Creating and managing workspaces

This page explains how to create and manage Workspaces. Your Google Cloud projects and Amazon Web Service (AWS) accounts must be members of a Workspace before they can be monitored.

Creating a single-project Workspace

To determine if you have sufficient privileges to create a Workspace for an existing Google Cloud project or an AWS account, see Required permissions.

To create a Workspace for an existing Google Cloud project, do the following:

  1. Go to the Cloud Console:

    Go to Cloud Console

  2. In the menu bar, select your Google Cloud project from the project menu .

  3. In the navigation menu, click Monitoring. After you click Monitoring, one of the following occurs:

    • If your Google Cloud project is already associated with a Workspace, then the Cloud Monitoring home page is displayed.
    • If you've never created a Workspace or if all of your Workspaces are single-project, then Cloud Monitoring automatically creates a Workspace and associates it with your Google Cloud project.
    • If you have at least one multi-project Workspace, then the Add your project to a Workspace dialog is displayed. To create a Workspace, select your Google Cloud project under New Workspace and then click Add.

      In the following image, the Google Cloud project name is Quickstart:

      Add to existing or choose to create new workspace dialog.

When a Workspace is created, the Google Cloud project becomes the Workspace host project. The Workspace and Google Cloud project also have the same name. After Workspace creation, which takes a few moments to complete, the Monitoring Overview pane is displayed:

Display of the Monitoring overview page.

Selecting a Workspace

After you create a Workspace, the navigation panel lists your current Workspace and includes a menu that you can use to select a different Workspace.

In the following screenshot, the Workspace "A Sample Project" is selected:

Monitoring navigation menu with A Sample Project selected.

Creating a multi-project Workspace

A single Workspace can monitor any number of Google Cloud projects or AWS accounts. If you want to create a multi-project Workspace, the best practice recommendation is to use the following procedure:

  1. Create a Google Cloud project:

    1. In the menu bar of the Cloud Console, click Menu and then click New Project.
    2. Enter a descriptive project name, and then click Create.
  2. Create a Workspace for that project by following the steps in Creating a single-project Workspace. The Google Cloud project you created in the first step is the hosting project for your Workspace.

  3. Add Google Cloud projects or AWS accounts to the Workspace by following the steps in Adding monitored projects.

Adding a monitored project

This procedure covers adding a Google Cloud project or an AWS account that isn't associated with a Workspace to an existing Workspace:

To add a Google Cloud project or an AWS account that isn't associated with a Workspace to an existing Workspace, do the following:

  1. In the Google Cloud Console, select the Google Cloud project that is the host project for your Workspace:

    Go to Cloud Console

  2. In the navigation pane, select Monitoring and then select Settings.

  3. To add a Google Cloud project to the Workspace, click Add GCP projects.

    1. Select the checkboxes for the names of the Google Cloud projects that you want to add to this Workspace. You don't have to select any projects.

    2. Click Add projects.

  4. To add an AWS account to the Workspace, click Add AWS account:

    1. Follow the instructions for connecting your AWS account.

      Add AWS account dialog that asks for Role ARN and account description.

    2. Click Add AWS account. Monitoring connects to your AWS account.

      During the connection, Cloud Monitoring creates an AWS connector projector project.

      Repeat these steps to add another AWS account.

Adding users to a Workspace

You can share your Workspace with other users by adding them as members to the Workspaces hosting project. You must have Project > Owner permission for the host project to add more users.

To add users to your Workspace, do the following:

  1. In the Google Cloud Console, go to the IAM & admin page:

    Go to the IAM page

  2. From the list of projects, select your Workspace's host project.

  3. At the top of the page, click Add.

  4. In the New members box, enter a user, group, service account, or domain.

  5. Assign a Project role to the new member: Owner, Editor, Viewer, or Browser. Click Save.

Removing a project or account from a Workspace

To remove a project from a Workspace, you must be an owner of the project. Removing a project, moving a project, and merging Workspaces all might result in loss of some configuration information. For example, if you move a project, group definitions aren't moved. Before taking any of theses actions, make sure you take the right action for your situation:

  • If you want to stop accruing charges, see Billing.

  • If you want to remove a host project from its Workspace or move a host project to a different Workspace, you must perform a merge. After the merge operation, your Google Cloud project is no longer a host project and therefore it can be removed from its Workspace or moved to a different Workspace.

  • If you want to change the Workspace associated with a Google Cloud project, move the project. For more information, see Moving a project.

  • If you want to move an AWS account from one Workspace to another Workspace, you must remove the AWS connector project and delete that project. You cannot use the AWS connector project with another Workspace. You can then add your AWS account to another Workspace, letting Monitoring create a new connector project. For more information, see Adding a monitored project.

    If you use Cloud Logging, the logs are stored with the AWS connector account. The impact is that deletion of the AWS connector project also deletes the logs.

To remove a Google Cloud project or an AWS account from a Workspace, do the following:

  1. In the Cloud Console, select Monitoring:

    Go to Monitoring

  2. Select Settings.

  3. Ensure that the proper Workspace is selected.

  4. Click More for the Google Cloud project or an AWS account that you want to remove, click Remove from workspace.

  5. If you removed an AWS account from a Workspace, you removed the AWS connector project, which represents the AWS account. You cannot use the AWS connector project with another Workspace. Delete the connector project.

Moving a project to a different Workspace

When you move a Google Cloud project to a different Workspace, you move the project and its metrics:

  • Alerting policies and uptime checks aren't moved.
  • Group definitions aren't moved but group membership might decrease in the Workspace losing the project and increase in the Workspace gaining the project.
  • Dashboards and charts aren't moved. However, the content of the dashboards and charts might change in both Workspaces due to the movement of metrics.

Moving a (non-hosting) Google Cloud project

To move a non-host Google Cloud project to another Workspace, do the following:

  1. In the Google Cloud Console, select the Google Cloud project that you want to move to a different Workspace:

    Go to Cloud Console

  2. In the navigation pane, select Monitoring and then select Settings.

  3. Click More for the Google Cloud project that you want to move, click Move to another workspace.

  4. Select the new Workspace and click Move.

Moving a hosting project

To move the host project from a Workspace to another Workspace, follow the instructions in Merging Workspaces.

Moving an AWS account

To move an AWS account from one Workspace to another Workspace, do the following:

  1. Remove the AWS connector project from its Workspace by following the steps in Removing a project.
  2. Delete the AWS connector project.
  3. Add your AWS account to the desired Workspace by following the steps in Adding a monitored project.

Merging Workspaces

Merging Workspace A into Workspace B moves all the Google Cloud projects except AWS connector projects from Workspace A to Workspace B. Specifically, here is the effect of merging A into B:

  • All Google Cloud projects that were added to Workspace A are moved into Workspace B. Metrics for the projects are also moved into Workspace B. However, dashboards, resource groups, uptime checks, notification channels, and alerting policies aren't moved into Workspace B.

  • In Workspace B, existing dashboards and charts might have more data, and groups might have more members. These changes are due to the inclusion of additional metrics and are dependent on your configuration choices. In addition, uptime checks and alerting policies might be impacted.

  • The host project for Workspace A is added to Workspace B.

    Merging is the only way to separate a host project from its Workspace.

  • After the merge completes, Workspace A isn't accessible.

To merge Workspace A into Workspace B, do the following:

  1. In the Google Cloud Console, select the Google Cloud host project for Workspace B:

    Go to Cloud Console

  2. In the navigation pane, select Monitoring and then select Settings.

  3. Ensure that Workspace B is selected. This is the Workspace that you want to keep.

  4. Click Merge.

  5. Select Workspace A. You want to merge Workspace A into Workspace B.

  6. Review the information that is lost during the merge. If you agree to that information loss, click Merge.

Deleting a Workspace

Before deleting a Workspace, check if the project you used to create the Workspace has resources you want to preserve, or if the Workspace is still linked to additional Google Cloud projects or AWS accounts. If so, see Merging Workspaces for a way to move resources to another place before deleting the Workspace.

If your Workspace project has no resources you want to preserve, then delete the Workspace by deleting the Workspace's host project:

  1. In the Cloud Console, go to the IAM & admin console:

    Go to the IAM console

  2. Ensure that the host project is selected in the menu bar of the Cloud Console.

  3. Click Settings.

  4. Click Shut Down .

Viewing your workspaces

To view all of your Workspaces, click Menu in the navigation panel:

Display of the most recently visited workspaces.

  • The Recent tab displays your more recently access Workspaces. You can filter and sort the display.
  • The All tab displays all accessible Workspaces:
    • To page through the Workspaces, use the Forward and Backward buttons.
    • To filter the list, enter a partial name or project identifier.

Troubleshooting

I can't log in to my Workspace

Cloud Monitoring relies on cookies from various Google sites to manage Workspaces. If these cookies are blocked, you may find that you:

  • Cannot get past the Log in with Google dialog, and you see a message saying “Cookies aren't enabled in current environment”.

  • Get stuck in an endless authentication loop.

Cookies can be blocked accidentally, or by automatic updates pushed out as part of changes in security policy at your location.

You must have third-party cookies enabled for the following:

  • google.com
  • accounts.google.com
  • apis.google.com

For information on enabling cookies, see your browser's documentation:

My email address isn't accepted

Monitoring doesn't accept email addresses containing an apostrophe, although Google Cloud does. Users with such email addresses are unrecognized when they attempt to use Monitoring.

I can't add a project to a Workspace because it's already in another Workspace

Projects can be associated with only one Workspace at a time:

Project resources are missing from Monitoring

It can take ten minutes or so before Monitoring notices new or removed resources, such as VM instances, in your projects.

If you start a service such as Compute Engine in a project that is associated with a Workspace, it can take a hour or more for Monitoring to notice the new service. Until that time, the service's resource types don't appear in any Monitoring menus.

How do I use Workspaces with Logging?

Cloud Logging doesn't use Workspaces. By using advanced log filters, you can view or manage log entries from multiple Google Cloud projects or AWS accounts.

In the case of AWS accounts, you access logs through the AWS connector project that Monitoring creates when you add the account to a Workspace. Therefore, you do have to add your account to a Workspace and install the Cloud Logging agent on your VM instances in order to receive your logs.