Google services with audit logs

The tables below list the Google services that write Admin Activity or Data Access audit logs. GA indicates that a log type is Generally Available for a service; Beta indicates that a log type is available, but might be changed in backward-incompatible ways and is not subject to any SLA or deprecation policy.

GCP services producing audit logs

GCP services with audit logs Admin
Activity
logs
Data
Access
logs
Access Approval API Beta n/a1
App Engine GA n/a1
Application Identity4 Beta n/a1
BigQuery GA GA2
Cloud AutoML Beta Beta
Cloud Bigtable Beta n/a1
Cloud Billing Beta n/a1
Cloud Composer GA n/a1
Cloud Dataflow GA n/a1
Cloud Dataproc GA GA
Cloud Datastore GA GA6
Cloud Deployment Manager GA GA
Cloud Data Loss Prevention GA GA
Cloud DNS GA GA
Cloud Functions GA GA
Cloud Genomics Beta Beta
Cloud Healthcare Beta Beta
Cloud Identity and Access Management GA GA
Cloud Identity-Aware Proxy n/a3 GA
Cloud IoT Core GA GA
Cloud Key Management Service GA GA
Cloud Memorystore Beta Beta
AI Platform Beta Beta
Cloud Pub/Sub GA GA
Cloud Run Beta Beta
Cloud Source Repositories GA GA
Cloud Spanner GA GA
Cloud SQL GA GA
Cloud Storage5 GA GA
Cloud Vision GA n/a1
Compute Engine7 GA GA
Compute Engine Serial Port Access GA n/a1
Container Analysis Beta Beta
Cloud Build GA GA
Dialogflow GA GA
Firebase Management Beta Beta
Google Kubernetes Engine GA GA
Serverless VPC Access Beta Beta
Service Management GA n/a1
Resource Manager GA GA
Stackdriver Debugger GA GA
Stackdriver Error Reporting GA GA
Stackdriver Logging GA GA
Stackdriver Monitoring GA GA
Stackdriver Trace n/a3 GA
Stackdriver Profiler n/a3 GA

G Suite services producing audit logs

G Suite services with audit logs Admin
Activity
logs
Data
Access
logs
Enterprise Groups GA n/a1

The G Suite audit log name is organizations/[ORGANIZATION_ID]/logs/cloudaudit.googleapis.com%2Factivity. G Suite audit logs use the resource type audited_resource.

For additional context, review the G Suite Admin Help article.

1: This service does not produce Data Access audit logs.
2: BigQuery Data Access audit logs are enabled by default and do not count against your logs allotment.
3: This service does not produce Admin Activity audit logs.
4: Audits OAuth 2.0 client IDs and brands.
5: Does not yet include request/response information.
6: Audits requests to start managed import or export operations. Audit does not include entity-specific read/write logs for those operations.
7: Compute Engine also generates System Event audit logs.

Kunde den här sidan hjälpa dig? Berätta:

Skicka feedback om ...

Stackdriver Logging
Behöver du hjälp? Besök vår supportsida.