Gain visibility over user activity in the cloud
Real-time delivery of audit event
Receive near-real-time delivery of the audit events in Cloud Audit Logs within seconds of the occurrence. With this tool, you can quickly assess and act on any identified behavior in the most appropriate ways for your organization.
Immutable audit trail
Cloud Audit Logs reside in highly protected storage, resulting in a secure, immutable, and highly durable audit trail.
End-to-end transparency in a single pane of glass
Cloud Audit Logs features Admin Activity logs documenting administrative events, and Data Access logs record accesses to your cloud data by your users. The service is also coupled with Google Cloud’s Access Transparency service, which surfaces near real-time logs of GCP administrator access to your systems and data.
Integrated with many Google Cloud security products, Cloud Audit Logs provides your security operations team with information on which user or account issued which Google Cloud API call from which IP address.
Cloud Audit Logs gives you powerful incident management tools to monitor, alert, and act on potential incidents.
Compliance by default
Cloud Audit Logs provides you with always-on Admin Activity audit logs to simplify your compliance processes by automatically recording administrative events.
Integration with partners
This service provides easy-to-use integration guides with popular SIEM partners via flexible Pub/Sub integration and managed integration modules.
|Feature||Default retention period||Pricing|
|Admin Activity audit logs||400 days||No additional charge|
|Data Access audit logs||30 days||$ 0.50 / GiB (Standard price)|
|System event audit logs||400 days||No additional charge|