View logs

Recommender logs record changes to recommendation and insight state.

Permissions

Identity and Access Management permissions and roles determine which logs you can view and export.

To view Recommender logs, you must have one of the following IAM roles in the project that contains your logs:

  • One of the basic roles: Project Owner, Project Editor, or Project Viewer.
  • The Cloud Logging Logs Viewer role.
  • A custom IAM role with the logging.logEntries.list IAM permission.

Viewing logs

Recommendation Logs

To view recommendation action logs:

  1. Go to the Google Cloud Observability Logging > Logs (Logs Explorer) page in the Google Cloud console:

    Go to the Logs Explorer page

  2. Select an existing Google Cloud project at the top of the page or create a new project.

  3. In the first drop-down menu, select Recommender.

  4. Expand a log entry to view the entry details. The following example shows a claimed recommendation.

    {
 insertId:  "t51fxaa1"
 jsonPayload: {
  @type:  "type.googleapis.com/google.cloud.recommender.logging.v1.ActionLog"
  actor:  "user@gmail.com"
  recommendationName:   "projects/my-recommender-project/locations/global/recommenders/google.iam.policy.Recommender/recommendations/r1"
  state:  "CLAIMED"
  stateMetadata: {
    my_metadata: "Some metadata."
  }
 }
 logName:  "projects/my-recommender-project/logs/recommender.googleapis.com%2Factions"
 receiveTimestamp:  "2019-07-01T21:55:06.950795284Z"
 resource: {
  labels: {
   location:  "global"
   project_id:  "my-recommender-project"
   recommender_id:  "google.iam.policy.Recommender"
  }
  type:  "recommender"
 }
 severity:  "INFO"
 timestamp:  "2019-07-01T21:55:06.529Z"
}

Insight Logs

To view insight action logs:

  1. Go to the Google Cloud Observability Logging > Logs (Logs Explorer) page in the Google Cloud console:

    Go to the Logs Explorer page

  2. Select an existing Google Cloud project at the top of the page or create a new project.

  3. In the first drop-down menu, select InsightType.

  4. Expand a log entry to view the entry details. The following example shows an accepted insight.

    {
 insertId:  "t51fxaa1"
 jsonPayload: {
  @type:  "type.googleapis.com/google.cloud.recommender.logging.v1.InsightActionLog"
  actor:  "user@gmail.com"
  insight:   "projects/my-recommender-project/locations/global/insightTypes/google.iam.policy.Insight/insights/i1"
  state:  "ACCEPTED"
  stateMetadata: {
    my_metadata: "Some metadata."
  }
 }
 logName:  "projects/my-recommender-project/logs/recommender.googleapis.com%2Factions"
 receiveTimestamp:  "2019-07-01T21:55:06.950795284Z"
 resource: {
  labels: {
   location:  "global"
   project_id:  "my-recommender-project"
   insight_type_id:  "google.iam.policy.Recommender"
  }
  type:  "recommender_insight_type"
 }
 severity:  "INFO"
 timestamp:  "2019-07-01T21:55:06.529Z"
}