JSON representation
{
  "auditID": string,
  "action": string,
  "time": string,
  "user":{
    object
  },
  "resource": string,
  "description": string,
  "sourceIPs": [
    string array
  ],
  "userAgent": string,
  "numBytesSent": integer,
  "numBytesReceived": integer,
  "orgAdminClusterName": string,
  "serviceName": string,
  "_gdch_service_name": string,
  "_gdch_namespace": string,
  "_gdch_service_tenant": string,
  "_gdch_cluster": string,
  "_gdch_fluentbit_pod": string
}
| Fields | |
|---|---|
| auditID | 
 The unique audit identification value generated for each request. For example,  | 
| action | 
 The action performed on the resource for the event. For example,  | 
| time | 
 The time of the action up to milliseconds. For example,  | 
| user | 
 Information about the identity and issuer of the authenticated user who performed the action. For example, { "identity":"s:gpc-system:artifact-registry-services-registry-exporter", "issuer":"artifact.private.gdc.goog/hra" } | 
| resource | 
 The identification value of the resource. For example,  | 
| description | 
 A longer description of the nature of the access. The value might be the complete request object. | 
| sourceIPs | 
 The IPs from where the request originated and the intermediate proxies. | 
| userAgent | 
 The user agent string reported by the client. | 
| numBytesSent | 
 The number of bytes sent in response for this request. | 
| numBytesReceived | 
 The number of bytes received from this request. | 
| orgAdminClusterName | 
 The name of the org infrastructure cluster that generated the audit log. | 
| serviceName | 
 A short name of the component or service that generated the audit log. | 
| _gdch_service_name | 
 The short name of the service collecting audit logs. | 
| _gdch_namespace | 
 The short name of the service namespace. | 
| _gdch_service_tenant | 
 The name of the service tenant. Possible values: 
 
 | 
| _gdch_cluster | 
 The name of the Kubernetes cluster producing the successful event. For example,  | 
| _gdch_fluentbit_pod | 
 The name of the pod collecting audit logs. For example,  |