only record the login event. They don't record which system was used to perform the login action.</p> <p>Login Audit writes Data Access audit logs only.</p></li> <li><p><a href="https://developers.google.com/admin-sdk/reports/v1/appendix/activity/token"><strong>Google Workspace OAuth Token Audit</strong></a>: OAuth Token Audit logs track which users are using which third-party mobile or web applications in your domain. For example, when a user opens a Google Workspace Marketplace app, the log records the name of the app and the person using it. The log also records each time a third-party application is authorized to access Google Account data, such as Google Contacts, Calendar, and Drive files (Google Workspace only).</p> <p>OAuth Token Audit writes both Admin Activity and Data Access audit logs.</p></li> <li><p><a href="https://developers.google.com/admin-sdk/reports/v1/appendix/activity/saml"><strong>Google Workspace SAML Audit</strong></a>: SAML Audit logs track users' successful and failed sign-ins to SAML applications. Entries usually appear within an hour of the user action.</p> <p>SAML Audit writes Data Access audit logs only.</p></li> </ul> <h2 id="service-info" data-text="Service-specific information" tabindex="-1">Service-specific information</h2> <p>Details for each Google Workspace service's audit logs are as follows:</p> <div class="cloud-collapse " expand-cta="Expand all" collapse-cta="Collapse all" > <div class="cloud-grid"> <div class="cloud-grid__col is-12"> <div class="cloud-collapse__control-wrapper cloud-collapse__toggle-wrapper"> <button class="cloud-collapse__control cloud-collapse__toggle cloud-link" > Expand all </button> </div> <div class="cloud-collapse__panels"> <section class="expandable " id="3" track-type="collapse" track-name="3" track-metadata-eventdetail="3"> <div class="expand-control cloud-collapse__label"> <h4 class="cloud-collapse__text cloud-headline4" id="google-workspace-admin-activities" data-text="Google Workspace Admin Activities" tabindex="-1">Google Workspace Admin Activities</h4> </div> <div class="cloud-collapse__panel cloud-grid"> <div class="cloud-grid__col is-10"> <p>Google Workspace Admin Audit audit logs use the resource type <code translate="no" dir="ltr">audited_resource</code> for all audit logs.</p> <p>Google Workspace Admin Audit audit logs use the service name <code translate="no" dir="ltr">admin.googleapis.com</code>.</p> <p>Google Workspace Admin Audit writes Admin Activity audit logs only. The following are the audited operations:</p> <table> <thead> <tr> <th>Activity type</th> <th><code translate="no" dir="ltr">AuditLog.method_name</code></th> </tr> </thead> <tbody> <tr> <td>AI_CLASSIFICATION_SETTINGS</td> <td><code translate="no" dir="ltr">google.admin.AdminService.aiClassificationInsufficientTrainingExamples</code><br/><code translate="no" dir="ltr">google.admin.AdminService.aiClassificationModelLowScore</code><br/><code translate="no" dir="ltr">google.admin.AdminService.aiClassificationNewModelReady</code><br/></td> </tr> <tr> <td><a href="https://developers.google.com/admin-sdk/alertcenter/reference/rest/v1beta1/alerts">ALERT_CENTER</a></td> <td><code translate="no" dir="ltr">google.admin.AdminService.alertCenterBatchDeleteAlerts</code><br/><code translate="no" dir="ltr">google.admin.AdminService.alertCenterBatchUndeleteAlerts</code><br/><code translate="no" dir="ltr">google.admin.AdminService.alertCenterCreateAlert</code><br/><code translate="no" dir="ltr">google.admin.AdminService.alertCenterCreateFeedback</code><br/><code translate="no" dir="ltr">google.admin.AdminService.alertCenterDeleteAlert</code><br/><code translate="no" dir="ltr">google.admin.AdminService.alertCenterGetAlertMetadata</code><br/><code translate="no" dir="ltr">google.admin.AdminService.alertCenterGetCustomerSettings</code><br/><code translate="no" dir="ltr">google.admin.AdminService.alertCenterGetSitLink</code><br/><code translate="no" dir="ltr">google.admin.AdminService.alertCenterListChange</code><br/><code translate="no" dir="ltr">google.admin.AdminService.alertCenterListFeedback</code><br/><code translate="no" dir="ltr">google.admin.AdminService.alertCenterListRelatedAlerts</code><br/><code translate="no" dir="ltr">google.admin.AdminService.alertCenterUndeleteAlert</code><br/><code translate="no" dir="ltr">google.admin.AdminService.alertCenterUpdateAlert</code><br/><code translate="no" dir="ltr">google.admin.AdminService.alertCenterUpdateAlertMetadata</code><br/><code translate="no" dir="ltr">google.admin.AdminService.alertCenterUpdateCustomerSettings</code><br/><code translate="no" dir="ltr">google.admin.AdminService.alertCenterView</code><br/></td> </tr> <tr> <td><a href="https://developers.google.com/admin-sdk/reports/v1/appendix/activity/admin-application-settings">APPLICATION_SETTINGS</a></td> <td><code translate="no" dir="ltr">google.admin.AdminService.changeApplicationSetting</code><br/><code translate="no" dir="ltr">google.admin.AdminService.createApplicationSetting</code><br/><code translate="no" dir="ltr">google.admin.AdminService.deleteApplicationSetting</code><br/><code translate="no" dir="ltr">google.admin.AdminService.reorderGroupBasedPoliciesEvent</code><br/><code translate="no" dir="ltr">google.admin.AdminService.gplusPremiumFeatures</code><br/><code translate="no" dir="ltr">google.admin.AdminService.createManagedConfiguration</code><br/><code translate="no" dir="ltr">google.admin.AdminService.deleteManagedConfiguration</code><br/><code translate="no" dir="ltr">google.admin.AdminService.updateManagedConfiguration</code><br/><code translate="no" dir="ltr">google.admin.AdminService.flashlightEduNonFeaturedServicesSelected</code><br/></td> </tr> <tr> <td><a href="https://developers.google.com/admin-sdk/reports/v1/appendix/activity/admin-calendar-settings">CALENDAR_SETTINGS</a></td> <td><code translate="no" dir="ltr">google.admin.AdminService.createBuilding</code><br/><code translate="no" dir="ltr">google.admin.AdminService.deleteBuilding</code><br/><code translate="no" dir="ltr">google.admin.AdminService.updateBuilding</code><br/><code translate="no" dir="ltr">google.admin.AdminService.createCalendarResource</code><br/><code translate="no" dir="ltr">google.admin.AdminService.deleteCalendarResource</code><br/><code translate="no" dir="ltr">google.admin.AdminService.createCalendarResourceFeature</code><br/><code translate="no" dir="ltr">google.admin.AdminService.deleteCalendarResourceFeature</code><br/><code translate="no" dir="ltr">google.admin.AdminService.updateCalendarResourceFeature</code><br/><code translate="no" dir="ltr">google.admin.AdminService.renameCalendarResource</code><br/><code translate="no" dir="ltr">google.admin.AdminService.updateCalendarResource</code><br/><code translate="no" dir="ltr">google.admin.AdminService.changeCalendarSetting</code><br/><code translate="no" dir="ltr">google.admin.AdminService.cancelCalendarEvents</code><br/><code translate="no" dir="ltr">google.admin.AdminService.releaseCalendarResources</code><br/></td> </tr> <tr> <td><a href="https://developers.google.com/admin-sdk/reports/v1/appendix/activity/admin-chat-settings">CHAT_SETTINGS</a></td> <td><code translate="no" dir="ltr">google.admin.AdminService.meetInteropCreateGateway</code><br/><code translate="no" dir="ltr">google.admin.AdminService.meetInteropDeleteGateway</code><br/><code translate="no" dir="ltr">google.admin.AdminService.meetInteropModifyGateway</code><br/><code translate="no" dir="ltr">google.admin.AdminService.changeChatSetting</code><br/></td> </tr> <tr> <td><a href="https://developers.google.com/admin-sdk/reports/v1/appendix/activity/admin-chrome-os-settings">CHROME_OS_SETTINGS</a></td> <td><code translate="no" dir="ltr">google.admin.AdminService.changeChromeOsAndroidApplicationSetting</code><br/><code translate="no" dir="ltr">google.admin.AdminService.changeChromeOsApplicationSetting</code><br/><code translate="no" dir="ltr">google.admin.AdminService.sendChromeOsDeviceCommand</code><br/><code translate="no" dir="ltr">google.admin.AdminService.changeChromeOsDeviceAnnotation</code><br/><code translate="no" dir="ltr">google.admin.AdminService.changeChromeOsDeviceSetting</code><br/><code translate="no" dir="ltr">google.admin.AdminService.changeChromeOsDeviceState</code><br/><code translate="no" dir="ltr">google.admin.AdminService.changeChromeOsPublicSessionSetting</code><br/><code translate="no" dir="ltr">google.admin.AdminService.insertChromeOsPrinter</code><br/><code translate="no" dir="ltr">google.admin.AdminService.deleteChromeOsPrinter</code><br/><code translate="no" dir="ltr">google.admin.AdminService.updateChromeOsPrinter</code><br/><code translate="no" dir="ltr">google.admin.AdminService.changeChromeOsSetting</code><br/><code translate="no" dir="ltr">google.admin.AdminService.changeChromeOsUserSetting</code><br/><code translate="no" dir="ltr">google.admin.AdminService.removeChromeOsApplicationSettings</code><br/></td> </tr> <tr> <td><a href="https://developers.google.com/admin-sdk/reports/v1/appendix/activity/admin-contacts-settings">CONTACTS_SETTINGS</a></td> <td><code translate="no" dir="ltr">google.admin.AdminService.changeContactsSetting</code></td> </tr> <tr> <td><a href="https://developers.google.com/admin-sdk/reports/v1/appendix/activity/admin-delegated-admin-settings">DELEGATED_ADMIN_SETTINGS</a></td> <td><code translate="no" dir="ltr">google.admin.AdminService.assignRole</code><br/><code translate="no" dir="ltr">google.admin.AdminService.createRole</code><br/><code translate="no" dir="ltr">google.admin.AdminService.deleteRole</code><br/><code translate="no" dir="ltr">google.admin.AdminService.addPrivilege</code><br/><code translate="no" dir="ltr">google.admin.AdminService.removePrivilege</code><br/><code translate="no" dir="ltr">google.admin.AdminService.renameRole</code><br/><code translate="no" dir="ltr">google.admin.AdminService.updateRole</code><br/><code translate="no" dir="ltr">google.admin.AdminService.unassignRole</code><br/></td> </tr> <tr> <td>DEVICE_SETTINGS</td> <td><code translate="no" dir="ltr">google.admin.AdminService.deleteDevice</code><br/><code translate="no" dir="ltr">google.admin.AdminService.moveDeviceToOrgUnit</code></td> </tr> <tr> <td><a href="https://developers.google.com/admin-sdk/reports/v1/appendix/activity/admin-docs-settings">DOCS_SETTINGS</a></td> <td><code translate="no" dir="ltr">google.admin.AdminService.transferDocumentOwnership</code><br/><code translate="no" dir="ltr">google.admin.AdminService.driveDataRestore</code><br/><code translate="no" dir="ltr">google.admin.AdminService.changeDocsSetting</code><br/></td> </tr> <tr> <td><a href="https://developers.google.com/admin-sdk/reports/v1/appendix/activity/admin-domain-settings">DOMAIN_SETTINGS</a></td> <td><code translate="no" dir="ltr">google.admin.AdminService.changeAccountAutoRenewal</code><br/><code translate="no" dir="ltr">google.admin.AdminService.addApplication</code><br/><code translate="no" dir="ltr">google.admin.AdminService.addApplicationToWhitelist</code><br/><code translate="no" dir="ltr">google.admin.AdminService.changeAdvertisementOption</code><br/><code translate="no" dir="ltr">google.admin.AdminService.createAlert</code><br/><code translate="no" dir="ltr">google.admin.AdminService.changeAlertCriteria</code><br/><code translate="no" dir="ltr">google.admin.AdminService.deleteAlert</code><br/><code translate="no" dir="ltr">google.admin.AdminService.alertReceiversChanged</code><br/><code translate="no" dir="ltr">google.admin.AdminService.renameAlert</code><br/><code translate="no" dir="ltr">google.admin.AdminService.alertStatusChanged</code><br/><code translate="no" dir="ltr">google.admin.AdminService.addDomainAlias</code><br/><code translate="no" dir="ltr">google.admin.AdminService.removeDomainAlias</code><br/><code translate="no" dir="ltr">google.admin.AdminService.skipDomainAliasMx</code><br/><code translate="no" dir="ltr">google.admin.AdminService.verifyDomainAliasMx</code><br/><code translate="no" dir="ltr">google.admin.AdminService.verifyDomainAlias</code><br/><code translate="no" dir="ltr">google.admin.AdminService.toggleOauthAccessToAllApis</code><br/><code translate="no" dir="ltr">google.admin.AdminService.toggleAllowAdminPasswordReset</code><br/><code translate="no" dir="ltr">google.admin.AdminService.enableApiAccess</code><br/><code translate="no" dir="ltr">google.admin.AdminService.authorizeApiClientAccess</code><br/><code translate="no" dir="ltr">google.admin.AdminService.removeApiClientAccess</code><br/><code translate="no" dir="ltr">google.admin.AdminService.chromeLicensesRedeemed</code><br/><code translate="no" dir="ltr">google.admin.AdminService.toggleAutoAddNewService</code><br/><code translate="no" dir="ltr">google.admin.AdminService.changePrimaryDomain</code><br/><code translate="no" dir="ltr">google.admin.AdminService.changeWhitelistSetting</code><br/><code translate="no" dir="ltr">google.admin.AdminService.communicationPreferencesSettingChange</code><br/><code translate="no" dir="ltr">google.admin.AdminService.changeConflictAccountAction</code><br/><code translate="no" dir="ltr">google.admin.AdminService.enableFeedbackSolicitation</code><br/><code translate="no" dir="ltr">google.admin.AdminService.toggleContactSharing</code><br/><code translate="no" dir="ltr">google.admin.AdminService.createPlayForWorkToken</code><br/><code translate="no" dir="ltr">google.admin.AdminService.toggleUseCustomLogo</code><br/><code translate="no" dir="ltr">google.admin.AdminService.changeCustomLogo</code><br/><code translate="no" dir="ltr">google.admin.AdminService.changeDataLocalizationForRussia</code><br/><code translate="no" dir="ltr">google.admin.AdminService.changeDataLocalizationSetting</code><br/><code translate="no" dir="ltr">google.admin.AdminService.changeDataProtectionOfficerContactInfo</code><br/><code translate="no" dir="ltr">google.admin.AdminService.deletePlayForWorkToken</code><br/><code translate="no" dir="ltr">google.admin.AdminService.viewDnsLoginDetails</code><br/><code translate="no" dir="ltr">google.admin.AdminService.changeDomainDefaultLocale</code><br/><code translate="no" dir="ltr">google.admin.AdminService.changeDomainDefaultTimezone</code><br/><code translate="no" dir="ltr">google.admin.AdminService.changeDomainName</code><br/><code translate="no" dir="ltr">google.admin.AdminService.toggleEnablePreReleaseFeatures</code><br/><code translate="no" dir="ltr">google.admin.AdminService.changeDomainSupportMessage</code><br/><code translate="no" dir="ltr">google.admin.AdminService.addTrustedDomains</code><br/><code translate="no" dir="ltr">google.admin.AdminService.removeTrustedDomains</code><br/><code translate="no" dir="ltr">google.admin.AdminService.changeEduType</code><br/><code translate="no" dir="ltr">google.admin.AdminService.toggleEnableOauthConsumerKey</code><br/><code translate="no" dir="ltr">google.admin.AdminService.toggleSsoEnabled</code><br/><code translate="no" dir="ltr">google.admin.AdminService.toggleSsl</code><br/><code translate="no" dir="ltr">google.admin.AdminService.changeEuRepresentativeContactInfo</code><br/><code translate="no" dir="ltr">google.admin.AdminService.generateTransferToken</code><br/><code translate="no" dir="ltr">google.admin.AdminService.changeLoginBackgroundColor</code><br/><code translate="no" dir="ltr">google.admin.AdminService.changeLoginBorderColor</code><br/><code translate="no" dir="ltr">google.admin.AdminService.changeLoginActivityTrace</code><br/><code translate="no" dir="ltr">google.admin.AdminService.playForWorkEnroll</code><br/><code translate="no" dir="ltr">google.admin.AdminService.playForWorkUnenroll</code><br/><code translate="no" dir="ltr">google.admin.AdminService.mxRecordVerificationClaim</code><br/><code translate="no" dir="ltr">google.admin.AdminService.toggleNewAppFeatures</code><br/><code translate="no" dir="ltr">google.admin.AdminService.toggleUseNextGenControlPanel</code><br/><code translate="no" dir="ltr">google.admin.AdminService.uploadOauthCertificate</code><br/><code translate="no" dir="ltr">google.admin.AdminService.regenerateOauthConsumerSecret</code><br/><code translate="no" dir="ltr">google.admin.AdminService.toggleOpenIdEnabled</code><br/><code translate="no" dir="ltr">google.admin.AdminService.changeOrganizationName</code><br/><code translate="no" dir="ltr">google.admin.AdminService.toggleOutboundRelay</code><br/><code translate="no" dir="ltr">google.admin.AdminService.changePasswordMaxLength</code><br/><code translate="no" dir="ltr">google.admin.AdminService.changePasswordMinLength</code><br/><code translate="no" dir="ltr">google.admin.AdminService.updateDomainPrimaryAdminEmail</code><br/><code translate="no" dir="ltr">google.admin.AdminService.enableServiceOrFeatureNotifications</code><br/><code translate="no" dir="ltr">google.admin.AdminService.removeApplication</code><br/><code translate="no" dir="ltr">google.admin.AdminService.removeApplicationFromWhitelist</code><br/><code translate="no" dir="ltr">google.admin.AdminService.changeRenewDomainRegistration</code><br/><code translate="no" dir="ltr">google.admin.AdminService.changeResellerAccess</code><br/><code translate="no" dir="ltr">google.admin.AdminService.ruleActionsChanged</code><br/><code translate="no" dir="ltr">google.admin.AdminService.createRule</code><br/><code translate="no" dir="ltr">google.admin.AdminService.changeRuleCriteria</code><br/><code translate="no" dir="ltr">google.admin.AdminService.deleteRule</code><br/><code translate="no" dir="ltr">google.admin.AdminService.renameRule</code><br/><code translate="no" dir="ltr">google.admin.AdminService.ruleStatusChanged</code><br/><code translate="no" dir="ltr">google.admin.AdminService.addSecondaryDomain</code><br/><code translate="no" dir="ltr">google.admin.AdminService.removeSecondaryDomain</code><br/><code translate="no" dir="ltr">google.admin.AdminService.skipSecondaryDomainMx</code><br/><code translate="no" dir="ltr">google.admin.AdminService.verifySecondaryDomainMx</code><br/><code translate="no" dir="ltr">google.admin.AdminService.verifySecondaryDomain</code><br/><code translate="no" dir="ltr">google.admin.AdminService.updateDomainSecondaryEmail</code><br/><code translate="no" dir="ltr">google.admin.AdminService.changeSsoSettings</code><br/><code translate="no" dir="ltr">google.admin.AdminService.generatePin</code><br/><code translate="no" dir="ltr">google.admin.AdminService.updateRule</code><br/></td> </tr> <tr> <td><a href="https://developers.google.com/admin-sdk/reports/v1/appendix/activity/admin-gmail-settings">EMAIL_SETTINGS</a></td> <td><code translate="no" dir="ltr">google.admin.AdminService.dropFromQuarantine</code><br/><code translate="no" dir="ltr">google.admin.AdminService.emailLogSearch</code><br/><code translate="no" dir="ltr">google.admin.AdminService.emailUndelete</code><br/><code translate="no" dir="ltr">google.admin.AdminService.changeEmailSetting</code><br/><code translate="no" dir="ltr">google.admin.AdminService.changeGmailSetting</code><br/><code translate="no" dir="ltr">google.admin.AdminService.createGmailSetting</code><br/><code translate="no" dir="ltr">google.admin.AdminService.deleteGmailSetting</code><br/><code translate="no" dir="ltr">google.admin.AdminService.rejectFromQuarantine</code><br/><code translate="no" dir="ltr">google.admin.AdminService.releaseFromQuarantine</code><br/></td> </tr> <tr> <td><a href="https://developers.google.com/admin-sdk/reports/v1/appendix/activity/admin-group-settings">GROUP_SETTINGS</a></td> <td><code translate="no" dir="ltr">google.admin.AdminService.createGroup</code><br/><code translate="no" dir="ltr">google.admin.AdminService.deleteGroup</code><br/><code translate="no" dir="ltr">google.admin.AdminService.changeGroupDescription</code><br/><code translate="no" dir="ltr">google.admin.AdminService.groupListDownload</code><br/><code translate="no" dir="ltr">google.admin.AdminService.addGroupMember</code><br/><code translate="no" dir="ltr">google.admin.AdminService.removeGroupMember</code><br/><code translate="no" dir="ltr">google.admin.AdminService.updateGroupMember</code><br/><code translate="no" dir="ltr">google.admin.AdminService.updateGroupMemberDeliverySettings</code><br/><code translate="no" dir="ltr">google.admin.AdminService.updateGroupMemberDeliverySettingsCanEmailOverride</code><br/><code translate="no" dir="ltr">google.admin.AdminService.groupMemberBulkUpload</code><br/><code translate="no" dir="ltr">google.admin.AdminService.groupMembersDownload</code><br/><code translate="no" dir="ltr">google.admin.AdminService.changeGroupEmail</code><br/><code translate="no" dir="ltr">google.admin.AdminService.changeGroupName</code><br/><code translate="no" dir="ltr">google.admin.AdminService.changeGroupSetting</code><br/><code translate="no" dir="ltr">google.admin.AdminService.whitelistedGroupsUpdated</code><br/></td> </tr> <tr> <td>LABELS</td> <td><code translate="no" dir="ltr">google.admin.AdminService.labelDeleted</code><br/><code translate="no" dir="ltr">google.admin.AdminService.labelDisabled</code><br/><code translate="no" dir="ltr">google.admin.AdminService.labelReenabled</code><br/><code translate="no" dir="ltr">google.admin.AdminService.labelPermissionUpdated</code><br/><code translate="no" dir="ltr">google.admin.AdminService.labelPermissionDeleted</code><br/><code translate="no" dir="ltr">google.admin.AdminService.labelPublished</code><br/><code translate="no" dir="ltr">google.admin.AdminService.labelCreated</code><br/><code translate="no" dir="ltr">google.admin.AdminService.labelUpdated</code><br/></td> </tr> <tr> <td><a href="https://developers.google.com/admin-sdk/reports/v1/appendix/activity/admin-licenses-settings">LICENSES_SETTINGS</a></td> <td><code translate="no" dir="ltr">google.admin.AdminService.orgUsersLicenseAssignment</code><br/><code translate="no" dir="ltr">google.admin.AdminService.orgAllUsersLicenseAssignment</code><br/><code translate="no" dir="ltr">google.admin.AdminService.userLicenseAssignment</code><br/><code translate="no" dir="ltr">google.admin.AdminService.changeLicenseAutoAssign</code><br/><code translate="no" dir="ltr">google.admin.AdminService.userLicenseReassignment</code><br/><code translate="no" dir="ltr">google.admin.AdminService.orgLicenseRevoke</code><br/><code translate="no" dir="ltr">google.admin.AdminService.userLicenseRevoke</code><br/><code translate="no" dir="ltr">google.admin.AdminService.updateDynamicLicense</code><br/><code translate="no" dir="ltr">google.admin.AdminService.licenseUsageUpdate</code><br/></td> </tr> <tr> <td><a href="https://developers.google.com/admin-sdk/reports/v1/appendix/activity/admin-mobile-settings">MOBILE_SETTINGS</a></td> <td><code translate="no" dir="ltr">google.admin.AdminService.actionCancelled</code><br/><code translate="no" dir="ltr">google.admin.AdminService.actionRequested</code><br/><code translate="no" dir="ltr">google.admin.AdminService.addMobileCertificate</code><br/><code translate="no" dir="ltr">google.admin.AdminService.companyDevicesBulkCreation</code><br/><code translate="no" dir="ltr">google.admin.AdminService.companyOwnedDeviceBlocked</code><br/><code translate="no" dir="ltr">google.admin.AdminService.companyDeviceDeletion</code><br/><code translate="no" dir="ltr">google.admin.AdminService.companyOwnedDeviceUnblocked</code><br/><code translate="no" dir="ltr">google.admin.AdminService.companyOwnedDeviceWiped</code><br/><code translate="no" dir="ltr">google.admin.AdminService.changeMobileApplicationPermissionGrant</code><br/><code translate="no" dir="ltr">google.admin.AdminService.changeMobileApplicationPriorityOrder</code><br/><code translate="no" dir="ltr">google.admin.AdminService.removeMobileApplicationFromWhitelist</code><br/><code translate="no" dir="ltr">google.admin.AdminService.changeMobileApplicationSettings</code><br/><code translate="no" dir="ltr">google.admin.AdminService.addMobileApplicationToWhitelist</code><br/><code translate="no" dir="ltr">google.admin.AdminService.mobileDeviceApprove</code><br/><code translate="no" dir="ltr">google.admin.AdminService.mobileDeviceBlock</code><br/><code translate="no" dir="ltr">google.admin.AdminService.mobileDeviceDelete</code><br/><code translate="no" dir="ltr">google.admin.AdminService.mobileDeviceWipe</code><br/><code translate="no" dir="ltr">google.admin.AdminService.changeMobileSetting</code><br/><code translate="no" dir="ltr">google.admin.AdminService.changeAdminRestrictionsPin</code><br/><code translate="no" dir="ltr">google.admin.AdminService.changeMobileWirelessNetwork</code><br/><code translate="no" dir="ltr">google.admin.AdminService.addMobileWirelessNetwork</code><br/><code translate="no" dir="ltr">google.admin.AdminService.removeMobileWirelessNetwork</code><br/><code translate="no" dir="ltr">google.admin.AdminService.changeMobileWirelessNetworkPassword</code><br/><code translate="no" dir="ltr">google.admin.AdminService.removeMobileCertificate</code><br/><code translate="no" dir="ltr">google.admin.AdminService.enrollForGoogleDeviceManagement</code><br/><code translate="no" dir="ltr">google.admin.AdminService.useGoogleMobileManagement</code><br/><code translate="no" dir="ltr">google.admin.AdminService.useGoogleMobileManagementForNonIos</code><br/><code translate="no" dir="ltr">google.admin.AdminService.useGoogleMobileManagementForIos</code><br/><code translate="no" dir="ltr">google.admin.AdminService.mobileAccountWipe</code><br/><code translate="no" dir="ltr">google.admin.AdminService.mobileDeviceCancelWipeThenApprove</code><br/><code translate="no" dir="ltr">google.admin.AdminService.mobileDeviceCancelWipeThenBlock</code><br/></td> </tr> <tr> <td><a href="https://developers.google.com/admin-sdk/reports/v1/appendix/activity/admin-org-settings">ORG_SETTINGS</a></td> <td><code translate="no" dir="ltr">google.admin.AdminService.chromeLicensesEnabled</code><br/><code translate="no" dir="ltr">google.admin.AdminService.chromeApplicationLicenseReservationCreated</code><br/><code translate="no" dir="ltr">google.admin.AdminService.chromeApplicationLicenseReservationDeleted</code><br/><code translate="no" dir="ltr">google.admin.AdminService.chromeApplicationLicenseReservationUpdated</code><br/><code translate="no" dir="ltr">google.admin.AdminService.assignCustomLogo</code><br/><code translate="no" dir="ltr">google.admin.AdminService.unassignCustomLogo</code><br/><code translate="no" dir="ltr">google.admin.AdminService.createEnrollmentToken</code><br/><code translate="no" dir="ltr">google.admin.AdminService.revokeEnrollmentToken</code><br/><code translate="no" dir="ltr">google.admin.AdminService.chromeLicensesAllowed</code><br/><code translate="no" dir="ltr">google.admin.AdminService.createOrgUnit</code><br/><code translate="no" dir="ltr">google.admin.AdminService.removeOrgUnit</code><br/><code translate="no" dir="ltr">google.admin.AdminService.editOrgUnitDescription</code><br/><code translate="no" dir="ltr">google.admin.AdminService.moveOrgUnit</code><br/><code translate="no" dir="ltr">google.admin.AdminService.editOrgUnitName</code><br/><code translate="no" dir="ltr">google.admin.AdminService.toggleServiceEnabled</code><br/></td> </tr> <tr> <td><a href="https://support.google.com/a/answer/7575955">SECURITY_INVESTIGATION</a></td> <td><code translate="no" dir="ltr">google.admin.AdminService.securityInvestigationAction</code><br/><code translate="no" dir="ltr">google.admin.AdminService.securityInvestigationActionCancellation</code><br/><code translate="no" dir="ltr">google.admin.AdminService.securityInvestigationActionCompletion</code><br/><code translate="no" dir="ltr">google.admin.AdminService.securityInvestigationActionRetry</code><br/><code translate="no" dir="ltr">google.admin.AdminService.securityInvestigationActionVerificationConfirmation</code><br/><code translate="no" dir="ltr">google.admin.AdminService.securityInvestigationActionVerificationRequest</code><br/><code translate="no" dir="ltr">google.admin.AdminService.securityInvestigationActionVerificationRequestExpiration</code><br/><code translate="no" dir="ltr">google.admin.AdminService.securityInvestigationChartCreate</code><br/><code translate="no" dir="ltr">google.admin.AdminService.securityInvestigationContentAccess</code><br/><code translate="no" dir="ltr">google.admin.AdminService.securityInvestigationDownloadAttachment</code><br/><code translate="no" dir="ltr">google.admin.AdminService.securityInvestigationExportActionResults</code><br/><code translate="no" dir="ltr">google.admin.AdminService.securityInvestigationExportQuery</code><br/><code translate="no" dir="ltr">google.admin.AdminService.securityInvestigationObjectCreateDraftInvestigation</code><br/><code translate="no" dir="ltr">google.admin.AdminService.securityInvestigationObjectDeleteInvestigation</code><br/><code translate="no" dir="ltr">google.admin.AdminService.securityInvestigationObjectDuplicateInvestigation</code><br/><code translate="no" dir="ltr">google.admin.AdminService.securityInvestigationObjectOwnershipTransfer</code><br/><code translate="no" dir="ltr">google.admin.AdminService.securityInvestigationObjectSaveInvestigation</code><br/><code translate="no" dir="ltr">google.admin.AdminService.securityInvestigationObjectUpdateDirectSharing</code><br/><code translate="no" dir="ltr">google.admin.AdminService.securityInvestigationObjectUpdateLinkSharing</code><br/><code translate="no" dir="ltr">google.admin.AdminService.securityInvestigationQuery</code><br/><code translate="no" dir="ltr">google.admin.AdminService.securityInvestigationSettingUpdate</code><br/></td> </tr> <tr> <td>SECURITY_SETTINGS</td> <td><code translate="no" dir="ltr">google.admin.AdminService.addToTrustedOauth2Apps</code><br/><code translate="no" dir="ltr">google.admin.AdminService.allowAspWithout2Sv</code><br/><code translate="no" dir="ltr">google.admin.AdminService.allowServiceForOauth2Access</code><br/><code translate="no" dir="ltr">google.admin.AdminService.allowStrongAuthentication</code><br/><code translate="no" dir="ltr">google.admin.AdminService.blockOnDeviceAccess</code><br/><code translate="no" dir="ltr">google.admin.AdminService.changeAllowedTwoStepVerificationMethods</code><br/><code translate="no" dir="ltr">google.admin.AdminService.changeAppAccessSettingsCollectionId</code><br/><code translate="no" dir="ltr">google.admin.AdminService.changeCaaAppAssignments</code><br/><code translate="no" dir="ltr">google.admin.AdminService.changeCaaDefaultAssignments</code><br/><code translate="no" dir="ltr">google.admin.AdminService.changeCaaErrorMessage</code><br/><code translate="no" dir="ltr">google.admin.AdminService.changeSessionLength</code><br/><code translate="no" dir="ltr">google.admin.AdminService.changeTwoStepVerificationEnrollmentPeriodDuration</code><br/><code translate="no" dir="ltr">google.admin.AdminService.changeTwoStepVerificationFrequency</code><br/><code translate="no" dir="ltr">google.admin.AdminService.changeTwoStepVerificationGracePeriodDuration</code><br/><code translate="no" dir="ltr">google.admin.AdminService.changeTwoStepVerificationStartDate</code><br/><code translate="no" dir="ltr">google.admin.AdminService.disallowServiceForOauth2Access</code><br/><code translate="no" dir="ltr">google.admin.AdminService.enableNonAdminUserPasswordRecovery</code><br/><code translate="no" dir="ltr">google.admin.AdminService.enforceStrongAuthentication</code><br/><code translate="no" dir="ltr">google.admin.AdminService.removeFromTrustedOauth2Apps</code><br/><code translate="no" dir="ltr">google.admin.AdminService.sessionControlSettingsChange</code><br/><code translate="no" dir="ltr">google.admin.AdminService.toggleCaaEnablement</code><br/><code translate="no" dir="ltr">google.admin.AdminService.trustDomainOwnedOauth2Apps</code><br/><code translate="no" dir="ltr">google.admin.AdminService.unblockOnDeviceAccess</code><br/><code translate="no" dir="ltr">google.admin.AdminService.untrustDomainOwnedOauth2Apps</code><br/><code translate="no" dir="ltr">google.admin.AdminService.updateErrorMsgForRestrictedOauth2Apps</code><br/><code translate="no" dir="ltr">google.admin.AdminService.weakProgrammaticLoginSettingsChanged</code><br/></td> </tr> <tr> <td><a href="https://developers.google.com/admin-sdk/reports/v1/appendix/activity/admin-sites-settings">SITES_SETTINGS</a></td> <td><code translate="no" dir="ltr">google.admin.AdminService.addWebAddress</code><br/><code translate="no" dir="ltr">google.admin.AdminService.deleteWebAddress</code><br/><code translate="no" dir="ltr">google.admin.AdminService.changeSitesSetting</code><br/><code translate="no" dir="ltr">google.admin.AdminService.changeSitesWebAddressMappingUpdates</code><br/><code translate="no" dir="ltr">google.admin.AdminService.viewSiteDetails</code><br/></td> </tr> <tr> <td><a href="https://developers.google.com/admin-sdk/reports/v1/appendix/activity/admin-user-settings">USER_SETTINGS</a></td> <td><code translate="no" dir="ltr">google.admin.AdminService.delete2SvScratchCodes</code><br/><code translate="no" dir="ltr">google.admin.AdminService.generate2SvScratchCodes</code><br/><code translate="no" dir="ltr">google.admin.AdminService.revoke3LoDeviceTokens</code><br/><code translate="no" dir="ltr">google.admin.AdminService.revoke3LoToken</code><br/><code translate="no" dir="ltr">google.admin.AdminService.addRecoveryEmail</code><br/><code translate="no" dir="ltr">google.admin.AdminService.addRecoveryPhone</code><br/><code translate="no" dir="ltr">google.admin.AdminService.grantAdminPrivilege</code><br/><code translate="no" dir="ltr">google.admin.AdminService.revokeAdminPrivilege</code><br/><code translate="no" dir="ltr">google.admin.AdminService.revokeAsp</code><br/><code translate="no" dir="ltr">google.admin.AdminService.toggleAutomaticContactSharing</code><br/><code translate="no" dir="ltr">google.admin.AdminService.bulkUpload</code><br/><code translate="no" dir="ltr">google.admin.AdminService.bulkUploadNotificationSent</code><br/><code translate="no" dir="ltr">google.admin.AdminService.cancelUserInvite</code><br/><code translate="no" dir="ltr">google.admin.AdminService.changeUserCustomField</code><br/><code translate="no" dir="ltr">google.admin.AdminService.changeUserExternalId</code><br/><code translate="no" dir="ltr">google.admin.AdminService.changeUserGender</code><br/><code translate="no" dir="ltr">google.admin.AdminService.changeUserIm</code><br/><code translate="no" dir="ltr">google.admin.AdminService.enableUserIpWhitelist</code><br/><code translate="no" dir="ltr">google.admin.AdminService.changeUserKeyword</code><br/><code translate="no" dir="ltr">google.admin.AdminService.changeUserLanguage</code><br/><code translate="no" dir="ltr">google.admin.AdminService.changeUserLocation</code><br/><code translate="no" dir="ltr">google.admin.AdminService.changeUserOrganization</code><br/><code translate="no" dir="ltr">google.admin.AdminService.changeUserPhoneNumber</code><br/><code translate="no" dir="ltr">google.admin.AdminService.changeRecoveryEmail</code><br/><code translate="no" dir="ltr">google.admin.AdminService.changeRecoveryPhone</code><br/><code translate="no" dir="ltr">google.admin.AdminService.changeUserRelation</code><br/><code translate="no" dir="ltr">google.admin.AdminService.changeUserAddress</code><br/><code translate="no" dir="ltr">google.admin.AdminService.createEmailMonitor</code><br/><code translate="no" dir="ltr">google.admin.AdminService.createDataTransferRequest</code><br/><code translate="no" dir="ltr">google.admin.AdminService.grantDelegatedAdminPrivileges</code><br/><code translate="no" dir="ltr">google.admin.AdminService.deleteAccountInfoDump</code><br/><code translate="no" dir="ltr">google.admin.AdminService.deleteEmailMonitor</code><br/><code translate="no" dir="ltr">google.admin.AdminService.deleteMailboxDump</code><br/><code translate="no" dir="ltr">google.admin.AdminService.changeFirstName</code><br/><code translate="no" dir="ltr">google.admin.AdminService.gmailResetUser</code><br/><code translate="no" dir="ltr">google.admin.AdminService.changeLastName</code><br/><code translate="no" dir="ltr">google.admin.AdminService.mailRoutingDestinationAdded</code><br/><code translate="no" dir="ltr">google.admin.AdminService.mailRoutingDestinationRemoved</code><br/><code translate="no" dir="ltr">google.admin.AdminService.addNickname</code><br/><code translate="no" dir="ltr">google.admin.AdminService.removeNickname</code><br/><code translate="no" dir="ltr">google.admin.AdminService.changePassword</code><br/><code translate="no" dir="ltr">google.admin.AdminService.changePasswordOnNextLogin</code><br/><code translate="no" dir="ltr">google.admin.AdminService.downloadPendingInvitesList</code><br/><code translate="no" dir="ltr">google.admin.AdminService.removeRecoveryEmail</code><br/><code translate="no" dir="ltr">google.admin.AdminService.removeRecoveryPhone</code><br/><code translate="no" dir="ltr">google.admin.AdminService.requestAccountInfo</code><br/><code translate="no" dir="ltr">google.admin.AdminService.requestMailboxDump</code><br/><code translate="no" dir="ltr">google.admin.AdminService.resendUserInvite</code><br/><code translate="no" dir="ltr">google.admin.AdminService.resetSigninCookies</code><br/><code translate="no" dir="ltr">google.admin.AdminService.securityKeyRegisteredForUser</code><br/><code translate="no" dir="ltr">google.admin.AdminService.revokeSecurityKey</code><br/><code translate="no" dir="ltr">google.admin.AdminService.userInvite</code><br/><code translate="no" dir="ltr">google.admin.AdminService.viewTempPassword</code><br/><code translate="no" dir="ltr">google.admin.AdminService.turnOff2StepVerification</code><br/><code translate="no" dir="ltr">google.admin.AdminService.unblockUserSession</code><br/><code translate="no" dir="ltr">google.admin.AdminService.unenrollUserFromTitanium</code><br/><code translate="no" dir="ltr">google.admin.AdminService.archiveUser</code><br/><code translate="no" dir="ltr">google.admin.AdminService.updateBirthdate</code><br/><code translate="no" dir="ltr">google.admin.AdminService.createUser</code><br/><code translate="no" dir="ltr">google.admin.AdminService.deleteUser</code><br/><code translate="no" dir="ltr">google.admin.AdminService.downgradeUserFromGplus</code><br/><code translate="no" dir="ltr">google.admin.AdminService.userEnrolledInTwoStepVerification</code><br/><code translate="no" dir="ltr">google.admin.AdminService.downloadUserlistCsv</code><br/><code translate="no" dir="ltr">google.admin.AdminService.moveUserToOrgUnit</code><br/><code translate="no" dir="ltr">google.admin.AdminService.userPutInTwoStepVerificationGracePeriod</code><br/><code translate="no" dir="ltr">google.admin.AdminService.renameUser</code><br/><code translate="no" dir="ltr">google.admin.AdminService.unenrollUserFromStrongAuth</code><br/><code translate="no" dir="ltr">google.admin.AdminService.suspendUser</code><br/><code translate="no" dir="ltr">google.admin.AdminService.unarchiveUser</code><br/><code translate="no" dir="ltr">google.admin.AdminService.undeleteUser</code><br/><code translate="no" dir="ltr">google.admin.AdminService.unsuspendUser</code><br/><code translate="no" dir="ltr">google.admin.AdminService.upgradeUserToGplus</code><br/><code translate="no" dir="ltr">google.admin.AdminService.usersBulkUpload</code><br/><code translate="no" dir="ltr">google.admin.AdminService.usersBulkUploadNotificationSent</code></td> </tr> </tbody> </table> </div> </div> </section> <section class="expandable " id="1" track-type="collapse" track-name="1" track-metadata-eventdetail="1"> <div class="expand-control cloud-collapse__label"> <h4 class="cloud-collapse__text cloud-headline4" id="google-workspace-enterprise-groups" data-text="Google Workspace Enterprise Groups" tabindex="-1">Google Workspace Enterprise Groups</h4> </div> <div class="cloud-collapse__panel cloud-grid"> <div class="cloud-grid__col is-10"> Google Workspace Enterprise Groups Audit audit logs use the resource type <code translate="no" dir="ltr">audited_resource</code> for all audit logs.</p> <p>Google Workspace Enterprise Groups Audit audit logs use the service name <code translate="no" dir="ltr">cloudidentity.googleapis.com</code>.</p> <p>Google Workspace Enterprise Groups Audit writes Admin Activity audit logs only. The following are the audited operations:</p> <table> <thead> <tr> <th><div style="width:175px"> Audit logs category </div></th> <th> <code translate="no" dir="ltr">AuditLog.method_name</code> </th> </tr> </thead> <tbody> <tr> <td>Admin Activity audit logs </td> <td><code translate="no" dir="ltr">google.apps.cloudidentity.groups.v1.GroupsService.UpdateGroup</code><br/> <code translate="no" dir="ltr">google.apps.cloudidentity.groups.v1.MembershipsService.UpdateMembership</code></td> </tr> </tbody> </table> </div> </div> </section> <section class="expandable " id="2" track-type="collapse" track-name="2" track-metadata-eventdetail="2"> <div class="expand-control cloud-collapse__label"> <h4 class="cloud-collapse__text cloud-headline4" id="google-workspace-login-audit" data-text="Google Workspace Login Audit" tabindex="-1">Google Workspace Login Audit</h4> </div> <div class="cloud-collapse__panel cloud-grid"> <div class="cloud-grid__col is-10"> All Google Workspace Login Audit audit logs use the resource type <code translate="no" dir="ltr">audited_resource</code>.</p> <p>Google Workspace Login Audit audit logs use the service name <code translate="no" dir="ltr">login.googleapis.com</code>.</p> <p>Google Workspace Login Audit writes Data Access audit logs only. The following are the audited operations; <a href="/logging/docs/audit/gsuite-login-samples">log samples</a> for each operation are available.</p> <table> <thead> <tr> <th>Audit logs category</th> <th><code translate="no" dir="ltr">AuditLog.method_name</code></th> </tr> </thead> <tbody> <tr> <td>Data Access audit logs </td> <td><code translate="no" dir="ltr">google.login.LoginService.2svDisable</code> <br/> <code translate="no" dir="ltr">google.login.LoginService.2svEnroll</code> <br/> <code translate="no" dir="ltr">google.login.LoginService.accountDisabledPasswordLeak</code> <br/> <code translate="no" dir="ltr">google.login.LoginService.accountDisabledGeneric</code> <br/> <code translate="no" dir="ltr">google.login.LoginService.accountDisabledSpammingThroughRelay</code> <br/> <code translate="no" dir="ltr">google.login.LoginService.accountDisabledSpamming</code> <br/> <code translate="no" dir="ltr">google.login.LoginService.accountDisabledHijacked</code> <br/> <code translate="no" dir="ltr">google.login.LoginService.emailForwardingOutOfDomain</code> <br/> <code translate="no" dir="ltr">google.login.LoginService.govAttackWarning</code> <br/> <code translate="no" dir="ltr">google.login.LoginService.loginChallenge</code> <br/> <code translate="no" dir="ltr">google.login.LoginService.loginFailure</code> <br/> <code translate="no" dir="ltr">google.login.LoginService.loginVerification</code> <br/> <code translate="no" dir="ltr">google.login.LoginService.logout</code> <br/> <code translate="no" dir="ltr">google.login.LoginService.loginSuccess</code> <br/> <code translate="no" dir="ltr">google.login.LoginService.passwordEdit</code> <br/> <code translate="no" dir="ltr">google.login.LoginService.recoveryEmailEdit</code> <br/> <code translate="no" dir="ltr">google.login.LoginService.recoveryPhoneEdit</code> <br/> <code translate="no" dir="ltr">google.login.LoginService.recoverySecretQaEdit</code> <br/> <code translate="no" dir="ltr">google.login.LoginService.riskySensitiveActionAllowed</code> <br /> <code translate="no" dir="ltr">google.login.LoginService.riskySensitiveActionBlocked</code> <br /> <code translate="no" dir="ltr">google.login.LoginService.suspiciousLogin</code> <br/> <code translate="no" dir="ltr">google.login.LoginService.suspiciousLoginLessSecureApp</code> <br/> <code translate="no" dir="ltr">google.login.LoginService.suspiciousProgrammaticLogin</code> <br/> <code translate="no" dir="ltr">google.login.LoginService.titaniumEnroll</code> <br/> <code translate="no" dir="ltr">google.login.LoginService.titaniumUnenroll</code> <br/></td> </tr> </tbody> </table> </div> </div> </section> <section class="expandable " id="5" track-type="collapse" track-name="5" track-metadata-eventdetail="5"> <div class="expand-control cloud-collapse__label"> <h4 class="cloud-collapse__text cloud-headline4" id="google-workspace-oauth-token" data-text="Google Workspace OAuth Token" tabindex="-1">Google Workspace OAuth Token</h4> </div> <div class="cloud-collapse__panel cloud-grid"> <div class="cloud-grid__col is-10"> Google Workspace OAuth Token Audit audit logs use the resource type <code translate="no" dir="ltr">audited_resource</code> for all audit logs.</p> <p>Google Workspace OAuth Token Audit audit logs use the service name <code translate="no" dir="ltr">oauth2.googleapis.com</code>.</p> <p>Google Workspace OAuth Token Audit writes both Admin Activity and Data Access audit logs. The following are the audited operations:</p> <table> <thead> <tr> <th><div style="width:175px"> Audit logs category </div></th> <th> <code translate="no" dir="ltr">AuditLog.method_name</code> </th> </tr> </thead> <tbody> <tr> <td>Admin Activity audit logs </td> <td><code translate="no" dir="ltr">google.identity.oauth2.Deny</code><br/> <code translate="no" dir="ltr">google.identity.oauth2.GetToken</code><br/> <code translate="no" dir="ltr">google.identity.oauth2.Request</code><br/> <code translate="no" dir="ltr">google.identity.oauth2.RevokeToken</code><br/></td> </tr> <tr> <td>Data Access audit logs</td> <td><code translate="no" dir="ltr">google.identity.oauth2.GetTokenInfo</code> <br/></td> </tr> </tbody> </table> </div> </div> </section> <section class="expandable " id="4" track-type="collapse" track-name="4" track-metadata-eventdetail="4"> <div class="expand-control cloud-collapse__label"> <h4 class="cloud-collapse__text cloud-headline4" id="google-workspace-saml" data-text="Google Workspace SAML" tabindex="-1">Google Workspace SAML</h4> </div> <div class="cloud-collapse__panel cloud-grid"> <div class="cloud-grid__col is-10"> Google Workspace SAML Audit audit logs use the resource type <code translate="no" dir="ltr">audited_resource</code> for all audit logs.</p> <p>Google Workspace SAML Audit audit logs use the service name <code translate="no" dir="ltr">login.googleapis.com</code>.</p> <p>Google Workspace SAML Audit writes Data Access audit logs only. The following are the audited operations:</p> <table> <thead> <tr> <th><div style="width:175px"> Audit logs category </div></th> <th> <code translate="no" dir="ltr">AuditLog.method_name</code> </th> </tr> </thead> <tbody> <tr> <td>Data Access audit logs</td> <td><code translate="no" dir="ltr">google.apps.login.v1.SamlLoginFailed</code> <br/></td> </tr> <tr> <td></td> <td><code translate="no" dir="ltr">google.apps.login.v1.SamlLoginSucceeded</code><br/></td> </tr> </tbody> </table> </div> </div> </section> </div> </div> </div> </div> <h2 id="audit_log_permissions" data-text="Audit log permissions" tabindex="-1">Audit log permissions</h2> <p>IAM permissions and roles determine your ability to access audit logs data in the <a href="/logging/docs/reference/v2/rest">Logging API</a>, the <a href="/logging/docs/view/logs-explorer-interface">Logs Explorer</a>, and the <a href="/logging/docs/reference/tools/gcloud-logging">Google Cloud CLI</a>.</p> <p>For detailed information about the organization-level IAM permissions and roles you might need, see the <a href="/logging/docs/access-control">Access control with IAM</a>.</p> <h2 id="format" data-text="Audit log format" tabindex="-1">Audit log format</h2> <p>Google Workspace audit log entries include the following objects:</p> <ul> <li><p>The log entry itself, which is an object of type <a href="/logging/docs/reference/v2/rest/v2/LogEntry"><code translate="no" dir="ltr">LogEntry</code></a>. When examining audit logging data, you might find the following useful:</p> <ul> <li><code translate="no" dir="ltr">logName</code> contains the organization ID and audit log type.</li> <li><code translate="no" dir="ltr">resource</code> contains the target of the audited operation.</li> <li><code translate="no" dir="ltr">timeStamp</code> contains the time of the audited operation.</li> <li><code translate="no" dir="ltr">protoPayload</code> contains the Google Workspace audit log in its <code translate="no" dir="ltr">metadata</code> field.</li> </ul></li> </ul> <p>The <code translate="no" dir="ltr">protoPayload.metadata</code> field holds the audited Google Workspace information. The following is an example of a Login Audit log:</p> <div></div><devsite-code><pre class="devsite-click-to-copy" translate="no" dir="ltr" is-upgraded syntax="JSON"><span class="devsite-syntax-p">{</span> <span class="devsite-syntax-w"> </span><span class="devsite-syntax-nt">"protoPayload"</span><span class="devsite-syntax-p">:</span><span class="devsite-syntax-w"> </span><span class="devsite-syntax-p">{</span> <span class="devsite-syntax-w"> </span><span class="devsite-syntax-nt">"@type"</span><span class="devsite-syntax-p">:</span><span class="devsite-syntax-w"> </span><span class="devsite-syntax-s2">"type.googleapis.com/google.cloud.audit.AuditLog"</span><span class="devsite-syntax-p">,</span> <span class="devsite-syntax-w"> </span><span class="devsite-syntax-nt">"authenticationInfo"</span><span class="devsite-syntax-p">:</span><span class="devsite-syntax-w"> </span><span class="devsite-syntax-p">{</span> <span class="devsite-syntax-w"> </span><span class="devsite-syntax-nt">"principalEmail"</span><span class="devsite-syntax-p">:</span><span class="devsite-syntax-w"> </span><span class="devsite-syntax-s2">"test-user@example.net"</span> <span class="devsite-syntax-w"> </span><span class="devsite-syntax-p">},</span> <span class="devsite-syntax-w"> </span><span class="devsite-syntax-nt">"requestMetadata"</span><span class="devsite-syntax-p">:</span><span class="devsite-syntax-w"> </span><span class="devsite-syntax-p">{</span> <span class="devsite-syntax-w"> </span><span class="devsite-syntax-nt">"callerIp"</span><span class="devsite-syntax-p">:</span><span class="devsite-syntax-w"> </span><span class="devsite-syntax-s2">"2001:db8:ffff:ffff:ffff:ffff:ffff:ffff"</span><span class="devsite-syntax-p">,</span> <span class="devsite-syntax-w"> </span><span class="devsite-syntax-nt">"requestAttributes"</span><span class="devsite-syntax-p">:</span><span class="devsite-syntax-w"> </span><span class="devsite-syntax-p">{},</span> <span class="devsite-syntax-w"> </span><span class="devsite-syntax-nt">"destinationAttributes"</span><span class="devsite-syntax-p">:</span><span class="devsite-syntax-w"> </span><span class="devsite-syntax-p">{}</span> <span class="devsite-syntax-w"> </span><span class="devsite-syntax-p">},</span> <span class="devsite-syntax-w"> </span><span class="devsite-syntax-nt">"serviceName"</span><span class="devsite-syntax-p">:</span><span class="devsite-syntax-w"> </span><span class="devsite-syntax-s2">"login.googleapis.com"</span><span class="devsite-syntax-p">,</span> <span class="devsite-syntax-w"> </span><span class="devsite-syntax-nt">"methodName"</span><span class="devsite-syntax-p">:</span><span class="devsite-syntax-w"> </span><span class="devsite-syntax-s2">"google.login.LoginService.loginFailure"</span><span class="devsite-syntax-p">,</span> <span class="devsite-syntax-w"> </span><span class="devsite-syntax-nt">"resourceName"</span><span class="devsite-syntax-p">:</span><span class="devsite-syntax-w"> </span><span class="devsite-syntax-s2">"organizations/123"</span><span class="devsite-syntax-p">,</span> <span class="devsite-syntax-w"> </span><span class="devsite-syntax-nt">"metadata"</span><span class="devsite-syntax-p">:</span><span class="devsite-syntax-w"> </span><span class="devsite-syntax-p">{</span> <span class="devsite-syntax-w"> </span><span class="devsite-syntax-nt">"event"</span><span class="devsite-syntax-p">:</span><span class="devsite-syntax-w"> </span><span class="devsite-syntax-p">[</span> <span class="devsite-syntax-w"> </span><span class="devsite-syntax-p">{</span> <span class="devsite-syntax-w"> </span><span class="devsite-syntax-nt">"eventName"</span><span class="devsite-syntax-p">:</span><span class="devsite-syntax-w"> </span><span class="devsite-syntax-s2">"login_failure"</span><span class="devsite-syntax-p">,</span> <span class="devsite-syntax-w"> </span><span class="devsite-syntax-nt">"eventType"</span><span class="devsite-syntax-p">:</span><span class="devsite-syntax-w"> </span><span class="devsite-syntax-s2">"login"</span><span class="devsite-syntax-p">,</span> <span class="devsite-syntax-w"> </span><span class="devsite-syntax-nt">"parameter"</span><span class="devsite-syntax-p">:</span><span class="devsite-syntax-w"> </span><span class="devsite-syntax-p">[</span> <span class="devsite-syntax-w"> </span><span class="devsite-syntax-p">{</span> <span class="devsite-syntax-w"> </span><span class="devsite-syntax-nt">"value"</span><span class="devsite-syntax-p">:</span><span class="devsite-syntax-w"> </span><span class="devsite-syntax-s2">"google_password"</span><span class="devsite-syntax-p">,</span> <span class="devsite-syntax-w"> </span><span class="devsite-syntax-nt">"type"</span><span class="devsite-syntax-p">:</span><span class="devsite-syntax-w"> </span><span class="devsite-syntax-s2">"TYPE_STRING"</span><span class="devsite-syntax-p">,</span> <span class="devsite-syntax-w"> </span><span class="devsite-syntax-nt">"name"</span><span class="devsite-syntax-p">:</span><span class="devsite-syntax-w"> </span><span class="devsite-syntax-s2">"login_type"</span><span class="devsite-syntax-p">,</span> <span class="devsite-syntax-w"> </span><span class="devsite-syntax-p">},</span> <span class="devsite-syntax-w"> </span><span class="devsite-syntax-p">{</span> <span class="devsite-syntax-w"> </span><span class="devsite-syntax-nt">"name"</span><span class="devsite-syntax-p">:</span><span class="devsite-syntax-w"> </span><span class="devsite-syntax-s2">"login_challenge_method"</span><span class="devsite-syntax-p">,</span> <span class="devsite-syntax-w"> </span><span class="devsite-syntax-nt">"type"</span><span class="devsite-syntax-p">:</span><span class="devsite-syntax-w"> </span><span class="devsite-syntax-s2">"TYPE_STRING"</span><span class="devsite-syntax-p">,</span> <span class="devsite-syntax-w"> </span><span class="devsite-syntax-nt">"label"</span><span class="devsite-syntax-p">:</span><span class="devsite-syntax-w"> </span><span class="devsite-syntax-s2">"LABEL_REPEATED"</span><span class="devsite-syntax-p">,</span> <span class="devsite-syntax-w"> </span><span class="devsite-syntax-nt">"multiStrValue"</span><span class="devsite-syntax-p">:</span><span class="devsite-syntax-w"> </span><span class="devsite-syntax-p">[</span> <span class="devsite-syntax-w"> </span><span class="devsite-syntax-s2">"password"</span><span class="devsite-syntax-p">,</span> <span class="devsite-syntax-w"> </span><span class="devsite-syntax-s2">"idv_preregistered_phone"</span><span class="devsite-syntax-p">,</span> <span class="devsite-syntax-w"> </span><span class="devsite-syntax-s2">"idv_preregistered_phone"</span> <span class="devsite-syntax-w"> </span><span class="devsite-syntax-p">]</span> <span class="devsite-syntax-w"> </span><span class="devsite-syntax-p">},</span> <span class="devsite-syntax-w"> </span><span class="devsite-syntax-p">]</span> <span class="devsite-syntax-w"> </span><span class="devsite-syntax-p">}</span> <span class="devsite-syntax-w"> </span><span class="devsite-syntax-p">],</span> <span class="devsite-syntax-w"> </span><span class="devsite-syntax-nt">"activityId"</span><span class="devsite-syntax-p">:</span><span class="devsite-syntax-w"> </span><span class="devsite-syntax-p">{</span> <span class="devsite-syntax-w"> </span><span class="devsite-syntax-nt">"uniqQualifier"</span><span class="devsite-syntax-p">:</span><span class="devsite-syntax-w"> </span><span class="devsite-syntax-s2">"358068855354"</span><span class="devsite-syntax-p">,</span> <span class="devsite-syntax-w"> </span><span class="devsite-syntax-nt">"timeUsec"</span><span class="devsite-syntax-p">:</span><span class="devsite-syntax-w"> </span><span class="devsite-syntax-s2">"1632500217183212"</span> <span class="devsite-syntax-w"> </span><span class="devsite-syntax-p">},</span> <span class="devsite-syntax-w"> </span><span class="devsite-syntax-nt">"@type"</span><span class="devsite-syntax-p">:</span><span class="devsite-syntax-w"> </span><span class="devsite-syntax-s2">"type.googleapis.com/ccc_hosted_reporting.ActivityProto"</span> <span class="devsite-syntax-w"> </span><span class="devsite-syntax-p">}</span> <span class="devsite-syntax-w"> </span><span class="devsite-syntax-p">},</span> <span class="devsite-syntax-w"> </span><span class="devsite-syntax-nt">"insertId"</span><span class="devsite-syntax-p">:</span><span class="devsite-syntax-w"> </span><span class="devsite-syntax-s2">"-nahbepd4l1x"</span><span class="devsite-syntax-p">,</span> <span class="devsite-syntax-w"> </span><span class="devsite-syntax-nt">"resource"</span><span class="devsite-syntax-p">:</span><span class="devsite-syntax-w"> </span><span class="devsite-syntax-p">{</span> <span class="devsite-syntax-w"> </span><span class="devsite-syntax-nt">"type"</span><span class="devsite-syntax-p">:</span><span class="devsite-syntax-w"> </span><span class="devsite-syntax-s2">"audited_resource"</span><span class="devsite-syntax-p">,</span> <span class="devsite-syntax-w"> </span><span class="devsite-syntax-nt">"labels"</span><span class="devsite-syntax-p">:</span><span class="devsite-syntax-w"> </span><span class="devsite-syntax-p">{</span> <span class="devsite-syntax-w"> </span><span class="devsite-syntax-nt">"method"</span><span class="devsite-syntax-p">:</span><span class="devsite-syntax-w"> </span><span class="devsite-syntax-s2">"google.login.LoginService.loginFailure"</span><span class="devsite-syntax-p">,</span> <span class="devsite-syntax-w"> </span><span class="devsite-syntax-nt">"service"</span><span class="devsite-syntax-p">:</span><span class="devsite-syntax-w"> </span><span class="devsite-syntax-s2">"login.googleapis.com"</span> <span class="devsite-syntax-w"> </span><span class="devsite-syntax-p">}</span> <span class="devsite-syntax-w"> </span><span class="devsite-syntax-p">},</span> <span class="devsite-syntax-w"> </span><span class="devsite-syntax-nt">"timestamp"</span><span class="devsite-syntax-p">:</span><span class="devsite-syntax-w"> </span><span class="devsite-syntax-s2">"2021-09-24T16:16:57.183212Z"</span><span class="devsite-syntax-p">,</span> <span class="devsite-syntax-w"> </span><span class="devsite-syntax-nt">"severity"</span><span class="devsite-syntax-p">:</span><span class="devsite-syntax-w"> </span><span class="devsite-syntax-s2">"NOTICE"</span><span class="devsite-syntax-p">,</span> <span class="devsite-syntax-w"> </span><span class="devsite-syntax-nt">"logName"</span><span class="devsite-syntax-p">:</span><span class="devsite-syntax-w"> </span><span class="devsite-syntax-s2">"organizations/123/logs/cloudaudit.googleapis.com%2Fdata_access"</span><span class="devsite-syntax-p">,</span> <span class="devsite-syntax-w"> </span><span class="devsite-syntax-nt">"receiveTimestamp"</span><span class="devsite-syntax-p">:</span><span class="devsite-syntax-w"> </span><span class="devsite-syntax-s2">"2021-09-24T17:51:25.034361197Z"</span> <span class="devsite-syntax-p">}</span></pre></devsite-code> <p>For information about service-specific audit logging fields, and how to interpret them, select from the services listed in <a href="https://support.google.com/a/answer/9725452">Available audit logs</a>.</p> <h2 id="viewing-logs" data-text="View logs" tabindex="-1">View logs</h2> <p>For information on viewing your Google Workspace audit logs, see <a href="/logging/docs/audit/configure-gsuite-audit-logs">View and manage audit logs for Google Workspace</a>.</p> <h2 id="exporting_audit_logs" data-text="Route audit logs" tabindex="-1">Route audit logs</h2> <p>You can route Google Workspace audit logs from Cloud Logging to supported destinations, including other Logging buckets.</p> <p>Here are some applications for routing audit logs:</p> <ul> <li><p>To use more powerful search capabilities, you can route copies of your audit logs to Cloud Storage, BigQuery, or Pub/Sub. Using Pub/Sub, you can route to other applications, other repositories, and to third parties.</p></li> <li><p>To manage your audit logs across an entire organization, you can create <a href="/logging/docs/export/aggregated_sinks">aggregated sinks</a> that combine and route logs from all the Google Cloud projects, billing accounts, and folders contained by your organization. For instance, you might aggregate and route audit log entries from an organization's folders to a Cloud Storage bucket.</p></li> </ul> <p>For instructions on routing logs, see <a href="/logging/docs/export/configure_export_v2">Route logs to supported destinations</a>.</p> <h2 id="regionalization" data-text="Regionalization" tabindex="-1">Regionalization</h2> <p>You can't choose a region where your Google Workspace logs are stored. Google Workspace logs aren't covered by the <a href="https://support.google.com/a/answer/9223653">Google Workspace Data Region Policy</a>.</p> <h2 id="retention" data-text="Retention periods" tabindex="-1">Retention periods</h2> <p>The following retention periods apply to your audit logs data:</p> <ul> <li><p><a href="https://support.google.com/a/answer/7061566?hl=en">Data retention policy in Google Workspace</a>.</p></li> <li><p><a href="/logging/quotas#logs_retention_periods">Data retention policy in Google Cloud Cloud Logging</a>.</p></li> </ul> <p>For each organization, Cloud Logging automatically stores logs in two buckets: a <code translate="no" dir="ltr">_Default</code> bucket and a <code translate="no" dir="ltr">_Required</code> bucket. The <code translate="no" dir="ltr">_Required</code> bucket holds Admin Activity audit logs, System Event audit logs, and <a href="/cloud-provider-access-management/access-transparency/docs/understanding-workspace-logs">Access Transparency logs</a>. The <code translate="no" dir="ltr">_Default</code> bucket holds all other log entries that aren't stored in the <code translate="no" dir="ltr">_Required</code> bucket. For more information on Logging buckets, see <a href="/logging/docs/routing/overview">Routing and storage overview</a>.</p> <p>You can configure Cloud Logging to retain the logs in the <code translate="no" dir="ltr">_Default</code> logs bucket for a period ranging from 1 day to 3650 days.</p> <p>To update the retention period for the <code translate="no" dir="ltr">_Default</code> logs bucket, see <a href="/logging/docs/buckets#custom-retention">Custom retention</a>.</p> <p>You can't change the retention period on the <code translate="no" dir="ltr">_Required</code> bucket.</p> <h2 id="quotas" data-text="Quotas and limits" tabindex="-1">Quotas and limits</h2> <p>The same quotas apply to audit logs for Google Workspace and Cloud Audit Logs.</p> <p>For details about these usage limits, including the maximum sizes of audit logs, see <a href="/logging/quotas">Quotas and limits</a>.</p> <h2 id="pricing" data-text="Pricing" tabindex="-1">Pricing</h2> <p>Google Workspace's organization-level logs are free.</p> <h2 id="whats_next" data-text="What's next" tabindex="-1">What's next</h2> <ul> <li>Learn how to <a href="/logging/docs/audit/configure-gsuite-audit-logs">configure and manage Google Workspace audit logs</a>.</li> <li>Review <a href="/logging/docs/audit/best-practices">best practices</a> for Cloud Audit Logs.</li> <li>Learn how to <a href="/cloud-provider-access-management/access-transparency/docs/understanding-workspace-logs">view and understand Access Transparency logs for Google Workspace</a>.</li> </ul> <devsite-hats-survey class="nocontent" hats-id="mwETRvWii0eU5NUYprb0Y9z5GVbc" listnr-id="83405"></devsite-hats-survey> </div> <devsite-thumb-rating position="footer"> </devsite-thumb-rating> <devsite-feedback position="footer" project-name="Cloud Logging" product-id="714033" bucket="Documentation" context="Logging docs feedback link" version="t-devsite-webserver-20241114-r00-rc02.464922260396498922" data-label="Send Feedback Button" track-type="feedback" track-name="sendFeedbackLink" track-metadata-position="footer" class="nocontent" project-icon="https://www.gstatic.com/devrel-devsite/prod/v870e399c64f7c43c99a3043db4b3a74327bb93d0914e84a0c3dba90bbfd67625/cloud/images/favicons/onecloud/super_cloud.png" > <button> Send feedback </button> </devsite-feedback> <div class="devsite-floating-action-buttons"> </div> </article> <devsite-content-footer class="nocontent"> <p>Except as otherwise noted, the content of this page is licensed under the <a href="https://creativecommons.org/licenses/by/4.0/">Creative Commons Attribution 4.0 License</a>, and code samples are licensed under the <a href="https://www.apache.org/licenses/LICENSE-2.0">Apache 2.0 License</a>. For details, see the <a href="https://developers.google.com/site-policies">Google Developers Site Policies</a>. Java is a registered trademark of Oracle and/or its affiliates.</p> <p>Last updated 2024-11-21 UTC.</p> </devsite-content-footer> <devsite-notification > </devsite-notification> <div class="devsite-content-data"> <template class="devsite-thumb-rating-feedback"> <devsite-feedback position="thumb-rating" project-name="Cloud Logging" product-id="714033" bucket="Documentation" context="Logging docs feedback link" version="t-devsite-webserver-20241114-r00-rc02.464922260396498922" data-label="Send Feedback Button" track-type="feedback" track-name="sendFeedbackLink" track-metadata-position="thumb-rating" class="nocontent" project-icon="https://www.gstatic.com/devrel-devsite/prod/v870e399c64f7c43c99a3043db4b3a74327bb93d0914e84a0c3dba90bbfd67625/cloud/images/favicons/onecloud/super_cloud.png" > <button> Need to tell us more? </button> </devsite-feedback> </template> <template class="devsite-content-data-template"> [[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Hard to understand","hardToUnderstand","thumb-down"],["Incorrect information or sample code","incorrectInformationOrSampleCode","thumb-down"],["Missing the information/samples I need","missingTheInformationSamplesINeed","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2024-11-21 UTC."],[],[]] </template> </div> </devsite-content> </main> <devsite-footer-promos class="devsite-footer"> </devsite-footer-promos> <devsite-footer-linkboxes class="devsite-footer"> <nav class="devsite-footer-linkboxes nocontent" aria-label="Footer links"> <ul class="devsite-footer-linkboxes-list"> <li class="devsite-footer-linkbox "> <h3 class="devsite-footer-linkbox-heading no-link">Why Google</h3> <ul class="devsite-footer-linkbox-list"> <li class="devsite-footer-linkbox-item"> <a href="/why-google-cloud/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 1)" track-metadata-module="footer"track-name="choosing google cloud"track-type="footer link"track-metadata-eventDetail="cloud.google.com/why-google-cloud/"track-metadata-position="footer"track-metadata-child_headline="why google"> Choosing Google Cloud </a> </li> <li class="devsite-footer-linkbox-item"> <a href="/trust-center/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 2)" track-name="trust and security"track-metadata-child_headline="why google"track-type="footer link"track-metadata-module="footer"track-metadata-position="footer"track-metadata-eventDetail="cloud.google.com/security/"> Trust and security </a> </li> <li class="devsite-footer-linkbox-item"> <a href="/solutions/modern-infrastructure/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 3)" track-type="footer link"track-name="modern infrastructure cloud"track-metadata-eventDetail="cloud.google.com/solutions/modern-infrastructure/"track-metadata-position="footer"track-metadata-module="footer"track-metadata-child_headline="why google"> Modern Infrastructure Cloud </a> </li> <li class="devsite-footer-linkbox-item"> <a href="/multicloud/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 4)" track-metadata-position="footer"track-metadata-child_headline="why google"track-metadata-eventDetail="cloud.google.com/multicloud/"track-metadata-module="footer"track-type="footer link"track-name="multicloud"> Multicloud </a> </li> <li class="devsite-footer-linkbox-item"> <a href="/infrastructure/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 5)" track-metadata-eventDetail="cloud.google.com/infrastructure/"track-metadata-position="footer"track-metadata-child_headline="why google"track-metadata-module="footer"track-type="footer link"track-name="global infrastructure"> Global infrastructure </a> </li> <li class="devsite-footer-linkbox-item"> <a href="/customers/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 6)" track-metadata-position="footer"track-metadata-child_headline="why google"track-type="footer link"track-name="customers and case studies"track-metadata-module="footer"track-metadata-eventDetail="cloud.google.com/customers/"> Customers and case studies </a> </li> <li class="devsite-footer-linkbox-item"> <a href="/analyst-reports/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 7)" track-metadata-module="footer"track-metadata-child_headline="why google"track-metadata-eventDetail="cloud.google.com/analyst-reports/"track-metadata-position="footer"track-type="footer link"track-name="analyst reports"> Analyst reports </a> </li> <li class="devsite-footer-linkbox-item"> <a href="/whitepapers/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 8)" track-type="footer link"track-name="whitepapers"track-metadata-position="footer"track-metadata-eventDetail="cloud.google.com/whitepapers/"track-metadata-module="footer"track-metadata-child_headline="why google"> Whitepapers </a> </li> <li class="devsite-footer-linkbox-item"> <a href="//cloud.google.com/blog/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 9)" track-metadata-child_headline="engage"track-name="blog"track-metadata-eventDetail="cloud.google.com/blog/"track-metadata-module="footer"track-metadata-position="footer"track-type="footer link"> Blog </a> </li> </ul> </li> <li class="devsite-footer-linkbox "> <h3 class="devsite-footer-linkbox-heading no-link">Products and pricing</h3> <ul class="devsite-footer-linkbox-list"> <li class="devsite-footer-linkbox-item"> <a href="/pricing/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 1)" track-type="footer link"track-metadata-module="footer"track-metadata-eventDetail="cloud.google.com/pricing/"track-metadata-position="footer"track-name="google cloud pricing"track-metadata-child_headline="products and pricing"> Google Cloud pricing </a> </li> <li class="devsite-footer-linkbox-item"> <a href="//workspace.google.com/pricing.html" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 2)" track-metadata-eventDetail="workspace.google.com/pricing.html"track-type="footer link"track-metadata-child_headline="products and pricing"track-metadata-module="footer"track-metadata-position="footer"track-name="google workspace pricing"target="_blank"> Google Workspace pricing </a> </li> <li class="devsite-footer-linkbox-item"> <a href="/products/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 3)" track-metadata-position="footer"track-metadata-child_headline="products and pricing"track-metadata-module="footer"track-metadata-eventDetail="cloud.google.com/products/"track-name="see all products"track-type="footer link"> See all products </a> </li> </ul> </li> <li class="devsite-footer-linkbox "> <h3 class="devsite-footer-linkbox-heading no-link">Solutions</h3> <ul class="devsite-footer-linkbox-list"> <li class="devsite-footer-linkbox-item"> <a href="/solutions/infrastructure-modernization/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 1)" track-name="infrastructure modernization"track-metadata-position="footer"track-type="footer link"track-metadata-module="footer"track-metadata-eventDetail="cloud.google.com/solutions/infrastructure-modernization/"track-metadata-child_headline="solutions"> Infrastructure modernization </a> </li> <li class="devsite-footer-linkbox-item"> <a href="/solutions/databases/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 2)" track-name="databases"track-metadata-eventDetail="cloud.google.com/solutions/databases"track-metadata-position="footer"track-metadata-module="footer"track-metadata-child_headline="solutions"track-type="footer link"> Databases </a> </li> <li class="devsite-footer-linkbox-item"> <a href="/solutions/application-modernization/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 3)" track-metadata-module="footer"track-metadata-child_headline="solutions"track-metadata-position="footer"track-name="application development"track-type="footer link"track-metadata-eventDetail="cloud.google.com/solutions/application-modernization/"> Application modernization </a> </li> <li class="devsite-footer-linkbox-item"> <a href="/solutions/smart-analytics/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 4)" track-type="footer link"track-metadata-eventDetail="cloud.google.com/solutions/smart-analytics/"track-metadata-position="footer"track-metadata-child_headline="solutions"track-name="smart analytics"track-metadata-module="footer"> Smart analytics </a> </li> <li class="devsite-footer-linkbox-item"> <a href="/solutions/ai/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 5)" track-type="footer link"track-metadata-child_headline="solutions"track-metadata-eventDetail="cloud.google.com/solutions/ai/"track-metadata-module="footer"track-metadata-position="footer"track-name="artificial intelligence"> Artificial Intelligence </a> </li> <li class="devsite-footer-linkbox-item"> <a href="/solutions/security/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 6)" track-type="footer link"track-name="security"track-metadata-child_headline="solutions"track-metadata-eventDetail="cloud.google.com/solutions/security/"track-metadata-module="footer"track-metadata-position="footer"> Security </a> </li> <li class="devsite-footer-linkbox-item"> <a href="https://workspace.google.com/enterprise/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 7)" track-metadata-eventDetail="workspace.google.com/enterprise/"track-metadata-position="footer"target="_blank"track-metadata-child_headline="solutions"track-name="productivity and work transformation"track-type="footer link"track-metadata-module="footer"> Productivity & work transformation </a> </li> <li class="devsite-footer-linkbox-item"> <a href="/solutions/#industry-solutions" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 8)" track-metadata-eventDetail="cloud.google.com/solutions/#industry-solutions"track-metadata-position="footer"track-metadata-child_headline="solutions"track-type="footer link"track-metadata-module="footer"track-name="industry solutions"> Industry solutions </a> </li> <li class="devsite-footer-linkbox-item"> <a href="/solutions/devops/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 9)" track-metadata-eventDetail="cloud.google.com/solutions/devops/"track-name="devops solutions"track-metadata-child_headline="solutions"track-metadata-module="footer"track-metadata-position="footer"track-type="footer link"> DevOps solutions </a> </li> <li class="devsite-footer-linkbox-item"> <a href="/solutions/#section-14" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 10)" track-metadata-child_headline="solutions"track-metadata-eventDetail="cloud.google.com/solutions/#section-14"track-metadata-position="footer"track-metadata-module="footer"track-name="small business solutions"track-type="footer link"> Small business solutions </a> </li> <li class="devsite-footer-linkbox-item"> <a href="/solutions/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 11)" track-metadata-child_headline="solutions"track-metadata-eventDetail="cloud.google.com/solutions/"track-metadata-position="footer"track-metadata-module="footer"track-name="see all solutions"track-type="footer link"> See all solutions </a> </li> </ul> </li> <li class="devsite-footer-linkbox "> <h3 class="devsite-footer-linkbox-heading no-link">Resources</h3> <ul class="devsite-footer-linkbox-list"> <li class="devsite-footer-linkbox-item"> <a href="/affiliate-program/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 1)" track-metadata-eventDetail="cloud.google.com/affiliate-program/"track-metadata-child_headline="resources"track-metadata-module="footer"track-metadata-position="footer"track-type="footer link"track-name="google cloud affiliate program"> Google Cloud Affiliate Program </a> </li> <li class="devsite-footer-linkbox-item"> <a href="/docs/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 2)" track-name="google cloud documentation"track-metadata-position="footer"track-type="footer link"track-metadata-module="footer"track-metadata-eventDetail="cloud.google.com/docs/"track-metadata-child_headline="resources"> Google Cloud documentation </a> </li> <li class="devsite-footer-linkbox-item"> <a href="/docs/get-started/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 3)" track-type="footer link"track-metadata-eventDetail="cloud.google.com/docs/get-started/"track-metadata-position="footer"track-metadata-module="footer"track-name="google cloud quickstarts"track-metadata-child_headline="resources"> Google Cloud quickstarts </a> </li> <li class="devsite-footer-linkbox-item"> <a href="/marketplace/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 4)" track-metadata-eventDetail="cloud.google.com/marketplace/"track-metadata-module="footer"track-metadata-position="footer"track-name="google cloud marketplace"track-type="footer link"track-metadata-child_headline="resources"> Google Cloud Marketplace </a> </li> <li class="devsite-footer-linkbox-item"> <a href="/discover/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 5)" track-name="learn about cloud computing"track-type="footer link"track-metadata-eventDetail="learn/"track-metadata-child_headline="resources"track-metadata-position="footer"track-metadata-module="footer"> Learn about cloud computing </a> </li> <li class="devsite-footer-linkbox-item"> <a href="/support-hub/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 6)" track-metadata-eventDetail="cloud.google.com/support-hub/"track-metadata-module="footer"track-type="footer link"track-name="support"track-metadata-child_headline="resources"track-metadata-position="footer"> Support </a> </li> <li class="devsite-footer-linkbox-item"> <a href="/docs/samples" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 7)" track-metadata-child_headline="resources"track-metadata-position="footer"track-metadata-module="footer"track-name="code samples"track-type="footer link"track-metadata-eventDetail="cloud.google.com/docs/samples"> Code samples </a> </li> <li class="devsite-footer-linkbox-item"> <a href="/architecture/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 8)" track-metadata-position="footer"track-type="footer link"track-metadata-eventDetail="cloud.google.com/architecture/"track-name="cloud architecture center"track-metadata-child_headline="resources"track-metadata-module="footer"> Cloud Architecture Center </a> </li> <li class="devsite-footer-linkbox-item"> <a href="/learn/training/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 9)" track-metadata-module="footer"track-metadata-child_headline="resources"track-metadata-position="footer"track-type="footer link"track-metadata-eventDetail="cloud.google.com/training/"track-name="training"> Training </a> </li> <li class="devsite-footer-linkbox-item"> <a href="/learn/certification/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 10)" track-type="footer link"track-metadata-child_headline="resources"track-metadata-module="footer"track-metadata-eventDetail="cloud.google.com/certification"track-metadata-position="footer"track-name="certifications"> Certifications </a> </li> <li class="devsite-footer-linkbox-item"> <a href="//developers.google.com" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 11)" track-metadata-child_headline="resources"track-type="footer link"target="_blank"track-name="google developers"track-metadata-position="footer"track-metadata-eventDetail="developers.google.com"track-metadata-module="footer"> Google for Developers </a> </li> <li class="devsite-footer-linkbox-item"> <a href="/startup/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 12)" track-type="footer link"track-metadata-eventDetail="cloud.google.com/startup/"track-metadata-child_headline="resources"track-name="google cloud for startups"track-metadata-module="footer"track-metadata-position="footer"> Google Cloud for Startups </a> </li> <li class="devsite-footer-linkbox-item"> <a href="//status.cloud.google.com" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 13)" target="_blank"track-name="system status"track-metadata-position="footer"track-type="footer link"track-metadata-child_headline="resources"track-metadata-eventDetail="status.cloud.google.com"track-metadata-module="footer"> System status </a> </li> <li class="devsite-footer-linkbox-item"> <a href="/release-notes" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 14)" track-name="release notes"track-metadata-position="footer"track-type="footer link"track-metadata-module="footer"track-metadata-eventDetail="cloud.google.com/release-notes/"track-metadata-child_headline="resources"> Release Notes </a> </li> </ul> </li> <li class="devsite-footer-linkbox "> <h3 class="devsite-footer-linkbox-heading no-link">Engage</h3> <ul class="devsite-footer-linkbox-list"> <li class="devsite-footer-linkbox-item"> <a href="/contact/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 1)" track-metadata-child_headline="engage"track-metadata-position="footer"track-name="contact sales"track-metadata-eventDetail="cloud.google.com/contact/"track-type="footer link"track-metadata-module="footer"> Contact sales </a> </li> <li class="devsite-footer-linkbox-item"> <a href="//cloud.google.com/find-a-partner" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 2)" track-type="footer link"track-metadata-child_headline="engage"target="_blank"track-metadata-eventDetail="cloud.google.com/find-a-partner"track-name="find a partner"track-metadata-module="footer"track-metadata-position="footer"> Find a Partner </a> </li> <li class="devsite-footer-linkbox-item"> <a href="/partners/become-a-partner/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 3)" track-metadata-child_headline="engage"track-name="become a partner"track-type="footer link"track-metadata-module="footer"track-metadata-eventDetail="cloud.google.com/partners/become-a-partner/"track-metadata-position="footer"> Become a Partner </a> </li> <li class="devsite-footer-linkbox-item"> <a href="/events/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 4)" track-metadata-module="footer"track-metadata-position="footer"track-name="events"track-metadata-eventDetail="cloud.withgoogle.com/events"track-metadata-child_headline="engage"track-type="footer link"> Events </a> </li> <li class="devsite-footer-linkbox-item"> <a href="/podcasts/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 5)" track-metadata-child_headline="engage"track-metadata-module="footer"track-type="footer link"rel="noopener"track-metadata-position="footer"track-name="podcasts"track-metadata-eventDetail="cloud.google.com/podcasts/"target="_blank"> Podcasts </a> </li> <li class="devsite-footer-linkbox-item"> <a href="/developers/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 6)" track-metadata-module="footer"track-name="developer center"track-metadata-child_headline="engage"track-metadata-eventDetail="cloud.google.com/developers/"track-metadata-position="footer"track-type="footer link"> Developer Center </a> </li> <li class="devsite-footer-linkbox-item"> <a href="https://www.googlecloudpresscorner.com/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 7)" track-metadata-position="footer"target="_blank"track-metadata-child_headline="engage"track-metadata-eventDetail="www.googlecloudpresscorner.com"rel="noopener"track-name="press corner"track-metadata-module="footer"track-type="footer link"> Press Corner </a> </li> <li class="devsite-footer-linkbox-item"> <a href="//www.youtube.com/googlecloud" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 8)" rel="noopener"track-name="google cloud on youtube"target="_blank"track-metadata-module="footer"track-metadata-eventDetail="www.youtube.com/googlecloud"track-metadata-position="footer"track-type="footer link"track-metadata-child_headline="engage"> Google Cloud on YouTube </a> </li> <li class="devsite-footer-linkbox-item"> <a href="//www.youtube.com/googlecloudplatform" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 9)" target="_blank"track-type="footer link"track-metadata-eventDetail="www.youtube.com/googlecloudplatform"track-name="google cloud tech on youtube"track-metadata-position="footer"track-metadata-module="footer"track-metadata-child_headline="engage"rel="noopener"> Google Cloud Tech on YouTube </a> </li> <li class="devsite-footer-linkbox-item"> <a href="//x.com/googlecloud" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 10)" track-metadata-child_headline="engage"track-name="follow on x"target="_blank"track-metadata-position="footer"track-type="footer link"track-metadata-module="footer"rel="noopener"track-metadata-eventDetail="x.com/googlecloud"> Follow on X </a> </li> <li class="devsite-footer-linkbox-item"> <a href="//userresearch.google.com/?reserved=1&utm_source=website&Q_Language=en&utm_medium=own_srch&utm_campaign=CloudWebFooter&utm_term=0&utm_content=0&productTag=clou&campaignDate=jul19&pType=devel&referral_code=jk212693" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 11)" track-metadata-eventDetail="userresearch.google.com/?reserved=1&utm_source=website&Q_Language=en&utm_medium=own_srch&utm_campaign=CloudWebFooter&utm_term=0&utm_content=0&productTag=clou&campaignDate=jul19&pType=devel&referral_code=jk212693"track-metadata-module="footer"track-metadata-position="footer"track-name="join user research"target="_blank"track-type="footer link"track-metadata-child_headline="engage"> Join User Research </a> </li> <li class="devsite-footer-linkbox-item"> <a href="//careers.google.com/cloud" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 12)" track-metadata-eventDetail="careers.google.com/cloud"track-metadata-child_headline="engage"track-metadata-position="footer"track-metadata-module="footer"track-name="we are hiring join google cloud"target="_blank"track-type="footer link"> We're hiring. Join Google Cloud! </a> </li> <li class="devsite-footer-linkbox-item"> <a href="https://www.googlecloudcommunity.com/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 13)" track-name="google cloud community"track-metadata-child_headline="engage"target="_blank"rel="noopener"track-type="footer link"track-metadata-position="footer"track-metadata-module="footer"track-metadata-eventDetail="www.googlecloudcommunity.com"> Google Cloud Community </a> </li> </ul> </li> </ul> </nav> </devsite-footer-linkboxes> <devsite-footer-utility class="devsite-footer"> <div class="devsite-footer-utility nocontent"> <nav class="devsite-footer-utility-links" aria-label="Utility links"> <ul class="devsite-footer-utility-list"> <li class="devsite-footer-utility-item "> <a class="devsite-footer-utility-link gc-analytics-event" href="//about.google/" data-category="Site-Wide Custom Events" data-label="Footer About Google link" track-name="about google" track-type="footer link" track-metadata-position="footer" track-metadata-module="utility footer" track-metadata-eventDetail="//about.google/" target="_blank" > About Google </a> </li> <li class="devsite-footer-utility-item devsite-footer-privacy-link"> <a class="devsite-footer-utility-link gc-analytics-event" href="//policies.google.com/privacy" data-category="Site-Wide Custom Events" data-label="Footer Privacy link" track-name="privacy" track-metadata-position="footer" target="_blank" track-type="footer link" track-metadata-eventDetail="//policies.google.com/privacy" track-metadata-module="utility footer" > Privacy </a> </li> <li class="devsite-footer-utility-item "> <a class="devsite-footer-utility-link gc-analytics-event" href="//www.google.com/intl/en/policies/terms/regional.html" data-category="Site-Wide Custom Events" data-label="Footer Site terms link" track-name="site terms" track-metadata-position="footer" track-type="footer link" track-metadata-module="utility footer" target="_blank" track-metadata-eventDetail="//www.google.com/intl/en/policies/terms/regional.html" > Site terms </a> </li> <li class="devsite-footer-utility-item "> <a class="devsite-footer-utility-link gc-analytics-event" href="/product-terms/" data-category="Site-Wide Custom Events" data-label="Footer Google Cloud terms link" track-metadata-module="utility footer" track-name="google cloud terms" track-type="footer link" track-metadata-position="footer" track-metadata-eventDetail="/product-terms/" > Google Cloud terms </a> </li> <li class="devsite-footer-utility-item glue-cookie-notification-bar-control"> <a class="devsite-footer-utility-link gc-analytics-event" href="#" data-category="Site-Wide Custom Events" data-label="Footer Manage cookies link" track-metadata-module="utility footer" track-name="Manage cookies" track-metadata-eventDetail="#" track-type="footer link" track-metadata-position="footer" aria-hidden="true" > Manage cookies </a> </li> <li class="devsite-footer-utility-item devsite-footer-carbon-button"> <a class="devsite-footer-utility-link gc-analytics-event" href="/sustainability" data-category="Site-Wide Custom Events" data-label="Footer Our third decade of climate action: join us link" track-metadata-eventDetail="/sustainability/" track-metadata-module="utility footer" track-type="footer link" track-name="Our third decade of climate action: join us" track-metadata-position="footer" > Our third decade of climate action: join us </a> </li> <li class="devsite-footer-utility-item devsite-footer-utility-button"> <span class="devsite-footer-utility-description">Sign up for the Google Cloud newsletter</span> <a class="devsite-footer-utility-link gc-analytics-event" href="/newsletter/" data-category="Site-Wide Custom Events" data-label="Footer Subscribe link" track-metadata-eventDetail="/newsletter/" track-metadata-module="utility footer" track-metadata-position="footer" track-type="footer link" track-name="subscribe" > Subscribe </a> </li> </ul> <devsite-language-selector> <ul role="presentation"> <li role="presentation"> <a role="menuitem" lang="en" >English</a> </li> <li role="presentation"> <a role="menuitem" lang="de" >Deutsch</a> </li> <li role="presentation"> <a role="menuitem" lang="es_419" >Español – América Latina</a> </li> <li role="presentation"> <a role="menuitem" lang="fr" >Français</a> </li> <li role="presentation"> <a role="menuitem" lang="id" >Indonesia</a> </li> <li role="presentation"> <a role="menuitem" lang="it" >Italiano</a> </li> <li role="presentation"> <a role="menuitem" lang="pt_br" >Português – Brasil</a> </li> <li role="presentation"> <a role="menuitem" lang="zh_cn" >中文 – 简体</a> </li> <li role="presentation"> <a role="menuitem" lang="ja" >日本語</a> </li> <li role="presentation"> <a role="menuitem" lang="ko" >한국어</a> </li> </ul> </devsite-language-selector> </nav> </div> </devsite-footer-utility> <devsite-panel></devsite-panel> </section></section> <devsite-sitemask></devsite-sitemask> <devsite-snackbar></devsite-snackbar> <devsite-tooltip ></devsite-tooltip> <devsite-heading-link></devsite-heading-link> <devsite-analytics> <script type="application/json" analytics>[]</script> <script type="application/json" tag-management>{"at": "True", "ga4": [], "ga4p": [], "gtm": [{"id": "GTM-5CVQBG", "purpose": 1}], "parameters": {"internalUser": "False", "language": {"machineTranslated": "False", "requested": "en", "served": "en"}, "pageType": "article", "projectName": "Cloud Logging", "signedIn": "False", "tenant": "cloud", "recommendations": {"sourcePage": "", "sourceType": 0, "sourceRank": 0, "sourceIdenticalDescriptions": 0, "sourceTitleWords": 0, "sourceDescriptionWords": 0, "experiment": ""}, "experiment": {"ids": ""}}}</script> </devsite-analytics> <devsite-badger></devsite-badger> <cloudx-user></cloudx-user> <cloudx-free-trial-eligible-store freeTrialEligible='true'></cloudx-free-trial-eligible-store> <cloudx-pricing-socket></cloudx-pricing-socket> <cloudx-experiments type="TestAACodivertedExperiment" path="/virtual/TestAACodivertedExperiment/configureExperiment" location="SG" variant="variant2" ></cloudx-experiments> <cloudx-experiment-ids userCountry="SG" devsiteExperimentIdList="[39300013, 39300021, 39300118, 39300195, 39300251, 39300319, 39300322, 39300326, 39300346, 39300354, 39300364, 39300374, 39300412, 39300421, 39300436, 39300472, 39300488, 39300496, 39300498]"> </cloudx-experiment-ids> <script nonce="BF7X/oxJ9a/apD1yBp5b0a4EcDAHRH"> (function(d,e,v,s,i,t,E){d['GoogleDevelopersObject']=i; t=e.createElement(v);t.async=1;t.src=s;E=e.getElementsByTagName(v)[0]; E.parentNode.insertBefore(t,E);})(window, document, 'script', 'https://www.gstatic.com/devrel-devsite/prod/v870e399c64f7c43c99a3043db4b3a74327bb93d0914e84a0c3dba90bbfd67625/cloud/js/app_loader.js', '[2,"en",null,"/js/devsite_app_module.js","https://www.gstatic.com/devrel-devsite/prod/v870e399c64f7c43c99a3043db4b3a74327bb93d0914e84a0c3dba90bbfd67625","https://www.gstatic.com/devrel-devsite/prod/v870e399c64f7c43c99a3043db4b3a74327bb93d0914e84a0c3dba90bbfd67625/cloud","https://cloud-dot-devsite-v2-prod.appspot.com",null,null,["/_pwa/cloud/manifest.json","https://www.gstatic.com/devrel-devsite/prod/v870e399c64f7c43c99a3043db4b3a74327bb93d0914e84a0c3dba90bbfd67625/images/video-placeholder.svg","https://www.gstatic.com/devrel-devsite/prod/v870e399c64f7c43c99a3043db4b3a74327bb93d0914e84a0c3dba90bbfd67625/cloud/images/favicons/onecloud/favicon.ico","https://www.gstatic.com/devrel-devsite/prod/v870e399c64f7c43c99a3043db4b3a74327bb93d0914e84a0c3dba90bbfd67625/cloud/images/cloud-logo.svg","https://fonts.googleapis.com/css?family=Google+Sans:400,500,700|Google+Sans+Text:400,400italic,500,500italic,700,700italic|Roboto:400,400italic,500,500italic,700,700italic|Roboto+Mono:400,500,700&display=swap"],1,null,[1,6,8,12,14,17,21,25,50,52,63,70,75,76,80,87,91,92,93,97,98,100,101,102,103,104,105,107,108,109,110,112,113,116,117,118,120,122,124,125,126,127,129,130,131,132,133,134,135,136,138,140,141,147,148,149,151,152,156,157,158,159,161,163,164,168,169,170,179,180,182,183,186,191,193,196],"AIzaSyAP-jjEJBzmIyKR4F-3XITp8yM9T1gEEI8","AIzaSyB6xiKGDR5O3Ak2okS4rLkauxGUG7XP0hg","cloud.google.com","AIzaSyAQk0fBONSGUqCNznf6Krs82Ap1-NV6J4o","AIzaSyCCxcqdrZ_7QMeLCRY20bh_SXdAYqy70KY",null,null,null,["MiscFeatureFlags__emergency_css","Search__enable_suggestions_from_borg","Cloud__enable_legacy_calculator_redirect","CloudShell__cloud_code_overflow_menu","Profiles__enable_recognition_badges","Cloud__enable_free_trial_server_call","Cloud__enable_cloud_shell_fte_user_flow","Concierge__enable_pushui","Profiles__enable_page_saving","Analytics__enable_clearcut_logging","MiscFeatureFlags__enable_variable_operator","Cloud__enable_cloud_facet_chat","MiscFeatureFlags__enable_firebase_utm","MiscFeatureFlags__developers_footer_image","Search__scope_to_project_tenant","Cloud__enable_cloudx_experiment_ids","CloudShell__cloud_shell_button","Cloud__enable_cloud_dlp_service","DevPro__enable_developer_subscriptions","MiscFeatureFlags__enable_view_transitions","Search__enable_dynamic_content_confidential_banner","MiscFeatureFlags__enable_explain_this_code","Profiles__enable_release_notes_notifications","Cloud__enable_cloudx_ping","TpcFeatures__enable_required_headers","Experiments__reqs_query_experiments","Profiles__enable_awarding_url","DevPro__enable_cloud_innovators_plus","MiscFeatureFlags__developers_footer_dark_image","Search__enable_ai_eligibility_checks","Concierge__enable_concierge_restricted","MiscFeatureFlags__enable_project_variables","Profiles__enable_developer_profiles_callout","Profiles__enable_dashboard_curated_recommendations","Profiles__enable_complete_playlist_endpoint","Profiles__enable_completecodelab_endpoint","Cloud__enable_cloud_shell","Search__enable_ai_search_summaries_restricted","Profiles__enable_profile_collections","Search__enable_ai_search_summaries","EngEduTelemetry__enable_engedu_telemetry","Profiles__require_profile_eligibility_for_signin","Search__enable_page_map","Profiles__enable_public_developer_profiles","BookNav__enable_tenant_cache_key","TpcFeatures__enable_mirror_tenant_redirects","Cloud__enable_llm_concierge_chat"],null,null,"AIzaSyBLEMok-5suZ67qRPzx0qUtbnLmyT_kCVE","https://developerscontentserving-pa.clients6.google.com","AIzaSyCM4QpTRSqP5qI4Dvjt4OAScIN8sOUlO-k","https://developerscontentsearch-pa.clients6.google.com",1,4,1,"https://developerprofiles-pa.clients6.google.com",[2,"cloud","Google Cloud","cloud.google.com",null,"cloud-dot-devsite-v2-prod.appspot.com",null,null,[1,1,null,null,null,null,null,null,null,null,null,[1],null,null,null,null,null,1,[1],[null,null,null,[1,20],"/terms/recommendations"],[1],null,[1],[1,null,1],[1,1,null,null,1,null,["/vertex-ai/"]]],null,[22,null,null,null,null,null,"/images/cloud-logo.svg","/images/favicons/onecloud/apple-icon.png",null,null,null,null,1,1,1,[6,5],[],null,null,[[],[],[],[],[],[],[],[]],null,1,null,null,null,null,[]],[],null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,[6,1,14,15,22,23,29,37],null,[[null,null,null,null,null,null,[1,[["docType","Choose a content type",[["ApiReference",null,null,null,null,null,null,null,null,"API reference"],["Sample",null,null,null,null,null,null,null,null,"Code sample"],["ReferenceArchitecture",null,null,null,null,null,null,null,null,"Reference architecture"],["Tutorial",null,null,null,null,null,null,null,null,"Tutorial"]]],["category","Choose a topic",[["AiAndMachineLearning",null,null,null,null,null,null,null,null,"Artificial intelligence and machine learning (AI/ML)"],["ApplicationDevelopment",null,null,null,null,null,null,null,null,"Application development"],["BigDataAndAnalytics",null,null,null,null,null,null,null,null,"Big data and analytics"],["Compute",null,null,null,null,null,null,null,null,"Compute"],["Containers",null,null,null,null,null,null,null,null,"Containers"],["Databases",null,null,null,null,null,null,null,null,"Databases"],["HybridCloud",null,null,null,null,null,null,null,null,"Hybrid and multicloud"],["LoggingAndMonitoring",null,null,null,null,null,null,null,null,"Logging and monitoring"],["Migrations",null,null,null,null,null,null,null,null,"Migrations"],["Networking",null,null,null,null,null,null,null,null,"Networking"],["SecurityAndCompliance",null,null,null,null,null,null,null,null,"Security and compliance"],["Serverless",null,null,null,null,null,null,null,null,"Serverless"],["Storage",null,null,null,null,null,null,null,null,"Storage"]]]]]],[1],null,1],[[null,null,null,null,null,["GTM-5CVQBG"],null,null,null,null,null,[["GTM-5CVQBG",2]],1],null,null,null,null,null,1],"mwETRvWii0eU5NUYprb0Y9z5GVbc",4,null,null,null,null,null,null,null,null,null,null,null,null,null,"cloud.devsite.google"],null,"pk_live_5170syrHvgGVmSx9sBrnWtA5luvk9BwnVcvIi7HizpwauFG96WedXsuXh790rtij9AmGllqPtMLfhe2RSwD6Pn38V00uBCydV4m"]') </script> <devsite-a11y-announce></devsite-a11y-announce> </body> </html>

CINXE.COM

Audit logs for Google Workspace | Cloud Logging | Google Cloud