Setting Up Cloud Logging for PHP

You can write logs to Cloud Logging from PHP applications by using the Cloud Logging library for PHP directly.

Before you begin

  1. Sign in to your Google Cloud account. If you're new to Google Cloud, create an account to evaluate how our products perform in real-world scenarios. New customers also get $300 in free credits to run, test, and deploy workloads.
  2. In the Google Cloud console, on the project selector page, select or create a Google Cloud project.

    Go to project selector

  3. Make sure that billing is enabled for your Google Cloud project.

  4. Enable the Cloud Logging API.

    Enable the API

  5. In the Google Cloud console, on the project selector page, select or create a Google Cloud project.

    Go to project selector

  6. Make sure that billing is enabled for your Google Cloud project.

  7. Enable the Cloud Logging API.

    Enable the API

Installing the Cloud Logging library for PHP

The Cloud Logging library for PHP provides a simple PSR-3 logger implementation for PHP web frameworks.

To write logs from your app, add the Cloud Logging library for PHP to your composer.json:

composer require google/cloud-logging

Creating a PSR-3 logger

Use the following code to create a PSR-3 logger:

use Google\Cloud\Logging\LoggingClient;
$logging = new LoggingClient([
    'projectId' => $projectId
]);
$logger = $logging->psrLogger('app');

Enabling batching option

The PSR-3 logger sends the logs synchronously. This means that whenever you emit a log, it will add RPC latency to the user request. Especially if you emit multiple logs in a single request, the added latency will be significant. You probably want to avoid that.

The following code creates a PSR-3 logger which will batch multiple logs into one single RPC calls:

$logger = LoggingClient::psrBatchLogger('app');

By default, this logger batches the logs within a single process. On App Engine flexible environment, you can configure the Cloud Logging library for PHP for even higher throughput and lower latency. For details, see Configuring the logging daemon.

Configuring the Cloud Logging library for PHP

You can customize the behavior of the Cloud Logging library for PHP. See the configuration document for a list of possible configuration options.

Using the PSR-3 logger

Once the logger is created, you can use the logger in your application:

$logger->info('Hello World');
$logger->error('Oh no');

For more information on installation, see the documentation for the Cloud Logging library for PHP. You can also report issues using the issue tracker.

Write logs with the Cloud Logging client library

For information on using the Cloud Logging client library for PHP directly, see Cloud Logging Client Libraries.

Run on Google Cloud

For an application to write logs by using the Cloud Logging library for PHP, the service account for the underlying resource must have the Logs Writer (roles/logging.logWriter) IAM role. Most Google Cloud environments automatically configure the default service account to have this role.

App Engine

Cloud Logging is automatically enabled for App Engine, and your app's default service account has the IAM permissions by default to write log entries.

For more information, see Writing and viewing logs.

However, we recommend that you use the PSR-3 logger which automatically adds metadata to your logs so that your application logs are correlated to the request logs.

Configuring the daemon for App Engine flexible environment

In the App Engine flexible environment, you can configure the Cloud Logging library for PHP to use an external daemon program to maximize the log throughput and minimize the app's latency. To enable this feature, add the following line to runtime_config section in app.yaml:

enable_stackdriver_integration: true

Google Kubernetes Engine (GKE)

GKE automatically grants the default service account the Logs Writer (roles/logging.logWriter) IAM role. If you use Workload Identity with this default service account to let workloads access specific Google Cloud APIs, then no additional configuration is required. However, if you use Workload Identity with a custom IAM service account, then ensure that the custom service account has the role of Logs Writer (roles/logging.logWriter).

If needed, you can also use the following command to add the logging.write access scope when creating the cluster:

gcloud container clusters create example-cluster-name \
    --scopes https://www.googleapis.com/auth/logging.write

Compute Engine

When using Compute Engine VM instances, add the cloud-platform access scope to each instance. When creating a new instance through the Google Cloud console, you can do this in the Identity and API access section of the Create Instance panel. Use the Compute Engine default service account or another service account of your choice, and select Allow full access to all Cloud APIs in the Identity and API access section. Whichever service account you select, ensure that it has been granted the Logs Writer role in the IAM & Admin section of the Google Cloud console.

Run locally and elsewhere

To use the Cloud Logging library for PHP outside of Google Cloud, including running the library on your own workstation, on your data center's computers, or on the VM instances of another cloud provider, you must supply your Google Cloud project ID and appropriate service account credentials directly to the Cloud Logging library for PHP.

For existing service accounts, do the following:

  1. Grant the service account the IAM the Logs Writer (roles/logging.logWriter) IAM role. For more information on IAM roles, see Access control.

  2. Set up Application Default Credentials.

If you don't have a service account, then create one. For information about this process, see Create service accounts.

For general information about the methods that you can use to authenticate, see Terminology: service accounts.

View the logs

In the navigation panel of the Google Cloud console, select Logging, and then select Logs Explorer:

Go to Logs Explorer

In the Logs Explorer, you must specify one or more resources, but the resource selection might not be obvious. Here are some tips to help you get started:

  • If you are deploying your application to App Engine or using the App Engine-specific libraries, set your resource to GAE Application.

  • If you are deploying your application on Compute Engine, set the resource to GCE VM Instance.

  • If you are deploying your application on Google Kubernetes Engine, your cluster's logging configuration determines the resource type of the log entries. For a detailed discussion on the Legacy Google Cloud Observability and the Google Cloud Observability Kubernetes Monitoring solutions, and how those options affect the resource type, see Migrating to Google Cloud Observability Kubernetes Monitoring.

  • If your application is using the Cloud Logging API directly, the resource is dependent on the API and your configuration. For example, in your application, you can specify a resource or use a default resource.

  • If you don't see any logs in the Logs Explorer, to see all log entries, switch to the advanced query mode and use an empty query.

    1. To switch to the advanced query mode, click menu (▾) at the top of the Logs Explorer and then select Convert to advanced filter.
    2. Clear the content that appears in the filter box.
    3. Click Submit Filter.

    You can examine the individual entries to identify your resources.

For additional information, see Using the Logs Explorer.