View logs
Recommender logs record changes to recommendation and insight state.
Permissions
Identity and Access Management permissions and roles determine which logs you can view and export.
To view Recommender logs, you must have one of the following IAM roles in the project that contains your logs:
- One of the basic roles: Project Owner, Project Editor, or Project Viewer.
- The Cloud Logging Logs Viewer role.
- A custom IAM role with the
logging.logEntries.list
IAM permission.
Viewing logs
Recommendation Logs
To view recommendation action logs:
Go to the Google Cloud Observability Logging > Logs (Logs Explorer) page in the Google Cloud console:
Select an existing Google Cloud project at the top of the page or create a new project.
In the first drop-down menu, select Recommender.
Expand a log entry to view the entry details. The following example shows a claimed recommendation.
{ insertId: "t51fxaa1" jsonPayload: { @type: "type.googleapis.com/google.cloud.recommender.logging.v1.ActionLog" actor: "user@gmail.com" recommendationName: "projects/my-recommender-project/locations/global/recommenders/google.iam.policy.Recommender/recommendations/r1" state: "CLAIMED" stateMetadata: { my_metadata: "Some metadata." } } logName: "projects/my-recommender-project/logs/recommender.googleapis.com%2Factions" receiveTimestamp: "2019-07-01T21:55:06.950795284Z" resource: { labels: { location: "global" project_id: "my-recommender-project" recommender_id: "google.iam.policy.Recommender" } type: "recommender" } severity: "INFO" timestamp: "2019-07-01T21:55:06.529Z" }
Insight Logs
To view insight action logs:
Go to the Google Cloud Observability Logging > Logs (Logs Explorer) page in the Google Cloud console:
Select an existing Google Cloud project at the top of the page or create a new project.
In the first drop-down menu, select InsightType.
Expand a log entry to view the entry details. The following example shows an accepted insight.
{ insertId: "t51fxaa1" jsonPayload: { @type: "type.googleapis.com/google.cloud.recommender.logging.v1.InsightActionLog" actor: "user@gmail.com" insight: "projects/my-recommender-project/locations/global/insightTypes/google.iam.policy.Insight/insights/i1" state: "ACCEPTED" stateMetadata: { my_metadata: "Some metadata." } } logName: "projects/my-recommender-project/logs/recommender.googleapis.com%2Factions" receiveTimestamp: "2019-07-01T21:55:06.950795284Z" resource: { labels: { location: "global" project_id: "my-recommender-project" insight_type_id: "google.iam.policy.Recommender" } type: "recommender_insight_type" } severity: "INFO" timestamp: "2019-07-01T21:55:06.529Z" }