The tables below list the Google services that write Admin Activity or Data Access audit logs. GA indicates that a log type is Generally Available for a service; Beta indicates that a log type is available, but might be changed in backward-incompatible ways and isn't subject to any SLA or deprecation policy.
Google Cloud services producing audit logs
G Suite services producing audit logs
| G Suite services with audit logs | Admin Activity logs |
Data Access logs |
|---|---|---|
| Enterprise Groups | GA | n/a1 |
The G Suite audit log name is
organizations/[ORGANIZATION_ID]/logs/cloudaudit.googleapis.com%2Factivity.
G Suite audit logs use the resource type audited_resource.
For additional context, review the G Suite Admin Help article.
1: Data Access audit logs are not written for this service.
2: Audits OAuth 2.0 client IDs and brands.
3: System Event audit logs are also available for this service.
4: BigQuery Data Access audit logs are enabled by default
and don't count against your logs allotment.
5: Does not include request/response information.
6: Audits requests to start managed import or export operations.
Audit does not include entity-specific read/write logs for those operations.
7: Admin Activity audit logs are not written for this service.
8: If an object ACL is set to public, Admin Activity audit
logs are not written for any updates to that object ACL.