Google Cloud platform logs

This document provides basic information about the Google Cloud platform logs that are available in Cloud Logging, as well as next steps for viewing and managing platform logs.

Overview

Logging receives, indexes, and stores log entries from Google Cloud services. Google Cloud platform logs are service-specific logs that can help you debug and troubleshoot issues, as well as better understand the Google Cloud services you're using.

The Google Cloud platform logs visible to you in Cloud Logging vary, depending on which Google Cloud resources you're using in your Google Cloud project or organization.

When using this document, note the following:

  • Not all Google Cloud services implement platform logs. For an expanding (non-exhaustive) list of the services that implement platform logs, see the following Index of Google Cloud platform logs.
  • Each Google Cloud service that implements platform logs manages its own configuration. Refer to service-specific documentation to determine whether the service enables platform logs by default and how to enable or disable platform logs.

Index of Google Cloud platform logs

Following are tables of some of the Google Cloud platform logs supported by Cloud Logging. To understand the data contained in the tables, see Log entry structure on this page.

AlloyDB

Logging API service name: alloydb.googleapis.com

Log ID Monitored resource Payload Labels Severities
alloydb.googleapis.com%2Fpostgres.log alloydb.googleapis.com/Instance The PostgreSQL database logs. CONSUMER_PROJECT
NODE_ID
SOURCE
DATABASE_VERSION		 INFO
WARNING
ERROR
ALERT
alloydb.googleapis.com%2Fjournald alloydb.googleapis.com/Instance Container logs for dataplane agents. CONSUMER_PROJECT
CONTAINER_ID
CONTAINER_ID_FULL
CONTAINER_NAME
CONTAINER_TAG
IMAGE_NAME
NODE_ID
DATABASE_VERSION
SYSLOG_FACILITY
SYSLOG_IDENTIFIER
_BOOT_ID
_CAP_EFFECTIVE
_CMDLINE
_COMM
_EXE
_GID
_HOSTNAME
_MACHINE_ID
_PID
_SOURCE_REALTIME_TIMESTAMP
_STREAM_ID
_SYSTEMD_CGROUP
_SYSTEMD_INVOCATION_ID
_SYSTEMD_SLICE
_SYSTEMD_UNIT
_TRANSPORT
UID
_MONOTONICTIMESTAMP
_REALTIME_TIMESTAMP		 ERROR
INFO
WARNING
alloydb.googleapis.com%2Fpostgresinternal alloydb.googleapis.com/Instance The internal dogfish logs. CONSUMER_PROJECT
LOG_TYPE
NODE_ID
DATABASE_VERSION		 DEFAULT
INFO
WARNING
alloydb.googleapis.com%2Finstance_agent saas_instance Logs for instance agent running on AlloyDB VM. N/A ERROR
INFO

Application Integration

Logging API service name: integrations.googleapis.com

Log ID Monitored resource Payload Labels Severities
integrations.googleapis.com%2Fexecution_info integrations.googleapis.com/IntegrationVersion type.googleapis.com/google.cloud.integrations.v1alpha.ExecutionInfo N/A INFO

Assured Workloads

Logging API service name: assuredworkloads.googleapis.com

Log ID Monitored resource Payload Labels Severities
assuredworkloads.googleapis.com%2Fregulatory_intercept_ack folder type.googleapis.com/google.cloud.assuredworkloads.regulatoryintercept.logging.v1.RegulatoryInterceptAckLogEntry N/A INFO
assuredworkloads.googleapis.com%2Fregulatory_intercept_ack project type.googleapis.com/google.cloud.assuredworkloads.regulatoryintercept.logging.v1.RegulatoryInterceptAckLogEntry N/A INFO

Backup for GKE

Logging API service name: gkebackup.googleapis.com

Log ID Monitored resource Payload Labels Severities
gkebackup.googleapis.com%2Fbackup_change gkebackup.googleapis.com/BackupPlan type.googleapis.com/google.cloud.gkebackup.logging.v1.BackupChange backup_id INFO
ERROR
gkebackup.googleapis.com%2Fbackup_plan_change gkebackup.googleapis.com/BackupPlan type.googleapis.com/google.cloud.gkebackup.logging.v1.BackupPlanChange backup_plan_id INFO
ERROR
gkebackup.googleapis.com%2Frestore_change gkebackup.googleapis.com/RestorePlan type.googleapis.com/google.cloud.gkebackup.logging.v1.RestoreChange restore_id INFO
ERROR
gkebackup.googleapis.com%2Frestore_plan_change gkebackup.googleapis.com/RestorePlan type.googleapis.com/google.cloud.gkebackup.logging.v1.RestorePlanChange restore_plan_id INFO
ERROR

BigQuery Data Transfer API

Logging API service name: bigquerydatatransfer.googleapis.com

Log ID Monitored resource Payload Labels Severities
bigquerydatatransfer.googleapis.com%2Ftransfer_config bigquery_dts_config Debug logs for BigQuery Data Transfer runs. Describes the current status of the transfer run. run_id DEFAULT
INFO
WARNING
ERROR

Certificate Manager

Logging API service name: certificatemanager.googleapis.com

Log ID Monitored resource Payload Labels Severities
certificatemanager.googleapis.com%2Fcertificates_expiry certificatemanager.googleapis.com/Project type.googleapis.com/google.cloud.certificatemanager.logging.v1.CertificatesExpiry N/A WARNING

Chat

Logging API service name: chat.googleapis.com

Log ID Monitored resource Payload Labels Severities
chat.googleapis.com%2Ferrors chat.googleapis.com/Project type.googleapis.com/google.chat.logging.v1.ChatAppLogEntry N/A ERROR

Cloud Backup and DR

Logging API service name: backupdr.googleapis.com

Log ID Monitored resource Payload Labels Severities
backupdr.googleapis.com%2Fbackup_recovery_appliance_events backupdr.googleapis.com/BackupRecoveryAppliance type.googleapis.com/cloud.backupdr.logging.v1.Event N/A ERROR
WARNING
INFO

Cloud Database Migration Service

Logging API service name: datamigration.googleapis.com

Log ID Monitored resource Payload Labels Severities
datamigration.googleapis.com%2Fmigration_job_event datamigration.googleapis.com/MigrationJob type.googleapis.com/google.cloud.clouddms.logging.v1.MigrationJobEventLog N/A INFO
NOTICE
ERROR
datamigration.googleapis.com%2Fconnection_profile_event datamigration.googleapis.com/ConnectionProfile type.googleapis.com/google.cloud.clouddms.logging.v1.ConnectionProfileEventLog N/A INFO
NOTICE
ERROR
datamigration.googleapis.com%2Fprivate_connection_event datamigration.googleapis.com/PrivateConnection type.googleapis.com/google.cloud.clouddms.logging.v1.PrivateConnectionEventLog N/A INFO
NOTICE
ERROR

Cloud Datastream

Logging API service name: datastream.googleapis.com

Log ID Monitored resource Payload Labels Severities
datastream.googleapis.com%2Fstream_activity datastream.googleapis.com/Stream type.googleapis.com/google.cloud.datastream.logging.v1.StreamActivityLogEntry N/A ERROR
INFO
WARNING

Cloud Deploy

Logging API service name: clouddeploy.googleapis.com

Log ID Monitored resource Payload Labels Severities
clouddeploy.googleapis.com%2Frelease_render clouddeploy.googleapis.com/DeliveryPipeline type.googleapis.com/google.cloud.deploy.v1.ReleaseRenderEvent N/A INFO
clouddeploy.googleapis.com%2Frollout_notification clouddeploy.googleapis.com/DeliveryPipeline type.googleapis.com/google.cloud.deploy.v1.RolloutNotificationEvent N/A ERROR
clouddeploy.googleapis.com%2Fdeliverypipeline_notification clouddeploy.googleapis.com/DeliveryPipeline type.googleapis.com/google.cloud.deploy.v1.DeliveryPipelineNotificationEvent N/A ERROR
clouddeploy.googleapis.com%2Ftarget_notification clouddeploy.googleapis.com/Target type.googleapis.com/google.cloud.deploy.v1.TargetNotificationEvent N/A ERROR
clouddeploy.googleapis.com%2Frelease_notification clouddeploy.googleapis.com/DeliveryPipeline type.googleapis.com/google.cloud.deploy.v1.ReleaseNotificationEvent N/A ERROR
clouddeploy.googleapis.com%2Fjobrun_notification clouddeploy.googleapis.com/DeliveryPipeline type.googleapis.com/google.cloud.deploy.v1.JobRunNotificationEvent N/A ERROR

Cloud Functions

Logging API service name: cloudfunctions.googleapis.com

Log ID Monitored resource Payload Labels Severities
cloudfunctions.googleapis.com%2Fcloud-functions cloud_function Cloud Functions writes logs to this stream that indicate the start and end of execution, as well as the stdout and stderr from those executions. execution_id
instance_id
infrastructure
runtime_version		 DEFAULT
DEBUG
INFO
NOTICE
WARNING
ERROR
CRITICAL
ALERT
EMERGENCY

Cloud IDS

Logging API service name: ids.googleapis.com

Log ID Monitored resource Payload Labels Severities
ids.googleapis.com%2Fthreat ids.googleapis.com/Endpoint Threat logs from the Cloud IDS endpoint. N/A DEFAULT
ids.googleapis.com%2Finstance_agent saas_instance Logs for instance agent running on Cloud IDS VM. N/A ERROR
INFO
ids.googleapis.com%2Ftraffic ids.googleapis.com/Endpoint Traffic logs from the Cloud IDS endpoint. N/A DEFAULT

Cloud Load Balancing

Logging API service name: loadbalancing.googleapis.com

Log ID Monitored resource Payload Labels Severities
loadbalancing.googleapis.com%2Frequests internal_http_lb_rule type.googleapis.com/google.cloud.loadbalancing.type.LoadBalancerLogEntry N/A INFO
WARNING
ERROR
loadbalancing.googleapis.com%2Fexternal_regional_requests http_external_regional_lb_rule type.googleapis.com/google.cloud.loadbalancing.type.LoadBalancerLogEntry N/A INFO
WARNING
ERROR

Cloud Locations

Logging API service name: cloud.googleapis.com

Log ID Monitored resource Payload Labels Severities
cloud.googleapis.com%2Fipsec_events vpn_gateway VPN Tunnel logs from the VPN Gateway instance tunnel_id DEBUG
NOTICE

Cloud Monitoring API

Logging API service name: monitoring.googleapis.com

Log ID Monitored resource Payload Labels Severities
monitoring.googleapis.com%2Fuptime_checks uptime_url uptime_url uptime check logs. check_id
checker_location
execution_id
uptime_result_type		 ERROR
INFO
NOTICE
monitoring.googleapis.com%2Fuptime_checks gae_app gae_app uptime check logs. check_id
checker_location
execution_id
uptime_result_type		 ERROR
INFO
NOTICE
monitoring.googleapis.com%2Fuptime_checks gce_instance gce_instance uptime check logs. check_id
checker_location
execution_id
uptime_result_type		 ERROR
INFO
NOTICE
monitoring.googleapis.com%2Fuptime_checks aws_ec2_instance aws_ec2_instance uptime check logs. check_id
checker_location
execution_id
uptime_result_type		 ERROR
INFO
NOTICE
monitoring.googleapis.com%2Fuptime_checks aws_elb_load_balancer aws_elb_load_balancer uptime check logs. check_id
checker_location
execution_id
uptime_result_type		 ERROR
INFO
NOTICE
monitoring.googleapis.com%2Fuptime_checks k8s_service k8s_service uptime check logs. check_id
checker_location
execution_id
uptime_result_type		 ERROR
INFO
NOTICE
monitoring.googleapis.com%2Fuptime_checks servicedirectory_service servicedirectory_service uptime check logs. check_id
checker_location
execution_id
uptime_result_type		 ERROR
INFO
NOTICE
monitoring.googleapis.com%2Fuptime_checks cloud_run_revision cloud_run_revision uptime check logs. check_id
checker_location
execution_id
uptime_result_type		 ERROR
INFO
NOTICE

Cloud OS Config

Logging API service name: osconfig.googleapis.com

Log ID Monitored resource Payload Labels Severities
osconfig.googleapis.com%2Fpatch_job cloud_osconfig_patch_job type.googleapis.com/google.cloud.osconfig.logging.PatchJobCompletedLog osconfig.googleapis.com/patch_job INFO
ERROR

Cloud Run

Logging API service name: run.googleapis.com

Log ID Monitored resource Payload Labels Severities
run.googleapis.com%2Fstdout cloud_run_revision Cloud Run stdout logs. Each entry contains a line (or multiple lines, if they match a known multi-line exception format like a stack trace) written to stdout from the user container. instanceId
goog-managed-by
goog-cloudfunctions-runtime
managed-by
commit-sha
gcb-trigger-id
gcb-build-id
container_name		 DEFAULT
DEBUG
INFO
NOTICE
WARNING
ERROR
CRITICAL
ALERT
EMERGENCY
run.googleapis.com%2Fstderr cloud_run_revision Cloud Run stderr logs. Each entry contains a line (or multiple lines, if they match a known multi-line exception format like a stack trace) written to stderr from the user container. instanceId
goog-managed-by
goog-cloudfunctions-runtime
managed-by
commit-sha
gcb-trigger-id
gcb-build-id
container_name		 DEFAULT
DEBUG
INFO
NOTICE
WARNING
ERROR
CRITICAL
ALERT
EMERGENCY
run.googleapis.com%2Frequests cloud_run_revision Cloud Run request logs. Each request served by a Cloud Run service should have a corresponding request log entry. instanceId
goog-managed-by
goog-cloudfunctions-runtime
managed-by
commit-sha
gcb-trigger-id
gcb-build-id		 DEFAULT
INFO
WARNING
ERROR
run.googleapis.com%2F/dev/log cloud_run_revision Cloud Run syslogs. These are syslog-structured logs written to /dev/log in the user container. instanceId
goog-managed-by
goog-cloudfunctions-runtime
managed-by
commit-sha
gcb-trigger-id
gcb-build-id
container_name		 DEFAULT
DEBUG
INFO
NOTICE
WARNING
ERROR
CRITICAL
ALERT
EMERGENCY
run.googleapis.com%2F/var/log cloud_run_revision Cloud Run /var/log logs. Each entry contains a line (or multiple lines, if they match a known multi-line exception format like a stack trace) written to /var/log/** from the user container. instanceId
goog-managed-by
goog-cloudfunctions-runtime
managed-by
commit-sha
gcb-trigger-id
gcb-build-id
container_name		 DEFAULT
DEBUG
INFO
NOTICE
WARNING
ERROR
CRITICAL
ALERT
EMERGENCY
run.googleapis.com%2Fstdout cloud_run_job Cloud Run stdout logs. Each entry contains a line (or multiple lines, if they match a known multi-line exception format like a stack trace) written to stdout from the user container. instanceId
run.googleapis.com/execution_name
run.googleapis.com/task_index
run.googleapis.com/task_attempt
managed-by
commit-sha
gcb-trigger-id
gcb-build-id
container_name		 DEFAULT
DEBUG
INFO
NOTICE
WARNING
ERROR
CRITICAL
ALERT
EMERGENCY
run.googleapis.com%2Fstderr cloud_run_job Cloud Run stderr logs. Each entry contains a line (or multiple lines, if they match a known multi-line exception format like a stack trace) written to stderr from the user container. instanceId
run.googleapis.com/execution_name
run.googleapis.com/task_index
run.googleapis.com/task_attempt
managed-by
commit-sha
gcb-trigger-id
gcb-build-id
container_name		 DEFAULT
DEBUG
INFO
NOTICE
WARNING
ERROR
CRITICAL
ALERT
EMERGENCY
run.googleapis.com%2F/dev/log cloud_run_job Cloud Run syslogs. These are syslog-structured logs written to /dev/log in the user container. instanceId
run.googleapis.com/execution_name
run.googleapis.com/task_index
run.googleapis.com/task_attempt
managed-by
commit-sha
gcb-trigger-id
gcb-build-id
container_name		 DEFAULT
DEBUG
INFO
NOTICE
WARNING
ERROR
CRITICAL
ALERT
EMERGENCY
run.googleapis.com%2F/var/log cloud_run_job Cloud Run /var/log logs. Each entry contains a line (or multiple lines, if they match a known multi-line exception format like a stack trace) written to /var/log/** from the user container. instanceId
run.googleapis.com/execution_name
run.googleapis.com/task_index
run.googleapis.com/task_attempt
managed-by
commit-sha
gcb-trigger-id
gcb-build-id
container_name		 DEFAULT
DEBUG
INFO
NOTICE
WARNING
ERROR
CRITICAL
ALERT
EMERGENCY

Cloud SQL

Logging API service name: cloudsql.googleapis.com

Log ID Monitored resource Payload Labels Severities
cloudsql.googleapis.com%2Fmysql.err cloudsql_database The error log contains a record and diagnostic messages such as errors, warnings, and notes that occur during server startup, shutdown, and while the server is running. INSTANCE_UID
LOG_BUCKET_NUM		 INFO
WARNING
ERROR
cloudsql.googleapis.com%2Fmysql-slow.log cloudsql_database The slow query log consists of SQL statements that take more than long_query_time seconds to execute. INSTANCE_UID
LOG_BUCKET_NUM		 INFO
WARNING
ERROR
cloudsql.googleapis.com%2Fmysql-general.log cloudsql_database The general query log records when clients connect or disconnect, and it logs each SQL statement received from clients. INSTANCE_UID
LOG_BUCKET_NUM		 INFO
WARNING
ERROR
cloudsql.googleapis.com%2Freplication-setup.log cloudsql_database They are related to external server replication setup. INSTANCE_UID
LOG_BUCKET_NUM		 INFO
WARNING
ERROR
cloudsql.googleapis.com%2Freplication-status.log cloudsql_database They are related to external server replication status monitoring. INSTANCE_UID
LOG_BUCKET_NUM		 INFO
WARNING
ERROR
cloudsql.googleapis.com%2Factive_directory.log cloudsql_database It logs Active Directory related events for SQL Server instances. N/A INFO
WARNING
ERROR
cloudsql.googleapis.com%2Fmysql-upgrade.log cloudsql_database Used to contain mysql_upgrade logs. Now deprecated. N/A INFO
WARNING
ERROR
cloudsql.googleapis.com%2Fpostgres.log cloudsql_database It contains the database server's log output from the Cloud SQL instance. INSTANCE_UID
LOG_BUCKET_NUM		 INFO
WARNING
ERROR
cloudsql.googleapis.com%2Fpostgres-audit.log cloudsql_database It contains the audit log entries from the pgAudit extension in the Cloud SQL instance. N/A INFO
WARNING
ERROR
cloudsql.googleapis.com%2Fsqlserver.err cloudsql_database These logs are from the SQL Server errorlog on the Cloud SQL instance. CONTAINER_ID
CONTAINER_ID_FULL
CONTAINER_NAME
CONTAINER_TAG
IMAGE_NAME
INSTANCE_ID
INSTANCE_UID
LOG_BUCKET_NUM
SYSLOG_IDENTIFIER
_BOOT_ID
_CAP_EFFECTIVE
_CMDLINE
_COMM
_EXE
_GID
_HOSTNAME
_MACHINE_ID
_PID
_SOURCE_REALTIME_TIMESTAMP
_SYSTEMD_CGROUP
_SYSTEMD_INVOCATION_ID
_SYSTEMD_SLICE
_SYSTEMD_UNIT
_TRANSPORT
UID
_MONOTONICTIMESTAMP
_REALTIME_TIMESTAMP		 INFO
WARNING
ERROR
cloudsql.googleapis.com%2Fsqlagent.out cloudsql_database These logs are from sqlagent.out on the Cloud SQL instance. INSTANCE_UID
LOG_BUCKET_NUM		 INFO
WARNING
ERROR
cloudsql.googleapis.com%2Foperationdetails.log cloudsql_database These logs show details of long running operations such as Import SQL for SQL Server instances. INSTANCE_UID
LOG_BUCKET_NUM		 INFO
WARNING
ERROR
cloudsql.googleapis.com%2Fpostgres-upgrade.log cloudsql_database It contains log output by pg_upgrade during database major version upgrade. FILE_NAME
INSTANCE_UID
LOG_BUCKET_NUM		 INFO
WARNING
ERROR

Cloud Setup

Logging API service name: cloudsetup.googleapis.com

Log ID Monitored resource Payload Labels Severities
cloudsetup.googleapis.com%2Fcomplete_deployment api type.googleapis.com/google.cloud.cloudsetup.logging.v1.CompleteDeploymentEvent activity_type_name DEFAULT

Cloud VPN

Logging API service name: vpn.googleapis.com

Log ID Monitored resource Payload Labels Severities
vpn.googleapis.com%2Fipsec_events vpn_gateway VPN Tunnel logs from the VPN Gateway instance tunnel_id DEBUG
NOTICE

Cloud Workstations

Logging API service name: workstations.googleapis.com

Log ID Monitored resource Payload Labels Severities
workstations.googleapis.com%2Fdisk_assignments workstations.googleapis.com/Workstation Disk assignment logs disk NOTICE
workstations.googleapis.com%2Fvm_assignments workstations.googleapis.com/Workstation VM assignment logs external_ip
instance_id
internal_ip
instance_name		 NOTICE

Compute Engine

Logging API service name: compute.googleapis.com

Log ID Monitored resource Payload Labels Severities
compute.googleapis.com%2Fgce_disaster_recovery gce_instance type.googleapis.com/google.compute.logging.dr.v1.DisasterRecoveryEvent N/A N/A
compute.googleapis.com%2Fgce_disaster_recovery gce_disk type.googleapis.com/google.compute.logging.dr.v1.DisasterRecoveryEvent N/A N/A
compute.googleapis.com%2Fgce_disaster_recovery gce_snapshot type.googleapis.com/google.compute.logging.dr.v1.DisasterRecoveryEvent N/A N/A
compute.googleapis.com%2Fgce_disaster_recovery gce_instance_template type.googleapis.com/google.compute.logging.dr.v1.DisasterRecoveryEvent N/A N/A
compute.googleapis.com%2Fgce_disaster_recovery gce_instance_group_manager type.googleapis.com/google.compute.logging.dr.v1.DisasterRecoveryEvent N/A N/A
compute.googleapis.com%2Fgce_disaster_recovery gce_resevered_address type.googleapis.com/google.compute.logging.dr.v1.DisasterRecoveryEvent N/A N/A
compute.googleapis.com%2Fgdnsusage gce_instance type.googleapis.com/google.compute.logging.gdnsusage.v1.GdnsVmUsagePlatformLog resource_name DEBUG

Container Security API

Logging API service name: containersecurity.googleapis.com

Log ID Monitored resource Payload Labels Severities
containersecurity.googleapis.com%2Ffinding k8s_cluster type.googleapis.com/cloud.kubernetes.security.containersecurity_logging.Finding N/A INFO

Dataform

Logging API service name: dataform.googleapis.com

Log ID Monitored resource Payload Labels Severities
dataform.googleapis.com%2Fworkflow_invocation_completion dataform.googleapis.com/Repository type.googleapis.com/google.cloud.dataform.logging.v1.WorkflowInvocationCompletionLogEntry N/A INFO
WARNING
ERROR

Datapipelines API

Logging API service name: datapipelines.googleapis.com

Log ID Monitored resource Payload Labels Severities
datapipelines.googleapis.com%2Frequests datapipelines.googleapis.com/Location type.googleapis.com/google.cloud.datapipelines.logging.v1.RequestLogEntry N/A DEFAULT
datapipelines.googleapis.com%2Frequests datapipelines.googleapis.com/Pipeline type.googleapis.com/google.cloud.datapipelines.logging.v1.RequestLogEntry N/A DEFAULT

Dataproc

Logging API service name: dataproc.googleapis.com

Log ID Monitored resource Payload Labels Severities
dataproc.googleapis.com%2Fautoscaler cloud_dataproc_cluster type.googleapis.com/google.cloud.dataproc.logging.AutoscalerLog N/A INFO
WARNING
ERROR
CRITICAL
dataproc.googleapis.com%2Fautoscaler cloud_dataproc_batch type.googleapis.com/google.cloud.dataproc.logging.AutoscalerLog N/A INFO
WARNING
ERROR
CRITICAL
dataproc.googleapis.com%2Fautoscaler cloud_dataproc_session type.googleapis.com/google.cloud.dataproc.logging.AutoscalerLog N/A INFO
WARNING
ERROR
CRITICAL

Dataproc Metastore

Logging API service name: metastore.googleapis.com

Log ID Monitored resource Payload Labels Severities
metastore.googleapis.com%2Fbackground metastore.googleapis.com/Service Dataproc Metastore background logs. logger ERROR
INFO
WARNING
metastore.googleapis.com%2Fsystem metastore.googleapis.com/Service Service system logs. method
service_region		 ERROR
INFO
WARNING
metastore.googleapis.com%2Frequests metastore.googleapis.com/Service Service request logs. method
service_region		 INFO

Event Threat Detection

Logging API service name: threatdetection.googleapis.com

Log ID Monitored resource Payload Labels Severities
threatdetection.googleapis.com%2Fdetection threat_detector Event Threat Detection finding. N/A NOTICE
WARNING
CRITICAL
ERROR

Firestore/Datastore

Logging API service name: datastore.googleapis.com

Log ID Monitored resource Payload Labels Severities
datastore.googleapis.com%2Fmigration_state datastore_database type.googleapis.com/google.datastore.admin.v1.MigrationStateEvent N/A NOTICE
datastore.googleapis.com%2Fmigration_progress datastore_database type.googleapis.com/google.datastore.admin.v1.MigrationProgressEvent N/A INFO

GKE On-prem (Anthos)

Logging API service name: anthos.googleapis.com

Log ID Monitored resource Payload Labels Severities
anthos.googleapis.com%2Fseesaw_engine anthos_l4lb These logs are from seesaw_engine on the Seesaw VM instances running in GKE OnPrem. N/A N/A
anthos.googleapis.com%2Fseesaw_ha anthos_l4lb These logs are from seesaw_ha on the Seesaw VM instances running in GKE OnPrem. N/A N/A
anthos.googleapis.com%2Fseesaw_healthcheck anthos_l4lb These logs are from seesaw_healthcheck on the Seesaw VM instances running in GKE OnPrem. N/A N/A
anthos.googleapis.com%2Fseesaw_ncc anthos_l4lb These logs are from seesaw_ncc on the Seesaw VM instances running in GKE OnPrem. N/A N/A
anthos.googleapis.com%2Fseesaw_ecu anthos_l4lb These logs are from seesaw_ecu on the Seesaw VM instances running in GKE OnPrem. N/A N/A
anthos.googleapis.com%2Fseesaw_config anthos_l4lb These logs are from seesaw_config on the Seesaw VM instances running in GKE OnPrem. N/A N/A

Google Binary Authorization API

Logging API service name: binaryauthorization.googleapis.com

Log ID Monitored resource Payload Labels Severities
binaryauthorization.googleapis.com%2Fcontinuous_validation k8s_cluster v1beta1: type.googleapis.com/google.cloud.binaryauthorization.v1beta1.ContinuousValidationEvent N/A WARNING

Google Workspace Add-ons

Logging API service name: gsuiteaddons.googleapis.com

Log ID Monitored resource Payload Labels Severities
gsuiteaddons.googleapis.com%2Ferrors g_suite_add_ons type.googleapis.com/google.cloud.gsuiteaddons.logging.v1.GSuiteAddOnsLogEntry N/A ERROR

Identity Toolkit

Logging API service name: identitytoolkit.googleapis.com

Log ID Monitored resource Payload Labels Severities
identitytoolkit.googleapis.com%2Frequests identitytoolkit_project type.googleapis.com/google.cloud.identitytoolkit.logging.RequestLog N/A INFO
ERROR
identitytoolkit.googleapis.com%2Frequests identitytoolkit_tenant type.googleapis.com/google.cloud.identitytoolkit.logging.RequestLog N/A INFO
ERROR

Immersive Stream for XR

Logging API service name: stream.googleapis.com

Log ID Monitored resource Payload Labels Severities
stream.googleapis.com%2Fsession_event stream.googleapis.com/StreamInstance type.googleapis.com/google.cloud.stream.logging.v1.SessionEventLog N/A INFO
ERROR

Issuer Switch Service

Logging API service name: issuerswitch.googleapis.com

Log ID Monitored resource Payload Labels Severities
issuerswitch.googleapis.com%2Fpgis_activity issuerswitch.googleapis.com/UPIInstance type.googleapis.com/google.cloud.paymentgateway.issuerswitch.v1.UpiTransaction N/A DEBUG
ERROR
INFO

Key Management Service

Logging API service name: cloudkms.googleapis.com

Log ID Monitored resource Payload Labels Severities
cloudkms.googleapis.com%2Fcryptokey_events cloudkms_cryptokey type.googleapis.com/google.cloud.kms.logging.v1.CryptoKeyEvent N/A INFO
ERROR
cloudkms.googleapis.com%2Fcryptokeyversion_events cloudkms_cryptokeyversion type.googleapis.com/google.cloud.kms.logging.v1.CryptoKeyVersionEvent N/A INFO
ERROR

Live Stream API

Logging API service name: livestream.googleapis.com

Log ID Monitored resource Payload Labels Severities
livestream.googleapis.com%2Fchannel_activities livestream.googleapis.com/Channel type.googleapis.com/google.cloud.video.livestream.logging.v1.ChannelActivity N/A INFO
DEBUG
ERROR

Logging API

Logging API service name: logging.googleapis.com

Log ID Monitored resource Payload Labels Severities
logging.googleapis.com%2Fsink_error logging_sink A report of an error encountered while trying to export data to a configured log sink. activity_type_name
destination
error_code
error_detail
log_entity_id
log_filter
sink_id		 ERROR
logging.googleapis.com%2Fmetric_throttled metric Informs customer that a metric associated with Logs-based metrics is being throttled. activity_type_name
dropped_labels
label_cardinalities
limit_type
metric_name
user_cardinality		 WARNING

Network Analyzer

Logging API service name: networkanalyzer.googleapis.com

Log ID Monitored resource Payload Labels Severities
networkanalyzer.googleapis.com%2Fanalyzer_reports networking.googleapis.com/Location type.googleapis.com/google.cloud.networkanalyzer.logging.v1.Report N/A DEFAULT

Partner Data Ingestion

Logging API service name: partnerdataingestion.googleapis.com

Log ID Monitored resource Payload Labels Severities
partnerdataingestion.googleapis.com%2Fingest_details consumed_api type.googleapis.com/google.search.partnerdataingestion.logging.v1.IngestDetailsLog N/A INFO

Recommender API

Logging API service name: recommender.googleapis.com

Log ID Monitored resource Payload Labels Severities
recommender.googleapis.com%2Factions recommender v1: type.googleapis.com/google.cloud.recommender.logging.v1.ActionLog
v1beta1: type.googleapis.com/google.cloud.recommender.logging.v1beta1.ActionLog		 N/A INFO
recommender.googleapis.com%2Factions recommender_insight_type v1: type.googleapis.com/google.cloud.recommender.logging.v1.InsightActionLog
v1beta1: type.googleapis.com/google.cloud.recommender.logging.v1beta1.InsightActionLog		 N/A INFO

SaaS Lifecycle Management

Logging API service name: saasmanagement.googleapis.com

Log ID Monitored resource Payload Labels Severities
saasmanagement.googleapis.com%2Fterraform_internal saasmanagement.googleapis.com/Instance type.googleapis.com/google.cloud.saasaccelerator.management.logs.v1.InstanceEvent resource_project_number DEBUG
ERROR
INFO

Secret Manager API

Logging API service name: secretmanager.googleapis.com

Log ID Monitored resource Payload Labels Severities
secretmanager.googleapis.com%2Fsecret_event secretmanager.googleapis.com/Secret type.googleapis.com/google.cloud.secretmanager.logging.v1.SecretEvent N/A DEFAULT
DEBUG
INFO
NOTICE
WARNING
ERROR
CRITICAL
ALERT
EMERGENCY

Sensitive Actions Service

Logging API service name: sensitiveaction.googleapis.com

Log ID Monitored resource Payload Labels Severities
sensitiveaction.googleapis.com%2Faction sensitiveaction.googleapis.com/Location type.googleapis.com/google.cloud.sensitiveaction.logging.v1.SensitiveAction N/A NOTICE

Serial Console

Logging API service name: serialconsole.googleapis.com

Log ID Monitored resource Payload Labels Severities
serialconsole.googleapis.com%2Fserial_port_1_output gce_instance A virtual machine instance has four virtual serial ports. The instance's operating system, BIOS, and other system-level entities often write output to the serial ports, which makes them useful for troubleshooting crashes, failed boots, startup issues, or shutdown issues. compute.googleapis.com/resource_name
is_text_escaped		 INFO
DEBUG
serialconsole.googleapis.com%2Fserial_port_2_output gce_instance A virtual machine instance has four virtual serial ports. The instance's operating system, BIOS, and other system-level entities often write output to the serial ports, which makes them useful for troubleshooting crashes, failed boots, startup issues, or shutdown issues. compute.googleapis.com/resource_name
is_text_escaped		 INFO
DEBUG
serialconsole.googleapis.com%2Fserial_port_3_output gce_instance A virtual machine instance has four virtual serial ports. The instance's operating system, BIOS, and other system-level entities often write output to the serial ports, which makes them useful for troubleshooting crashes, failed boots, startup issues, or shutdown issues. compute.googleapis.com/resource_name
is_text_escaped		 INFO
DEBUG
serialconsole.googleapis.com%2Fserial_port_4_output gce_instance A virtual machine instance has four virtual serial ports. The instance's operating system, BIOS, and other system-level entities often write output to the serial ports, which makes them useful for troubleshooting crashes, failed boots, startup issues, or shutdown issues. compute.googleapis.com/resource_name
is_text_escaped		 INFO
DEBUG
serialconsole.googleapis.com%2Fserial_port_debug_output gce_instance A virtual machine instance has four virtual serial ports. The instance's operating system, BIOS, and other system-level entities often write output to the serial ports, which makes them useful for troubleshooting crashes, failed boots, startup issues, or shutdown issues. compute.googleapis.com/resource_name
is_text_escaped		 INFO
DEBUG

Storage Transfer

Logging API service name: storagetransfer.googleapis.com

Log ID Monitored resource Payload Labels Severities
storagetransfer.googleapis.com%2Ftransfer_activity storage_transfer_job type.googleapis.com/google.storagetransfer.logging.TransferActivityLog N/A INFO
WARNING
ERROR

Traffic Director

Logging API service name: trafficdirector.googleapis.com

Log ID Monitored resource Payload Labels Severities
trafficdirector.googleapis.com%2Fevents gce_network type.googleapis.com/google.networking.trafficdirector.type.TrafficDirectorLogEntry N/A ERROR
INFO
WARNING
trafficdirector.googleapis.com%2Fevents gateway_scope type.googleapis.com/google.networking.trafficdirector.type.TrafficDirectorLogEntry N/A ERROR
INFO
trafficdirector.googleapis.com%2Fevents mesh type.googleapis.com/google.networking.trafficdirector.type.TrafficDirectorLogEntry N/A INFO

Vertex AI API

Logging API service name: aiplatform.googleapis.com

Log ID Monitored resource Payload Labels Severities
aiplatform.googleapis.com%2Fpipeline_job_events aiplatform.googleapis.com/PipelineJob type.googleapis.com/google.cloud.aiplatform.logging.PipelineJobLogEntry network
pipeline_name
pipeline_type
service_account
template_metadata_version
template_uri
vertex-ai-pipelines-run-billing-id
vertex_pipeline_system_label_propagate_labels		 ERROR
INFO
aiplatform.googleapis.com%2Fpipeline_job_task_events aiplatform.googleapis.com/PipelineJob type.googleapis.com/google.cloud.aiplatform.logging.PipelineJobTaskLogEntry custom_job_id
network
pipeline_name
schedule_name
service_account
template_metadata_version
template_uri
vertex-ai-pipelines-run-billing-id
vertex_pipeline_system_label_propagate_labels		 ERROR
INFO

Web Security Scanner API

Logging API service name: websecurityscanner.googleapis.com

Log ID Monitored resource Payload Labels Severities
websecurityscanner.googleapis.com%2Fscan_activity security_scanner_scan_config type.googleapis.com/google.cloud.websecurityscanner.v1.ScanRunLog N/A ERROR
WARNING
INFO

Workflows

Logging API service name: workflows.googleapis.com

Log ID Monitored resource Payload Labels Severities
workflows.googleapis.com%2Fengine_call workflows.googleapis.com/Workflow type.googleapis.com/google.cloud.workflows.type.EngineCallLog workflows.googleapis.com/execution_id
workflows.googleapis.com/revision_id		 DEBUG
workflows.googleapis.com%2Fexecutions_system workflows.googleapis.com/Workflow type.googleapis.com/google.cloud.workflows.type.ExecutionsSystemLog workflows.googleapis.com/execution_id
workflows.googleapis.com/revision_id		 INFO
ERROR

reCAPTCHA Enterprise

Logging API service name: recaptchaenterprise.googleapis.com

Log ID Monitored resource Payload Labels Severities
recaptchaenterprise.googleapis.com%2Fassessment recaptchaenterprise.googleapis.com/Key type.googleapis.com/google.cloud.recaptchaenterprise.v1.Assessment N/A DEFAULT
ERROR
recaptchaenterprise.googleapis.com%2Fannotation recaptchaenterprise.googleapis.com/Key type.googleapis.com/google.cloud.recaptchaenterprise.v1.AnnotateAssessmentRequest N/A DEFAULT
ERROR

Understand and manage platform logs

The following sections provide basic information about using and managing platform logs in Cloud Logging.

Log entry structure

Cloud Logging represents logs using a single data type, LogEntry, which defines certain common data for all log entries as well as the payloads that Google Cloud services can include. For detailed information about the contents of log entries, see the Logging API reference for the LogEntry type.

The index of platform logs highlights the following characteristics of log entries:

  • Log ID: The URL-encoded identifier within logName. For example, if the broader log name is organizations/1234567890/logs/cloudresourcemanager.googleapis.com%2Factivity, then the log ID is cloudresourcemanager.googleapis.com%2Factivity.

    Note that if the log ID string in a log entry's logName field is prefixed by serviceName.googleapis.com, it is a Google Cloud platform log entry.

  • Monitored resource: The resource from which the log entry originated. This consists of a resource type from the Monitored resource list and additional label values that identify a specific instance.

  • Payload: The log entry payload, which can be represented as textPayload or jsonPayload.

View logs

There are several ways to view your platform log entries:

Route logs

You can control how your log entries are routed and stored. The Log Router checks each log entry against existing rules to determine which log entries to discard, which log entries to store in Cloud Logging, and which log entries to include in exports to other destinations.

For details, see Routing and storage overview: Log Router.

Logs retention

Log entries are stored in Logging buckets for a specified length of time and are then deleted. For more information, see Logs retention periods.

Pricing

For information on logs pricing, see Logging pricing.