VMware Engine system audit logging information

Internal system activities generate system audit logs. When you start a long running operation, such as creating a private cloud, the system makes updates on your resources. Those actions are monitored and you can see them in Logs explorer.

The protoPayload.metadata field is typed and unique to the the system and operator audit logging methods. insertID, logName, protopayload, receiveTimestamp, resource, and timestamp follow LogEntry. protopayload.@type, protopayload.authenticationInfo, protopayload.methodName, protopayload.resourceName, and protopayload.serviceName follow AuditLog.

An individual entry in a log.

JSON representation

JSON representation
{ "insertID": string, "logName": string, "protoPayload": { "@type": string, "authenticationInfo": { "principalEmail": string }, "metadata" `(VMwareEngineAuditMetadata)`: { "@type": string, "message": string, "operationState": string, "operationType": string, "resourceType": string }, "methodName": string, "resourceName": string, "serviceName": string }, "receiveTimestamp": string, "resource": { "labels": { "method": string, "project_id": string, "service": string, }, "type": string }, "timestamp": string }

{
  "insertID": string,
  "logName": string,
  "protoPayload": {
    "@type": string,
    "authenticationInfo": {
      "principalEmail": string
    },
    "metadata" (VMwareEngineAuditMetadata): {
      "@type": string,
      "message": string,
      "operationState": string,
      "operationType": string,
      "resourceType": string
    },
    "methodName": string,
    "resourceName": string,
    "serviceName": string
  },
  "receiveTimestamp": string,
  "resource": {
    "labels": {
      "method": string,
      "project_id": string,
      "service": string,
    },
    "type": string
  },  
  "timestamp": string
}

Fields
`@type`	`string` URI of identifying the type of the metadata. Example: "type.googleapis.com/google.cloud.audit.VMwareEngineAuditMetadata"
`message`	`string` The short description of action that was performed for you. Example: "Replacement of failed node `node-1` with new node `node-2` complete"- indicates that failed node removal was successful in your private cloud.
operationState	`string` Indicates the state of action. The value can be one of the following: STARTED, COMPLETED, FAILED, CANCELED, OPERATION_STATE_UNSPECIFIED. Example: COMPLETED - the action was fully executed successfully. STARTED - action was started. FAILED - action execution was unsuccessful. `CANCELED` - action execution was canceled. OPERATION_STATE_UNSPECIFIED - action state is not determined.
operationType	`string` Indicates the type of operation. The value can be one of the following: OPERATION_TYPE_UNSPECIFIED, CREATE, UPDATE, DELETE. Example: CREATE - the operation created some resource for you. UPDATE - updated some resource. DELETE - deleted some resource. OPERATION_TYPE_UNSPECIFIED - operation type couldn't be determined.
`resourceType`	`string` Indicates the type of the resource on which the action is performed. Example: PRIVATE_CLOUD - the action was performed on a private cloud. This can mean that some node was removed from or added to the private cloud or the private cloud itself was removed or created.