Google Cloud platform logs

This document provides basic information about the Google Cloud platform logs that are available in Cloud Logging, as well as next steps for viewing and managing platform logs.

Overview

Logging receives, indexes, and stores log entries from Google Cloud services. Google Cloud platform logs are service-specific logs that can help you debug and troubleshoot issues, as well as better understand the Google Cloud services you're using.

The Google Cloud platform logs visible to you in Cloud Logging vary, depending on which Google Cloud resources you're using in your Google Cloud project or organization.

When using this document, note the following:

  • Not all Google Cloud services implement platform logs. For an expanding (non-exhaustive) list of the services that implement platform logs, see the following Index of Google Cloud platform logs.
  • Each Google Cloud service that implements platform logs manages its own configuration. Refer to service-specific documentation to determine whether the service enables platform logs by default and how to enable or disable platform logs.

Index of Google Cloud platform logs

Following are tables of some of the Google Cloud platform logs supported by Cloud Logging. To understand the data contained in the tables, see Log entry structure on this page.

Abuse Event

Logging API service name: abuseevent.googleapis.com

Log ID Monitored resource Payload Labels Severities
abuseevent.googleapis.com%2Fabuse_events abuseevent.googleapis.com/Location type.googleapis.com/google.cloud.abuseevent.logging.v1.AbuseEvent abuseevent.googleapis.com/service_account
abuseevent.googleapis.com/vm_resource		 CRITICAL
NOTICE
ALERT

AlloyDB

Logging API service name: alloydb.googleapis.com

Log ID Monitored resource Payload Labels Severities
alloydb.googleapis.com%2Fpostgres.log alloydb.googleapis.com/Instance The PostgreSQL database logs. CONSUMER_PROJECT
NODE_ID
SOURCE
DATABASE_VERSION		 INFO
WARNING
ERROR
ALERT
NOTICE
alloydb.googleapis.com%2Fjournald alloydb.googleapis.com/Instance Container logs for dataplane agents. CONSUMER_PROJECT
CONSUMER_PROJECT_NUMBER
CONTAINER_ID
CONTAINER_ID_FULL
CONTAINER_LOG_ORDINAL
CONTAINER_NAME
CONTAINER_TAG
IMAGE_NAME
NODE_ID
DATABASE_VERSION
SYSLOG_FACILITY
SYSLOG_IDENTIFIER
SYSLOG_TIMESTAMP
_BOOT_ID
_CAP_EFFECTIVE
_CMDLINE
_COMM
_EXE
_GID
_HOSTNAME
_MACHINE_ID
_PID
_RUNTIME_SCOPE
_SOURCE_REALTIME_TIMESTAMP
_STREAM_ID
_SYSTEMD_CGROUP
_SYSTEMD_INVOCATION_ID
_SYSTEMD_SLICE
_SYSTEMD_UNIT
_TRANSPORT
UID
_MONOTONICTIMESTAMP
_REALTIME_TIMESTAMP		 ERROR
INFO
WARNING
NOTICE
ALERT
alloydb.googleapis.com%2Fpostgresinternal alloydb.googleapis.com/Instance The internal dogfish logs. CONSUMER_PROJECT
LOG_TYPE
NODE_ID
DATABASE_VERSION		 DEFAULT
INFO
WARNING
ERROR
alloydb.googleapis.com%2Finstance_agent saas_instance Logs for instance agent running on AlloyDB VM. N/A ERROR
INFO
alloydb.googleapis.com%2Fpostgres_upgrade alloydb.googleapis.com/Instance It contains log output by pg_upgrade during database major version upgrade. OPERATION_NAME
FILE_NAME
LOG_TYPE		 DEFAULT
DEBUG
INFO
NOTICE
WARNING
ERROR
CRITICAL
ALERT
EMERGENCY
alloydb.googleapis.com%2Fpostgres_upgrade_internal alloydb.googleapis.com/Instance The internal pg_upgrade logs during database major version upgrade. OPERATION_NAME
FILE_NAME
LOG_TYPE		 DEFAULT
DEBUG
INFO
NOTICE
WARNING
ERROR
CRITICAL
ALERT
EMERGENCY

Application Integration

Logging API service name: integrations.googleapis.com

Log ID Monitored resource Payload Labels Severities
integrations.googleapis.com%2Fexecution_info integrations.googleapis.com/IntegrationVersion type.googleapis.com/google.cloud.integrations.v1alpha.ExecutionInfo N/A INFO
WARNING
ERROR

Assured Workloads

Logging API service name: assuredworkloads.googleapis.com

Log ID Monitored resource Payload Labels Severities
assuredworkloads.googleapis.com%2Fregulatory_intercept_ack folder type.googleapis.com/google.cloud.assuredworkloads.regulatoryintercept.logging.v1.RegulatoryInterceptAckLogEntry N/A INFO
assuredworkloads.googleapis.com%2Fregulatory_intercept_ack project type.googleapis.com/google.cloud.assuredworkloads.regulatoryintercept.logging.v1.RegulatoryInterceptAckLogEntry N/A INFO

Backup for GKE

Logging API service name: gkebackup.googleapis.com

Log ID Monitored resource Payload Labels Severities
gkebackup.googleapis.com%2Fbackup_change gkebackup.googleapis.com/BackupPlan type.googleapis.com/google.cloud.gkebackup.logging.v1.BackupChange backup_id INFO
ERROR
gkebackup.googleapis.com%2Fbackup_plan_change gkebackup.googleapis.com/BackupPlan type.googleapis.com/google.cloud.gkebackup.logging.v1.BackupPlanChange backup_plan_id INFO
ERROR
gkebackup.googleapis.com%2Frestore_change gkebackup.googleapis.com/RestorePlan type.googleapis.com/google.cloud.gkebackup.logging.v1.RestoreChange restore_id INFO
ERROR
gkebackup.googleapis.com%2Frestore_plan_change gkebackup.googleapis.com/RestorePlan type.googleapis.com/google.cloud.gkebackup.logging.v1.RestorePlanChange restore_plan_id INFO
ERROR

BigQuery Data Transfer API

Logging API service name: bigquerydatatransfer.googleapis.com

Log ID Monitored resource Payload Labels Severities
bigquerydatatransfer.googleapis.com%2Ftransfer_config bigquery_dts_config Debug logs for BigQuery Data Transfer runs. Describes the current status of the transfer run. run_id DEFAULT
INFO
WARNING
ERROR

Certificate Manager

Logging API service name: certificatemanager.googleapis.com

Log ID Monitored resource Payload Labels Severities
certificatemanager.googleapis.com%2Fcertificates_expiry certificatemanager.googleapis.com/Project type.googleapis.com/google.cloud.certificatemanager.logging.v1.CertificatesExpiry N/A WARNING

Chat

Logging API service name: chat.googleapis.com

Log ID Monitored resource Payload Labels Severities
chat.googleapis.com%2Ferrors chat.googleapis.com/Project type.googleapis.com/google.chat.logging.v1.ChatAppLogEntry N/A ERROR

Cloud Backup and DR

Logging API service name: backupdr.googleapis.com

Log ID Monitored resource Payload Labels Severities
backupdr.googleapis.com%2Fbackup_recovery_appliance_events backupdr.googleapis.com/BackupRecoveryAppliance type.googleapis.com/google.cloud.backupdr.logging.v1.Event N/A ERROR
WARNING
INFO
backupdr.googleapis.com%2Fgcb_backup_recovery_jobs backupdr.googleapis.com/ManagementConsole type.googleapis.com/google.cloud.backupdr.logging.v1.BackupRecoveryJobReportLog N/A INFO
backupdr.googleapis.com%2Fgcb_daily_schedule_compliance backupdr.googleapis.com/ManagementConsole type.googleapis.com/google.cloud.backupdr.logging.v1.DailyScheduleComplianceReportLog N/A INFO
backupdr.googleapis.com%2Fgcb_protected_resource backupdr.googleapis.com/ManagementConsole type.googleapis.com/google.cloud.backupdr.logging.v1.ProtectedResourceReportLog N/A INFO
backupdr.googleapis.com%2Fbdr_backup_restore_jobs backupdr.googleapis.com/BackupDRProject type.googleapis.com/google.cloud.backupdr.logging.v1.BDRBackupRestoreJobLog N/A INFO
ERROR
backupdr.googleapis.com%2Fbdr_protected_resource backupdr.googleapis.com/BackupPlan type.googleapis.com/google.cloud.backupdr.logging.v1.BDRProtectedResourceLog N/A INFO
backupdr.googleapis.com%2Fbdr_backup_vault_details backupdr.googleapis.com/BackupVault type.googleapis.com/google.cloud.backupdr.logging.v1.BDRBackupVaultDetailsLog N/A INFO

Cloud Database Migration Service

Logging API service name: datamigration.googleapis.com

Log ID Monitored resource Payload Labels Severities
datamigration.googleapis.com%2Fmigration_job_event datamigration.googleapis.com/MigrationJob type.googleapis.com/google.cloud.clouddms.logging.v1.MigrationJobEventLog N/A INFO
NOTICE
ERROR
datamigration.googleapis.com%2Fconnection_profile_event datamigration.googleapis.com/ConnectionProfile type.googleapis.com/google.cloud.clouddms.logging.v1.ConnectionProfileEventLog N/A INFO
NOTICE
ERROR
datamigration.googleapis.com%2Fprivate_connection_event datamigration.googleapis.com/PrivateConnection type.googleapis.com/google.cloud.clouddms.logging.v1.PrivateConnectionEventLog N/A INFO
NOTICE
ERROR

Cloud Datastream

Logging API service name: datastream.googleapis.com

Log ID Monitored resource Payload Labels Severities
datastream.googleapis.com%2Fstream_activity datastream.googleapis.com/Stream type.googleapis.com/google.cloud.datastream.logging.v1.StreamActivityLogEntry N/A ERROR
INFO
WARNING

Cloud Deploy

Logging API service name: clouddeploy.googleapis.com

Log ID Monitored resource Payload Labels Severities
clouddeploy.googleapis.com%2Frelease_render clouddeploy.googleapis.com/DeliveryPipeline type.googleapis.com/google.cloud.deploy.v1.ReleaseRenderEvent N/A INFO
clouddeploy.googleapis.com%2Frollout_notification clouddeploy.googleapis.com/DeliveryPipeline type.googleapis.com/google.cloud.deploy.v1.RolloutNotificationEvent N/A ERROR
clouddeploy.googleapis.com%2Frollout_update clouddeploy.googleapis.com/DeliveryPipeline type.googleapis.com/google.cloud.deploy.v1.RolloutUpdateEvent N/A INFO
clouddeploy.googleapis.com%2Fdeliverypipeline_notification clouddeploy.googleapis.com/DeliveryPipeline type.googleapis.com/google.cloud.deploy.v1.DeliveryPipelineNotificationEvent N/A ERROR
clouddeploy.googleapis.com%2Fdeploypolicy_evaluation clouddeploy.googleapis.com/DeliveryPipeline type.googleapis.com/google.cloud.deploy.v1.DeployPolicyEvaluationEvent N/A INFO
WARNING
ERROR
clouddeploy.googleapis.com%2Fdeploypolicy_notification clouddeploy.googleapis.com/DeployPolicy type.googleapis.com/google.cloud.deploy.v1.DeployPolicyNotificationEvent N/A ERROR
clouddeploy.googleapis.com%2Fcustomtargettype_notification clouddeploy.googleapis.com/CustomTargetType type.googleapis.com/google.cloud.deploy.v1.CustomTargetTypeNotificationEvent N/A ERROR
clouddeploy.googleapis.com%2Ftarget_notification clouddeploy.googleapis.com/Target type.googleapis.com/google.cloud.deploy.v1.TargetNotificationEvent N/A ERROR
clouddeploy.googleapis.com%2Frelease_notification clouddeploy.googleapis.com/DeliveryPipeline type.googleapis.com/google.cloud.deploy.v1.ReleaseNotificationEvent N/A ERROR
clouddeploy.googleapis.com%2Fjobrun_notification clouddeploy.googleapis.com/DeliveryPipeline type.googleapis.com/google.cloud.deploy.v1.JobRunNotificationEvent N/A ERROR
clouddeploy.googleapis.com%2Fautomation clouddeploy.googleapis.com/DeliveryPipeline type.googleapis.com/google.cloud.deploy.v1.AutomationEvent N/A ERROR
NOTICE
clouddeploy.googleapis.com%2Fautomationrun clouddeploy.googleapis.com/DeliveryPipeline type.googleapis.com/google.cloud.deploy.v1.AutomationRunEvent N/A ERROR
NOTICE

Cloud Functions

Logging API service name: cloudfunctions.googleapis.com

Log ID Monitored resource Payload Labels Severities
cloudfunctions.googleapis.com%2Fcloud-functions cloud_function Cloud Functions writes logs to this stream that indicate the start and end of execution, as well as the stdout and stderr from those executions. execution_id
instance_id
infrastructure
runtime_version		 DEFAULT
DEBUG
INFO
NOTICE
WARNING
ERROR
CRITICAL
ALERT
EMERGENCY

Cloud IDS

Logging API service name: ids.googleapis.com

Log ID Monitored resource Payload Labels Severities
ids.googleapis.com%2Fthreat ids.googleapis.com/Endpoint Threat logs from the Cloud IDS endpoint. N/A DEFAULT
ids.googleapis.com%2Finstance_agent saas_instance Logs for instance agent running on Cloud IDS VM. N/A ERROR
INFO
WARNING
ids.googleapis.com%2Ftraffic ids.googleapis.com/Endpoint Traffic logs from the Cloud IDS endpoint. N/A DEFAULT

Cloud Load Balancing

Logging API service name: loadbalancing.googleapis.com

Log ID Monitored resource Payload Labels Severities
loadbalancing.googleapis.com%2Frequests internal_http_lb_rule type.googleapis.com/google.cloud.loadbalancing.type.LoadBalancerLogEntry N/A INFO
WARNING
ERROR
loadbalancing.googleapis.com%2Fexternal_regional_requests http_external_regional_lb_rule type.googleapis.com/google.cloud.loadbalancing.type.LoadBalancerLogEntry N/A INFO
WARNING
ERROR

Cloud Locations

Logging API service name: cloud.googleapis.com

Log ID Monitored resource Payload Labels Severities
cloud.googleapis.com%2Fipsec_events vpn_gateway VPN Tunnel logs from the VPN Gateway instance tunnel_id DEBUG
NOTICE

Cloud Monitoring API

Logging API service name: monitoring.googleapis.com

Log ID Monitored resource Payload Labels Severities
monitoring.googleapis.com%2Fuptime_checks uptime_url uptime_url uptime check logs. check_id
checker_location
execution_id
uptime_result_type
service_directory_endpoint		 ERROR
INFO
NOTICE
monitoring.googleapis.com%2Fuptime_checks gae_app gae_app uptime check logs. check_id
checker_location
execution_id
uptime_result_type
service_directory_endpoint		 ERROR
INFO
NOTICE
monitoring.googleapis.com%2Fuptime_checks gce_instance gce_instance uptime check logs. check_id
checker_location
execution_id
uptime_result_type
service_directory_endpoint		 ERROR
INFO
NOTICE
monitoring.googleapis.com%2Fuptime_checks aws_ec2_instance aws_ec2_instance uptime check logs. check_id
checker_location
execution_id
uptime_result_type
service_directory_endpoint		 ERROR
INFO
NOTICE
monitoring.googleapis.com%2Fuptime_checks aws_elb_load_balancer aws_elb_load_balancer uptime check logs. check_id
checker_location
execution_id
uptime_result_type
service_directory_endpoint		 ERROR
INFO
NOTICE
monitoring.googleapis.com%2Fuptime_checks k8s_service k8s_service uptime check logs. check_id
checker_location
execution_id
uptime_result_type
service_directory_endpoint		 ERROR
INFO
NOTICE
monitoring.googleapis.com%2Fuptime_checks servicedirectory_service servicedirectory_service uptime check logs. check_id
checker_location
execution_id
uptime_result_type
service_directory_endpoint		 ERROR
INFO
NOTICE
monitoring.googleapis.com%2Fuptime_checks cloud_run_revision cloud_run_revision uptime check logs. check_id
checker_location
execution_id
uptime_result_type
service_directory_endpoint		 ERROR
INFO
NOTICE

Cloud OS Config

Logging API service name: osconfig.googleapis.com

Log ID Monitored resource Payload Labels Severities
osconfig.googleapis.com%2Fpatch_job cloud_osconfig_patch_job type.googleapis.com/google.cloud.osconfig.logging.PatchJobCompletedLog osconfig.googleapis.com/patch_job INFO
ERROR

Cloud Run

Logging API service name: run.googleapis.com

Log ID Monitored resource Payload Labels Severities
run.googleapis.com%2Fstdout cloud_run_revision Cloud Run stdout logs. Each entry contains a line (or multiple lines, if they match a known multi-line exception format like a stack trace) written to stdout from the user container. instanceId
goog-managed-by
goog-cloudfunctions-runtime
managed-by
commit-sha
gcb-trigger-id
gcb-build-id
container_name		 DEFAULT
DEBUG
INFO
NOTICE
WARNING
ERROR
CRITICAL
ALERT
EMERGENCY
run.googleapis.com%2Fstderr cloud_run_revision Cloud Run stderr logs. Each entry contains a line (or multiple lines, if they match a known multi-line exception format like a stack trace) written to stderr from the user container. instanceId
goog-managed-by
goog-cloudfunctions-runtime
managed-by
commit-sha
gcb-trigger-id
gcb-build-id
container_name		 DEFAULT
DEBUG
INFO
NOTICE
WARNING
ERROR
CRITICAL
ALERT
EMERGENCY
run.googleapis.com%2Frequests cloud_run_revision Cloud Run request logs. Each request served by a Cloud Run service should have a corresponding request log entry. instanceId
goog-managed-by
goog-cloudfunctions-runtime
managed-by
commit-sha
gcb-trigger-id
gcb-build-id		 DEFAULT
INFO
WARNING
ERROR
run.googleapis.com%2F/dev/log cloud_run_revision Cloud Run syslogs. These are syslog-structured logs written to /dev/log in the user container. instanceId
goog-managed-by
goog-cloudfunctions-runtime
managed-by
commit-sha
gcb-trigger-id
gcb-build-id
container_name		 DEFAULT
DEBUG
INFO
NOTICE
WARNING
ERROR
CRITICAL
ALERT
EMERGENCY
run.googleapis.com%2F/var/log cloud_run_revision Cloud Run /var/log logs. Each entry contains a line (or multiple lines, if they match a known multi-line exception format like a stack trace) written to /var/log/** from the user container. instanceId
goog-managed-by
goog-cloudfunctions-runtime
managed-by
commit-sha
gcb-trigger-id
gcb-build-id
container_name		 DEFAULT
DEBUG
INFO
NOTICE
WARNING
ERROR
CRITICAL
ALERT
EMERGENCY
run.googleapis.com%2Fstdout cloud_run_job Cloud Run stdout logs. Each entry contains a line (or multiple lines, if they match a known multi-line exception format like a stack trace) written to stdout from the user container. instanceId
run.googleapis.com/execution_name
run.googleapis.com/task_index
run.googleapis.com/task_attempt
managed-by
commit-sha
gcb-trigger-id
gcb-build-id
container_name		 DEFAULT
DEBUG
INFO
NOTICE
WARNING
ERROR
CRITICAL
ALERT
EMERGENCY
run.googleapis.com%2Fstderr cloud_run_job Cloud Run stderr logs. Each entry contains a line (or multiple lines, if they match a known multi-line exception format like a stack trace) written to stderr from the user container. instanceId
run.googleapis.com/execution_name
run.googleapis.com/task_index
run.googleapis.com/task_attempt
managed-by
commit-sha
gcb-trigger-id
gcb-build-id
container_name		 DEFAULT
DEBUG
INFO
NOTICE
WARNING
ERROR
CRITICAL
ALERT
EMERGENCY
run.googleapis.com%2F/dev/log cloud_run_job Cloud Run syslogs. These are syslog-structured logs written to /dev/log in the user container. instanceId
run.googleapis.com/execution_name
run.googleapis.com/task_index
run.googleapis.com/task_attempt
managed-by
commit-sha
gcb-trigger-id
gcb-build-id
container_name		 DEFAULT
DEBUG
INFO
NOTICE
WARNING
ERROR
CRITICAL
ALERT
EMERGENCY
run.googleapis.com%2F/var/log cloud_run_job Cloud Run /var/log logs. Each entry contains a line (or multiple lines, if they match a known multi-line exception format like a stack trace) written to /var/log/** from the user container. instanceId
run.googleapis.com/execution_name
run.googleapis.com/task_index
run.googleapis.com/task_attempt
managed-by
commit-sha
gcb-trigger-id
gcb-build-id
container_name		 DEFAULT
DEBUG
INFO
NOTICE
WARNING
ERROR
CRITICAL
ALERT
EMERGENCY

Cloud SQL

Logging API service name: cloudsql.googleapis.com

Log ID Monitored resource Payload Labels Severities
cloudsql.googleapis.com%2Fmysql.err cloudsql_database The error log contains a record and diagnostic messages such as errors, warnings, and notes that occur during server startup, shutdown, and while the server is running. INSTANCE_UID
IS_EXTERNAL_SERVER_REPLICA
LOG_BUCKET_NUM
SOURCE_ID		 DEFAULT
DEBUG
INFO
NOTICE
WARNING
ERROR
CRITICAL
ALERT
EMERGENCY
cloudsql.googleapis.com%2Fmysql-slow.log cloudsql_database The slow query log consists of SQL statements that take more than long_query_time seconds to execute. INSTANCE_UID
IS_EXTERNAL_SERVER_REPLICA
LOG_BUCKET_NUM
SOURCE_ID		 DEFAULT
DEBUG
INFO
NOTICE
WARNING
ERROR
CRITICAL
ALERT
EMERGENCY
cloudsql.googleapis.com%2Fmysql-general.log cloudsql_database The general query log records when clients connect or disconnect, and it logs each SQL statement received from clients. INSTANCE_UID
IS_EXTERNAL_SERVER_REPLICA
LOG_BUCKET_NUM
SOURCE_ID		 DEFAULT
DEBUG
INFO
NOTICE
WARNING
ERROR
CRITICAL
ALERT
EMERGENCY
cloudsql.googleapis.com%2Freplication-setup.log cloudsql_database They are related to external server replication setup. INSTANCE_UID
IS_EXTERNAL_SERVER_REPLICA
LOG_BUCKET_NUM
SOURCE_ID		 DEFAULT
DEBUG
INFO
NOTICE
WARNING
ERROR
CRITICAL
ALERT
EMERGENCY
cloudsql.googleapis.com%2Freplication-status.log cloudsql_database They are related to external server replication status monitoring. INSTANCE_UID
IS_EXTERNAL_SERVER_REPLICA
LOG_BUCKET_NUM
SOURCE_ID		 DEFAULT
DEBUG
INFO
NOTICE
WARNING
ERROR
CRITICAL
ALERT
EMERGENCY
cloudsql.googleapis.com%2Factive_directory.log cloudsql_database It logs Active Directory related events for SQL Server instances. N/A DEFAULT
DEBUG
INFO
NOTICE
WARNING
ERROR
CRITICAL
ALERT
EMERGENCY
cloudsql.googleapis.com%2Fxevents.log cloudsql_database It logs Extended Events related events for SQL Server instances. N/A DEFAULT
DEBUG
INFO
NOTICE
WARNING
ERROR
CRITICAL
ALERT
EMERGENCY
cloudsql.googleapis.com%2Fmysql-upgrade.log cloudsql_database Used to contain mysql_upgrade logs. Now deprecated. N/A DEFAULT
DEBUG
INFO
NOTICE
WARNING
ERROR
CRITICAL
ALERT
EMERGENCY
cloudsql.googleapis.com%2Fpostgres.log cloudsql_database It contains the database server's log output from the Cloud SQL instance. INSTANCE_UID
IS_EXTERNAL_SERVER_REPLICA
LOG_BUCKET_NUM
SOURCE_ID		 DEFAULT
DEBUG
INFO
NOTICE
WARNING
ERROR
CRITICAL
ALERT
EMERGENCY
cloudsql.googleapis.com%2Fpostgres-audit.log cloudsql_database It contains the audit log entries from the pgAudit extension in the Cloud SQL instance. N/A DEFAULT
DEBUG
INFO
NOTICE
WARNING
ERROR
CRITICAL
ALERT
EMERGENCY
cloudsql.googleapis.com%2Fsqlserver.err cloudsql_database These logs are from the SQL Server errorlog on the Cloud SQL instance. CONTAINER_ID
CONTAINER_ID_FULL
CONTAINER_NAME
CONTAINER_TAG
CONTAINER_PARTIAL_ID
CONTAINER_PARTIAL_LAST
CONTAINER_PARTIAL_MESSAGE
CONTAINER_PARTIAL_ORDINAL
IMAGE_NAME
INSTANCE_ID
INSTANCE_UID
LOG_BUCKET_NUM
SYSLOG_IDENTIFIER
_BOOT_ID
_CAP_EFFECTIVE
_CMDLINE
_COMM
_EXE
_GID
_HOSTNAME
_MACHINE_ID
_PID
_SOURCE_REALTIME_TIMESTAMP
_SYSTEMD_CGROUP
_SYSTEMD_INVOCATION_ID
_SYSTEMD_SLICE
_SYSTEMD_UNIT
_TRANSPORT
UID
_MONOTONICTIMESTAMP
_REALTIME_TIMESTAMP
SOURCE_ID		 DEFAULT
DEBUG
INFO
NOTICE
WARNING
ERROR
CRITICAL
ALERT
EMERGENCY
cloudsql.googleapis.com%2Fsqlagent.out cloudsql_database These logs are from sqlagent.out on the Cloud SQL instance. INSTANCE_UID
IS_EXTERNAL_SERVER_REPLICA
LOG_BUCKET_NUM
SOURCE_ID		 DEFAULT
DEBUG
INFO
NOTICE
WARNING
ERROR
CRITICAL
ALERT
EMERGENCY
cloudsql.googleapis.com%2Foperationdetails.log cloudsql_database These logs show details of long running operations such as Import SQL for SQL Server instances. INSTANCE_UID
LOG_BUCKET_NUM
SOURCE_ID		 DEFAULT
DEBUG
INFO
NOTICE
WARNING
ERROR
CRITICAL
ALERT
EMERGENCY
cloudsql.googleapis.com%2Fpostgres-upgrade.log cloudsql_database It contains log output by pg_upgrade during database major version upgrade. FILE_NAME
INSTANCE_UID
LOG_BUCKET_NUM
SOURCE_ID		 DEFAULT
DEBUG
INFO
NOTICE
WARNING
ERROR
CRITICAL
ALERT
EMERGENCY
cloudsql.googleapis.com%2Fevent.log cloudsql_database It logs structured database environment events such as out of memory. N/A DEFAULT
DEBUG
INFO
NOTICE
WARNING
ERROR
CRITICAL
ALERT
EMERGENCY

Cloud Setup

Logging API service name: cloudsetup.googleapis.com

Log ID Monitored resource Payload Labels Severities
cloudsetup.googleapis.com%2Fcomplete_deployment api type.googleapis.com/google.cloud.cloudsetup.logging.v1.CompleteDeploymentEvent activity_type_name DEFAULT

Cloud VPN

Logging API service name: vpn.googleapis.com

Log ID Monitored resource Payload Labels Severities
vpn.googleapis.com%2Fipsec_events vpn_gateway VPN Tunnel logs from the VPN Gateway instance tunnel_id DEBUG
NOTICE

Cloud Workstations

Logging API service name: workstations.googleapis.com

Log ID Monitored resource Payload Labels Severities
workstations.googleapis.com%2Fdisk_assignments workstations.googleapis.com/Workstation Disk assignment logs disk NOTICE
workstations.googleapis.com%2Fvm_assignments workstations.googleapis.com/Workstation VM assignment logs external_ip
instance_id
internal_ip
instance_name		 NOTICE
workstations.googleapis.com%2Fworkstation_shutdowns workstations.googleapis.com/Workstation Workstation shutdown logs external_ip
instance_id
internal_ip
instance_name
shutdown_reason		 NOTICE

Compute Engine

Logging API service name: compute.googleapis.com

Log ID Monitored resource Payload Labels Severities
compute.googleapis.com%2Fgce_disaster_recovery gce_instance type.googleapis.com/google.compute.logging.dr.v1.DisasterRecoveryEvent N/A N/A
compute.googleapis.com%2Fgce_disaster_recovery gce_disk type.googleapis.com/google.compute.logging.dr.v1.DisasterRecoveryEvent N/A N/A
compute.googleapis.com%2Fgce_disaster_recovery gce_snapshot type.googleapis.com/google.compute.logging.dr.v1.DisasterRecoveryEvent N/A N/A
compute.googleapis.com%2Fgce_disaster_recovery gce_instance_template type.googleapis.com/google.compute.logging.dr.v1.DisasterRecoveryEvent N/A N/A
compute.googleapis.com%2Fgce_disaster_recovery gce_instance_group_manager type.googleapis.com/google.compute.logging.dr.v1.DisasterRecoveryEvent N/A N/A
compute.googleapis.com%2Fgce_disaster_recovery gce_resevered_address type.googleapis.com/google.compute.logging.dr.v1.DisasterRecoveryEvent N/A N/A
compute.googleapis.com%2Fgdnsusage gce_instance type.googleapis.com/google.compute.logging.gdnsusage.v1.GdnsVmUsagePlatformLog resource_name DEBUG

Container Security API

Logging API service name: containersecurity.googleapis.com

Log ID Monitored resource Payload Labels Severities
containersecurity.googleapis.com%2Ffinding k8s_cluster type.googleapis.com/cloud.kubernetes.security.containersecurity_logging.Finding N/A INFO

Dataform

Logging API service name: dataform.googleapis.com

Log ID Monitored resource Payload Labels Severities
dataform.googleapis.com%2Fworkflow_invocation_completion dataform.googleapis.com/Repository type.googleapis.com/google.cloud.dataform.logging.v1.WorkflowInvocationCompletionLogEntry N/A INFO
WARNING
ERROR

Datapipelines API

Logging API service name: datapipelines.googleapis.com

Log ID Monitored resource Payload Labels Severities
datapipelines.googleapis.com%2Frequests datapipelines.googleapis.com/Location type.googleapis.com/google.cloud.datapipelines.logging.v1.RequestLogEntry N/A DEFAULT
datapipelines.googleapis.com%2Frequests datapipelines.googleapis.com/Pipeline type.googleapis.com/google.cloud.datapipelines.logging.v1.RequestLogEntry N/A DEFAULT

Dataproc

Logging API service name: dataproc.googleapis.com

Log ID Monitored resource Payload Labels Severities
dataproc.googleapis.com%2Fautoscaler cloud_dataproc_cluster type.googleapis.com/google.cloud.dataproc.logging.AutoscalerLog N/A INFO
WARNING
ERROR
CRITICAL
dataproc.googleapis.com%2Fautoscaler cloud_dataproc_batch type.googleapis.com/google.cloud.dataproc.logging.AutoscalerLog N/A INFO
WARNING
ERROR
CRITICAL
dataproc.googleapis.com%2Fautoscaler cloud_dataproc_session type.googleapis.com/google.cloud.dataproc.logging.AutoscalerLog N/A INFO
WARNING
ERROR
CRITICAL
dataproc.googleapis.com%2Freconciler cloud_dataproc_session type.googleapis.com/google.cloud.dataproc.logging.ReconciliationLog N/A INFO
dataproc.googleapis.com%2Freconciler cloud_dataproc_cluster type.googleapis.com/google.cloud.dataproc.logging.ReconciliationClusterHealLog N/A INFO
dataproc.googleapis.com%2Fcluster_reconciler cloud_dataproc_cluster type.googleapis.com/google.cloud.dataproc.logging.ReconciliationClusterHealLog N/A INFO

Dataproc Metastore

Logging API service name: metastore.googleapis.com

Log ID Monitored resource Payload Labels Severities
metastore.googleapis.com%2Fbackground metastore.googleapis.com/Service Dataproc Metastore background logs. logger DEFAULT
ERROR
INFO
WARNING
metastore.googleapis.com%2Fsystem metastore.googleapis.com/Service Service system logs. method
service_region		 DEFAULT
ERROR
INFO
WARNING
metastore.googleapis.com%2Frequests metastore.googleapis.com/Service Service request logs. method
service_region		 DEFAULT
INFO
metastore.googleapis.com%2Fscheduled_backup metastore.googleapis.com/Service type.googleapis.com/google.cloud.metastore.logging.v1.ScheduledBackupLogEntry N/A DEFAULT
INFO
WARNING
ERROR

Event Threat Detection

Logging API service name: threatdetection.googleapis.com

Log ID Monitored resource Payload Labels Severities
threatdetection.googleapis.com%2Fdetection threat_detector Event Threat Detection finding. N/A NOTICE
WARNING
ALERT
CRITICAL
ERROR

Eventarc

Logging API service name: eventarc.googleapis.com

Log ID Monitored resource Payload Labels Severities
eventarc.googleapis.com%2Fenrollment_activity eventarc.googleapis.com/Enrollment type.googleapis.com/google.cloud.eventarc.logging.v1.EnrollmentActivity N/A INFO
ERROR
eventarc.googleapis.com%2Fmessage_bus_activity eventarc.googleapis.com/MessageBus type.googleapis.com/google.cloud.eventarc.logging.v1.MessageBusActivity N/A INFO
ERROR
eventarc.googleapis.com%2Fpipeline_activity eventarc.googleapis.com/Pipeline type.googleapis.com/google.cloud.eventarc.logging.v1.PipelineActivity N/A INFO
ERROR
eventarc.googleapis.com%2Fgoogle_api_source_activity eventarc.googleapis.com/GoogleApiSource type.googleapis.com/google.cloud.eventarc.logging.v1.GoogleApiSourceActivity N/A INFO
ERROR

Firestore

Logging API service name: firestore.googleapis.com

Log ID Monitored resource Payload Labels Severities
firestore.googleapis.com%2Fundeliverable_first_gen_event firestore.googleapis.com/Database type.googleapis.com/google.firestore.v1beta1.UndeliverableFirstGenEvent firestore.googleapis.com/environment ERROR

Firestore/Datastore

Logging API service name: datastore.googleapis.com

Log ID Monitored resource Payload Labels Severities
datastore.googleapis.com%2Fmigration_state datastore_database type.googleapis.com/google.datastore.admin.v1.MigrationStateEvent N/A NOTICE
datastore.googleapis.com%2Fmigration_progress datastore_database type.googleapis.com/google.datastore.admin.v1.MigrationProgressEvent N/A INFO

GKE On-prem (Anthos)

Logging API service name: anthos.googleapis.com

Log ID Monitored resource Payload Labels Severities
anthos.googleapis.com%2Fseesaw_engine anthos_l4lb These logs are from seesaw_engine on the Seesaw VM instances running in GKE OnPrem. N/A N/A
anthos.googleapis.com%2Fseesaw_ha anthos_l4lb These logs are from seesaw_ha on the Seesaw VM instances running in GKE OnPrem. N/A N/A
anthos.googleapis.com%2Fseesaw_healthcheck anthos_l4lb These logs are from seesaw_healthcheck on the Seesaw VM instances running in GKE OnPrem. N/A N/A
anthos.googleapis.com%2Fseesaw_ncc anthos_l4lb These logs are from seesaw_ncc on the Seesaw VM instances running in GKE OnPrem. N/A N/A
anthos.googleapis.com%2Fseesaw_ecu anthos_l4lb These logs are from seesaw_ecu on the Seesaw VM instances running in GKE OnPrem. N/A N/A
anthos.googleapis.com%2Fseesaw_config anthos_l4lb These logs are from seesaw_config on the Seesaw VM instances running in GKE OnPrem. N/A N/A

Google Analytics Data API

Logging API service name: analyticsdata.googleapis.com

Log ID Monitored resource Payload Labels Severities
analyticsdata.googleapis.com%2Ffresh_bigquery_export_status analyticsdata.googleapis.com/FreshBigQueryExport type.googleapis.com/google.analytics.cloud.ExportStatusLog N/A DEFAULT
INFO
WARNING

Google Binary Authorization API

Logging API service name: binaryauthorization.googleapis.com

Log ID Monitored resource Payload Labels Severities
binaryauthorization.googleapis.com%2Fcontinuous_validation k8s_cluster v1beta1: type.googleapis.com/google.cloud.binaryauthorization.v1beta1.ContinuousValidationEvent N/A WARNING

Google Maps Platform - Mobility Billing

Logging API service name: mobilitybilling.googleapis.com

Log ID Monitored resource Payload Labels Severities
mobilitybilling.googleapis.com%2Fexternal_cloud_logs mobilitybilling.googleapis.com/Project type.googleapis.com/google.maps.mobilitybilling.logs.v1.ReportBillableEventLog environment DEFAULT
ERROR

Google Workspace Add-ons

Logging API service name: gsuiteaddons.googleapis.com

Log ID Monitored resource Payload Labels Severities
gsuiteaddons.googleapis.com%2Ferrors g_suite_add_ons type.googleapis.com/google.cloud.gsuiteaddons.logging.v1.GSuiteAddOnsLogEntry N/A ERROR

Identity Toolkit

Logging API service name: identitytoolkit.googleapis.com

Log ID Monitored resource Payload Labels Severities
identitytoolkit.googleapis.com%2Frequests identitytoolkit_project type.googleapis.com/google.cloud.identitytoolkit.logging.RequestLog N/A INFO
ERROR
identitytoolkit.googleapis.com%2Frequests identitytoolkit_tenant type.googleapis.com/google.cloud.identitytoolkit.logging.RequestLog N/A INFO
ERROR

Immersive Stream for XR

Logging API service name: stream.googleapis.com

Log ID Monitored resource Payload Labels Severities
stream.googleapis.com%2Fsession_event stream.googleapis.com/StreamInstance type.googleapis.com/google.cloud.stream.logging.v1.SessionEventLog N/A INFO
ERROR

Issuer Switch Service

Logging API service name: issuerswitch.googleapis.com

Log ID Monitored resource Payload Labels Severities
issuerswitch.googleapis.com%2Fpgis_activity issuerswitch.googleapis.com/UPIInstance type.googleapis.com/google.cloud.paymentgateway.issuerswitch.v1.UpiTransaction N/A DEBUG
ERROR
INFO

Key Management Service

Logging API service name: cloudkms.googleapis.com

Log ID Monitored resource Payload Labels Severities
cloudkms.googleapis.com%2Fcryptokey_events cloudkms_cryptokey type.googleapis.com/google.cloud.kms.logging.v1.CryptoKeyEvent N/A INFO
ERROR
cloudkms.googleapis.com%2Fcryptokeyversion_events cloudkms_cryptokeyversion type.googleapis.com/google.cloud.kms.logging.v1.CryptoKeyVersionEvent N/A INFO
ERROR

Live Stream API

Logging API service name: livestream.googleapis.com

Log ID Monitored resource Payload Labels Severities
livestream.googleapis.com%2Fchannel_activities livestream.googleapis.com/Channel type.googleapis.com/google.cloud.video.livestream.logging.v1.ChannelActivity N/A INFO
DEBUG
ERROR

Local Rides and Deliveries API

Logging API service name: fleetengine.googleapis.com

Log ID Monitored resource Payload Labels Severities
fleetengine.googleapis.com%2Fupdate_vehicle_attributes fleetengine.googleapis.com/Fleet type.googleapis.com/maps.fleetengine.v1.UpdateVehicleAttributesLog environment
vehicle_id		 DEFAULT
ERROR

Logging API

Logging API service name: logging.googleapis.com

Log ID Monitored resource Payload Labels Severities
logging.googleapis.com%2Fsink_error logging_sink A report of an error encountered while trying to export data to a configured log sink. activity_type_name
destination
error_code
error_detail
log_entity_id
log_filter
sink_id		 ERROR
logging.googleapis.com%2Fmetric_throttled metric Informs customer that a metric associated with Logs-based metrics is being throttled. activity_type_name
dropped_labels
label_cardinalities
limit_type
metric_name
user_cardinality		 WARNING

Memorystore

Logging API service name: memorystore.googleapis.com

Log ID Monitored resource Payload Labels Severities
memorystore.googleapis.com%2Flog_stream memorystore.googleapis.com/Instance type.googleapis.com/google.logging.v2.LogEntry CONSUMER_PROJECT
INSTANCE_ID		 INFO
WARNING
ERROR

Network Analyzer

Logging API service name: networkanalyzer.googleapis.com

Log ID Monitored resource Payload Labels Severities
networkanalyzer.googleapis.com%2Fanalyzer_reports networking.googleapis.com/Location type.googleapis.com/google.cloud.networkanalyzer.logging.v1.Report N/A DEFAULT

Partner Data Ingestion

Logging API service name: partnerdataingestion.googleapis.com

Log ID Monitored resource Payload Labels Severities
partnerdataingestion.googleapis.com%2Fingest_details consumed_api type.googleapis.com/google.search.partnerdataingestion.logging.v1.IngestDetailsLog N/A INFO

Pub/Sub

Logging API service name: pubsub.googleapis.com

Log ID Monitored resource Payload Labels Severities
pubsub.googleapis.com%2Fingestion_failures pubsub_topic type.googleapis.com/google.pubsub.v1.IngestionFailureEvent N/A WARNING

Recommender API

Logging API service name: recommender.googleapis.com

Log ID Monitored resource Payload Labels Severities
recommender.googleapis.com%2Factions recommender v1: type.googleapis.com/google.cloud.recommender.logging.v1.ActionLog
v1beta1: type.googleapis.com/google.cloud.recommender.logging.v1beta1.ActionLog		 N/A INFO
recommender.googleapis.com%2Factions recommender_insight_type v1: type.googleapis.com/google.cloud.recommender.logging.v1.InsightActionLog
v1beta1: type.googleapis.com/google.cloud.recommender.logging.v1beta1.InsightActionLog		 N/A INFO

SaaS Lifecycle Management

Logging API service name: saasmanagement.googleapis.com

Log ID Monitored resource Payload Labels Severities
saasmanagement.googleapis.com%2Fterraform_internal saasmanagement.googleapis.com/Instance type.googleapis.com/google.cloud.saasaccelerator.management.logs.v1.InstanceEvent resource_project_number DEBUG
ERROR
INFO

Secret Manager API

Logging API service name: secretmanager.googleapis.com

Log ID Monitored resource Payload Labels Severities
secretmanager.googleapis.com%2Fsecret_event secretmanager.googleapis.com/Secret type.googleapis.com/google.cloud.secretmanager.logging.v1.SecretEvent N/A DEFAULT
DEBUG
INFO
NOTICE
WARNING
ERROR
CRITICAL
ALERT
EMERGENCY

Sensitive Actions Service

Logging API service name: sensitiveaction.googleapis.com

Log ID Monitored resource Payload Labels Severities
sensitiveaction.googleapis.com%2Faction sensitiveaction.googleapis.com/Location type.googleapis.com/google.cloud.sensitiveaction.logging.v1.SensitiveAction N/A NOTICE

Serial Console

Logging API service name: serialconsole.googleapis.com

Log ID Monitored resource Payload Labels Severities
serialconsole.googleapis.com%2Fserial_port_1_output gce_instance A virtual machine instance has four virtual serial ports. The instance's operating system, BIOS, and other system-level entities often write output to the serial ports, which makes them useful for troubleshooting crashes, failed boots, startup issues, or shutdown issues. compute.googleapis.com/resource_name
is_text_escaped		 INFO
DEBUG
serialconsole.googleapis.com%2Fserial_port_2_output gce_instance A virtual machine instance has four virtual serial ports. The instance's operating system, BIOS, and other system-level entities often write output to the serial ports, which makes them useful for troubleshooting crashes, failed boots, startup issues, or shutdown issues. compute.googleapis.com/resource_name
is_text_escaped		 INFO
DEBUG
serialconsole.googleapis.com%2Fserial_port_3_output gce_instance A virtual machine instance has four virtual serial ports. The instance's operating system, BIOS, and other system-level entities often write output to the serial ports, which makes them useful for troubleshooting crashes, failed boots, startup issues, or shutdown issues. compute.googleapis.com/resource_name
is_text_escaped		 INFO
DEBUG
serialconsole.googleapis.com%2Fserial_port_4_output gce_instance A virtual machine instance has four virtual serial ports. The instance's operating system, BIOS, and other system-level entities often write output to the serial ports, which makes them useful for troubleshooting crashes, failed boots, startup issues, or shutdown issues. compute.googleapis.com/resource_name
is_text_escaped		 INFO
DEBUG
serialconsole.googleapis.com%2Fserial_port_debug_output gce_instance A virtual machine instance has four virtual serial ports. The instance's operating system, BIOS, and other system-level entities often write output to the serial ports, which makes them useful for troubleshooting crashes, failed boots, startup issues, or shutdown issues. compute.googleapis.com/resource_name
is_text_escaped		 INFO
DEBUG

Storage Transfer

Logging API service name: storagetransfer.googleapis.com

Log ID Monitored resource Payload Labels Severities
storagetransfer.googleapis.com%2Ftransfer_activity storage_transfer_job type.googleapis.com/google.storagetransfer.logging.TransferActivityLog N/A INFO
WARNING
ERROR

Traffic Director

Logging API service name: trafficdirector.googleapis.com

Log ID Monitored resource Payload Labels Severities
trafficdirector.googleapis.com%2Fevents gce_network type.googleapis.com/google.networking.trafficdirector.type.TrafficDirectorLogEntry N/A ERROR
INFO
WARNING
trafficdirector.googleapis.com%2Fevents gateway_scope type.googleapis.com/google.networking.trafficdirector.type.TrafficDirectorLogEntry N/A ERROR
INFO
trafficdirector.googleapis.com%2Fevents mesh type.googleapis.com/google.networking.trafficdirector.type.TrafficDirectorLogEntry N/A ERROR
INFO

Vertex AI API

Logging API service name: aiplatform.googleapis.com

Log ID Monitored resource Payload Labels Severities
aiplatform.googleapis.com%2Fpipeline_job_events aiplatform.googleapis.com/PipelineJob type.googleapis.com/google.cloud.aiplatform.logging.PipelineJobLogEntry network
pipeline_name
pipeline_type
service_account
template_metadata_version
template_uri
vertex-ai-pipelines-run-billing-id
vertex_pipeline_system_label_propagate_labels		 ERROR
INFO
aiplatform.googleapis.com%2Fpipeline_job_task_events aiplatform.googleapis.com/PipelineJob type.googleapis.com/google.cloud.aiplatform.logging.PipelineJobTaskLogEntry custom_job_id
network
pipeline_name
schedule_name
service_account
template_metadata_version
template_uri
vertex-ai-pipelines-run-billing-id
vertex_pipeline_system_label_propagate_labels		 ERROR
INFO

Web Security Scanner API

Logging API service name: websecurityscanner.googleapis.com

Log ID Monitored resource Payload Labels Severities
websecurityscanner.googleapis.com%2Fscan_activity security_scanner_scan_config type.googleapis.com/google.cloud.websecurityscanner.v1.ScanRunLog N/A ERROR
WARNING
INFO

Workflows

Logging API service name: workflows.googleapis.com

Log ID Monitored resource Payload Labels Severities
workflows.googleapis.com%2Fengine_call workflows.googleapis.com/Workflow type.googleapis.com/google.cloud.workflows.type.EngineCallLog workflows.googleapis.com/execution_id
workflows.googleapis.com/revision_id		 DEBUG
workflows.googleapis.com%2Fexecutions_system workflows.googleapis.com/Workflow type.googleapis.com/google.cloud.workflows.type.ExecutionsSystemLog workflows.googleapis.com/execution_id
workflows.googleapis.com/revision_id		 INFO
ERROR

reCAPTCHA Enterprise

Logging API service name: recaptchaenterprise.googleapis.com

Log ID Monitored resource Payload Labels Severities
recaptchaenterprise.googleapis.com%2Fassessment recaptchaenterprise.googleapis.com/Key type.googleapis.com/google.cloud.recaptchaenterprise.v1.Assessment N/A DEFAULT
ERROR
recaptchaenterprise.googleapis.com%2Fannotation recaptchaenterprise.googleapis.com/Key type.googleapis.com/google.cloud.recaptchaenterprise.v1.AnnotateAssessmentRequest N/A DEFAULT
ERROR

Understand and manage platform logs

The following sections provide basic information about using and managing platform logs in Cloud Logging.

Log entry structure

Cloud Logging represents logs using a single data type, LogEntry, which defines certain common data for all log entries as well as the payloads that Google Cloud services can include. For detailed information about the contents of log entries, see the Logging API reference for the LogEntry type.

The index of platform logs highlights the following characteristics of log entries:

  • Log ID: The URL-encoded identifier within logName. For example, if the broader log name is organizations/1234567890/logs/cloudresourcemanager.googleapis.com%2Factivity, then the log ID is cloudresourcemanager.googleapis.com%2Factivity.

    Note that if the log ID string in a log entry's logName field is prefixed by serviceName.googleapis.com, it is a Google Cloud platform log entry.

  • Monitored resource: The resource from which the log entry originated. This consists of a resource type from the Monitored resource list and additional label values that identify a specific instance.

  • Payload: The log entry payload, which can be represented as textPayload or jsonPayload.

View logs

There are several ways to view your platform log entries:

Route logs

You can control how your log entries are routed and stored. The Log Router checks each log entry against existing rules to determine which log entries to discard, which log entries to store in Cloud Logging, and which log entries to include in exports to other destinations.

For details, see Routing and storage overview: Log Router.

Logs retention

Log entries are stored in Logging buckets for a specified length of time and are then deleted. For more information, see Logs retention periods.

Pricing

Cloud Logging doesn't charge to route logs to a supported destination; however, the destination might apply charges. With the exception of the _Required log bucket, Cloud Logging charges to stream logs into log buckets and for storage longer than the default retention period of the log bucket.

Cloud Logging doesn't charge for copying logs, for defining log scopes, or for queries issued through the Logs Explorer or Log Analytics pages.

For more information, see the following documents: