Audit log example

This page shows an example of a Data Access audit log entry that is generated when you send a write request to Bigtable. For more details about audit log entries, see Understanding audit logs. For a list of Bigtable fields that are logged, see Audit log fields.

For brevity, some parts of the log entry are omitted, and some fields are highlighted for emphasis.

    {
      protoPayload: {
        @type: "type.googleapis.com/google.cloud.audit.AuditLog",
        status: {},
        authenticationInfo: {
          principalEmail: "user@example.com",
          serviceAccountDelegationInfo: [
            {
              firstPartyPrincipal: {
                principalEmail: "service-123@compute-system.iam.gserviceaccount.com"
              }
            }
          ],
          principalSubject": "serviceAccount:123-compute@developer.gserviceaccount.com"
        },
        requestMetadata: {
          callerIp: "12.586.9.1",
          callerSuppliedUserAgent: "bigtable-1.4.0,jdk-1.8,hbase-1.4.7 grpc-java-netty/1.10.1,gzip(gfe)",
          requestAttributes: {
            time: "2020-12-10T03:22:59.373508362Z",
            auth: {}
          },
          destinationAttributes: {}
        },
        serviceName: "bigtable.googleapis.com",
        methodName: "google.bigtable.v2.Bigtable.MutateRow",
        authorizationInfo: [
          {
            resource: "projects/test-project/instances/test-instance/tables/test-table",
            permission: "bigtable.tables.mutateRows",
            granted: true,
            resourceAttributes: {}
          }
        ],
        resourceName: "projects/test-project/instances/test-instance/tables/test-table",
        request: {
          mutations: [
            {
              setCell: {
                familyName: "cf1",
              }
            }
          ],
          tableName: "projects/test-project/instances/test-instance/tables/test-table",
          @type: "type.googleapis.com/google.bigtable.v2.MutateRowRequest",
          rowKey: "cm93LWtleQ=="
        },
      },
      insertId: "1wt6rdna0",
      resource: {
        type: "audited_resource",
        labels: {
          service: "bigtable.googleapis.com",
          project_id: "test-project",
          method: "google.bigtable.v2.Bigtable.MutateRow"
        }
      },
      timestamp: "2019-05-27T16:24:56.135Z",
      severity: "NOTICE",
      logName: "projects/test-project/logs/cloudaudit.googleapis.com%2Fdata_access",
      receiveTimestamp: "2020-05-27T04:56:47.427539594Z"
    }