[[["容易理解","easyToUnderstand","thumb-up"],["確實解決了我的問題","solvedMyProblem","thumb-up"],["其他","otherUp","thumb-up"]],[["難以理解","hardToUnderstand","thumb-down"],["資訊或程式碼範例有誤","incorrectInformationOrSampleCode","thumb-down"],["缺少我需要的資訊/範例","missingTheInformationSamplesINeed","thumb-down"],["翻譯問題","translationIssue","thumb-down"],["其他","otherDown","thumb-down"]],["上次更新時間：2025-09-05 (世界標準時間)。"],[],[],null,["# Troubleshoot secure gateway issues\n\nThis document provides information about how to use Google Cloud access logs\nto resolve common issues with secure gateways.\n\nGoogle Cloud access logs are a valuable tool for diagnosing problems.\nYou can view the access logs in the\n[Logs Explorer](https://console.cloud.google.com/logs/query). To view logs for\ntroubleshooting secure gateway problems,\n[configure Data Access audit logs for the `BeyondCorp Enterprise API`](/logging/docs/audit/configure-data-access#config-console).\n\nEnd user access\n---------------\n\nGoogle Cloud access logs provide valuable insights into user access patterns\nand can help you troubleshoot access denial errors. These logs record both\nsuccessful and denied access attempts, offering a comprehensive view of user\ninteractions with your applications. In cases of denied access, the logs include\ndetailed information about the reasons for denial, such as the specific access\nlevels that were not met.\n\nThe logs also contain metadata, such as timestamps, user identities, and\nresource details, providing further context for analysis and troubleshooting.\nTo filter the logs relevant to secure gateway access, use the following\nfilter: \n\n resource.type=\"audited_resource\"\n resource.labels.method=\"AuthorizeUser\"\n resource.labels.service=\"beyondcorp.googleapis.com\"\n\nSecurity gateway resource issues\n--------------------------------\n\nIf you encounter issues while managing secure gateway resources, such as\nduring creation, updating, or deletion, you can view the logs relevant to\nsecure gateway resource management by using the following filter: \n\n resource.type=\"audited_resource\"\n resource.labels.service=\"beyondcorp.googleapis.com\""]]
