Google Cloud platform logs

This document provides basic information about the Google Cloud platform logs that are available in Cloud Logging, as well as next steps for viewing and managing platform logs.

Overview

Logging receives, indexes, and stores log entries from Google Cloud services. Google Cloud platform logs are service-specific logs that can help you debug and troubleshoot issues, as well as better understand the Google Cloud services you're using.

The Google Cloud platform logs visible to you in Cloud Logging vary, depending on which Google Cloud resources you're using in your Google Cloud project or organization.

When using this document, note the following:

  • Not all Google Cloud services implement platform logs. For an expanding (non-exhaustive) list of the services that implement platform logs, see the following Index of Google Cloud platform logs.
  • Each Google Cloud service that implements platform logs manages its own configuration. Refer to service-specific documentation to determine whether the service enables platform logs by default and how to enable or disable platform logs.

Index of Google Cloud platform logs

Following are tables of some of the Google Cloud platform logs supported by Cloud Logging. To understand the data contained in the tables, see Log entry structure on this page.

Abuse Event

Logging API service name: abuseevent.googleapis.com

Log ID Monitored resource Payload Labels Severities
abuseevent.googleapis.com/abuse_events abuseevent.googleapis.com/Location type.googleapis.com/google.cloud.abuseevent.logging.v1.AbuseEvent abuseevent.googleapis.com/service_account
abuseevent.googleapis.com/vm_resource		 CRITICAL
NOTICE
ALERT

AlloyDB

Logging API service name: alloydb.googleapis.com

Log ID Monitored resource Payload Labels Severities
alloydb.googleapis.com/postgres.log alloydb.googleapis.com/Instance The PostgreSQL database logs. CONSUMER_PROJECT
NODE_ID
SOURCE
DATABASE_VERSION		 INFO
WARNING
ERROR
ALERT
alloydb.googleapis.com/journald alloydb.googleapis.com/Instance Container logs for dataplane agents. CONSUMER_PROJECT
CONTAINER_ID
CONTAINER_ID_FULL
CONTAINER_NAME
CONTAINER_TAG
IMAGE_NAME
NODE_ID
DATABASE_VERSION
SYSLOG_FACILITY
SYSLOG_IDENTIFIER
_BOOT_ID
_CAP_EFFECTIVE
_CMDLINE
_COMM
_EXE
_GID
_HOSTNAME
_MACHINE_ID
_PID
_SOURCE_REALTIME_TIMESTAMP
_STREAM_ID
_SYSTEMD_CGROUP
_SYSTEMD_INVOCATION_ID
_SYSTEMD_SLICE
_SYSTEMD_UNIT
_TRANSPORT
UID
_MONOTONICTIMESTAMP
_REALTIME_TIMESTAMP		 ERROR
INFO
WARNING
alloydb.googleapis.com/postgresinternal alloydb.googleapis.com/Instance The internal dogfish logs. CONSUMER_PROJECT
LOG_TYPE
NODE_ID
DATABASE_VERSION		 DEFAULT
INFO
WARNING
alloydb.googleapis.com/instance_agent saas_instance Logs for instance agent running on AlloyDB VM. N/A ERROR
INFO

Application Integration

Logging API service name: integrations.googleapis.com

Log ID Monitored resource Payload Labels Severities
integrations.googleapis.com/execution_info integrations.googleapis.com/IntegrationVersion type.googleapis.com/google.cloud.integrations.v1alpha.ExecutionInfo N/A INFO
WARNING
ERROR

Assured Workloads

Logging API service name: assuredworkloads.googleapis.com

Log ID Monitored resource Payload Labels Severities
assuredworkloads.googleapis.com/regulatory_intercept_ack folder type.googleapis.com/google.cloud.assuredworkloads.regulatoryintercept.logging.v1.RegulatoryInterceptAckLogEntry N/A INFO
assuredworkloads.googleapis.com/regulatory_intercept_ack project type.googleapis.com/google.cloud.assuredworkloads.regulatoryintercept.logging.v1.RegulatoryInterceptAckLogEntry N/A INFO

Backup for GKE

Logging API service name: gkebackup.googleapis.com

Log ID Monitored resource Payload Labels Severities
gkebackup.googleapis.com/backup_change gkebackup.googleapis.com/BackupPlan type.googleapis.com/google.cloud.gkebackup.logging.v1.BackupChange backup_id INFO
ERROR
gkebackup.googleapis.com/backup_plan_change gkebackup.googleapis.com/BackupPlan type.googleapis.com/google.cloud.gkebackup.logging.v1.BackupPlanChange backup_plan_id INFO
ERROR
gkebackup.googleapis.com/restore_change gkebackup.googleapis.com/RestorePlan type.googleapis.com/google.cloud.gkebackup.logging.v1.RestoreChange restore_id INFO
ERROR
gkebackup.googleapis.com/restore_plan_change gkebackup.googleapis.com/RestorePlan type.googleapis.com/google.cloud.gkebackup.logging.v1.RestorePlanChange restore_plan_id INFO
ERROR

BigQuery Data Transfer API

Logging API service name: bigquerydatatransfer.googleapis.com

Log ID Monitored resource Payload Labels Severities
bigquerydatatransfer.googleapis.com/transfer_config bigquery_dts_config Debug logs for BigQuery Data Transfer runs. Describes the current status of the transfer run. run_id DEFAULT
INFO
WARNING
ERROR

Certificate Manager

Logging API service name: certificatemanager.googleapis.com

Log ID Monitored resource Payload Labels Severities
certificatemanager.googleapis.com/certificates_expiry certificatemanager.googleapis.com/Project type.googleapis.com/google.cloud.certificatemanager.logging.v1.CertificatesExpiry N/A WARNING

Chat

Logging API service name: chat.googleapis.com

Log ID Monitored resource Payload Labels Severities
chat.googleapis.com/errors chat.googleapis.com/Project type.googleapis.com/google.chat.logging.v1.ChatAppLogEntry N/A ERROR

Cloud Backup and DR

Logging API service name: backupdr.googleapis.com

Log ID Monitored resource Payload Labels Severities
backupdr.googleapis.com/backup_recovery_appliance_events backupdr.googleapis.com/BackupRecoveryAppliance type.googleapis.com/google.cloud.backupdr.logging.v1.Event N/A ERROR
WARNING
INFO
backupdr.googleapis.com/gcb_backup_recovery_jobs backupdr.googleapis.com/ManagementConsole type.googleapis.com/google.cloud.backupdr.logging.v1.BackupRecoveryJobReportLog N/A INFO
backupdr.googleapis.com/gcb_daily_schedule_compliance backupdr.googleapis.com/ManagementConsole type.googleapis.com/google.cloud.backupdr.logging.v1.DailyScheduleComplianceReportLog N/A INFO
backupdr.googleapis.com/gcb_protected_resource backupdr.googleapis.com/ManagementConsole type.googleapis.com/google.cloud.backupdr.logging.v1.ProtectedResourceReportLog N/A INFO

Cloud Database Migration Service

Logging API service name: datamigration.googleapis.com

Log ID Monitored resource Payload Labels Severities
datamigration.googleapis.com/migration_job_event datamigration.googleapis.com/MigrationJob type.googleapis.com/google.cloud.clouddms.logging.v1.MigrationJobEventLog N/A INFO
NOTICE
ERROR
datamigration.googleapis.com/connection_profile_event datamigration.googleapis.com/ConnectionProfile type.googleapis.com/google.cloud.clouddms.logging.v1.ConnectionProfileEventLog N/A INFO
NOTICE
ERROR
datamigration.googleapis.com/private_connection_event datamigration.googleapis.com/PrivateConnection type.googleapis.com/google.cloud.clouddms.logging.v1.PrivateConnectionEventLog N/A INFO
NOTICE
ERROR

Cloud Datastream

Logging API service name: datastream.googleapis.com

Log ID Monitored resource Payload Labels Severities
datastream.googleapis.com/stream_activity datastream.googleapis.com/Stream type.googleapis.com/google.cloud.datastream.logging.v1.StreamActivityLogEntry N/A ERROR
INFO
WARNING

Cloud Deploy

Logging API service name: clouddeploy.googleapis.com

Log ID Monitored resource Payload Labels Severities
clouddeploy.googleapis.com/release_render clouddeploy.googleapis.com/DeliveryPipeline type.googleapis.com/google.cloud.deploy.v1.ReleaseRenderEvent N/A INFO
clouddeploy.googleapis.com/rollout_notification clouddeploy.googleapis.com/DeliveryPipeline type.googleapis.com/google.cloud.deploy.v1.RolloutNotificationEvent N/A ERROR
clouddeploy.googleapis.com/rollout_update clouddeploy.googleapis.com/DeliveryPipeline type.googleapis.com/google.cloud.deploy.v1.RolloutUpdateEvent N/A INFO
clouddeploy.googleapis.com/deliverypipeline_notification clouddeploy.googleapis.com/DeliveryPipeline type.googleapis.com/google.cloud.deploy.v1.DeliveryPipelineNotificationEvent N/A ERROR
clouddeploy.googleapis.com/target_notification clouddeploy.googleapis.com/Target type.googleapis.com/google.cloud.deploy.v1.TargetNotificationEvent N/A ERROR
clouddeploy.googleapis.com/release_notification clouddeploy.googleapis.com/DeliveryPipeline type.googleapis.com/google.cloud.deploy.v1.ReleaseNotificationEvent N/A ERROR
clouddeploy.googleapis.com/jobrun_notification clouddeploy.googleapis.com/DeliveryPipeline type.googleapis.com/google.cloud.deploy.v1.JobRunNotificationEvent N/A ERROR
clouddeploy.googleapis.com/automation clouddeploy.googleapis.com/DeliveryPipeline type.googleapis.com/google.cloud.deploy.v1.AutomationEvent N/A ERROR
NOTICE
clouddeploy.googleapis.com/automationrun clouddeploy.googleapis.com/DeliveryPipeline type.googleapis.com/google.cloud.deploy.v1.AutomationRunEvent N/A ERROR
NOTICE

Cloud Functions

Logging API service name: cloudfunctions.googleapis.com

Log ID Monitored resource Payload Labels Severities
cloudfunctions.googleapis.com/cloud-functions cloud_function Cloud Functions writes logs to this stream that indicate the start and end of execution, as well as the stdout and stderr from those executions. execution_id
instance_id
infrastructure
runtime_version		 DEFAULT
DEBUG
INFO
NOTICE
WARNING
ERROR
CRITICAL
ALERT
EMERGENCY

Cloud IDS

Logging API service name: ids.googleapis.com

Log ID Monitored resource Payload Labels Severities
ids.googleapis.com/threat ids.googleapis.com/Endpoint Threat logs from the Cloud IDS endpoint. N/A DEFAULT
ids.googleapis.com/instance_agent saas_instance Logs for instance agent running on Cloud IDS VM. N/A ERROR
INFO
WARNING
ids.googleapis.com/traffic ids.googleapis.com/Endpoint Traffic logs from the Cloud IDS endpoint. N/A DEFAULT

Cloud Load Balancing

Logging API service name: loadbalancing.googleapis.com

Log ID Monitored resource Payload Labels Severities
loadbalancing.googleapis.com/requests internal_http_lb_rule type.googleapis.com/google.cloud.loadbalancing.type.LoadBalancerLogEntry N/A INFO
WARNING
ERROR
loadbalancing.googleapis.com/external_regional_requests http_external_regional_lb_rule type.googleapis.com/google.cloud.loadbalancing.type.LoadBalancerLogEntry N/A INFO
WARNING
ERROR

Cloud Locations

Logging API service name: cloud.googleapis.com

Log ID Monitored resource Payload Labels Severities
cloud.googleapis.com/ipsec_events vpn_gateway VPN Tunnel logs from the VPN Gateway instance tunnel_id DEBUG
NOTICE

Cloud Monitoring API

Logging API service name: monitoring.googleapis.com

Log ID Monitored resource Payload Labels Severities
monitoring.googleapis.com/uptime_checks uptime_url uptime_url uptime check logs. check_id
checker_location
execution_id
uptime_result_type
service_directory_endpoint		 ERROR
INFO
NOTICE
monitoring.googleapis.com/uptime_checks gae_app gae_app uptime check logs. check_id
checker_location
execution_id
uptime_result_type
service_directory_endpoint		 ERROR
INFO
NOTICE
monitoring.googleapis.com/uptime_checks gce_instance gce_instance uptime check logs. check_id
checker_location
execution_id
uptime_result_type
service_directory_endpoint		 ERROR
INFO
NOTICE
monitoring.googleapis.com/uptime_checks aws_ec2_instance aws_ec2_instance uptime check logs. check_id
checker_location
execution_id
uptime_result_type
service_directory_endpoint		 ERROR
INFO
NOTICE
monitoring.googleapis.com/uptime_checks aws_elb_load_balancer aws_elb_load_balancer uptime check logs. check_id
checker_location
execution_id
uptime_result_type
service_directory_endpoint		 ERROR
INFO
NOTICE
monitoring.googleapis.com/uptime_checks k8s_service k8s_service uptime check logs. check_id
checker_location
execution_id
uptime_result_type
service_directory_endpoint		 ERROR
INFO
NOTICE
monitoring.googleapis.com/uptime_checks servicedirectory_service servicedirectory_service uptime check logs. check_id
checker_location
execution_id
uptime_result_type
service_directory_endpoint		 ERROR
INFO
NOTICE
monitoring.googleapis.com/uptime_checks cloud_run_revision cloud_run_revision uptime check logs. check_id
checker_location
execution_id
uptime_result_type
service_directory_endpoint		 ERROR
INFO
NOTICE

Cloud OS Config

Logging API service name: osconfig.googleapis.com

Log ID Monitored resource Payload Labels Severities
osconfig.googleapis.com/patch_job cloud_osconfig_patch_job type.googleapis.com/google.cloud.osconfig.logging.PatchJobCompletedLog osconfig.googleapis.com/patch_job INFO
ERROR

Cloud Run

Logging API service name: run.googleapis.com

Log ID Monitored resource Payload Labels Severities
run.googleapis.com/stdout cloud_run_revision Cloud Run stdout logs. Each entry contains a line (or multiple lines, if they match a known multi-line exception format like a stack trace) written to stdout from the user container. instanceId
goog-managed-by
goog-cloudfunctions-runtime
managed-by
commit-sha
gcb-trigger-id
gcb-build-id
container_name		 DEFAULT
DEBUG
INFO
NOTICE
WARNING
ERROR
CRITICAL
ALERT
EMERGENCY
run.googleapis.com/stderr cloud_run_revision Cloud Run stderr logs. Each entry contains a line (or multiple lines, if they match a known multi-line exception format like a stack trace) written to stderr from the user container. instanceId
goog-managed-by
goog-cloudfunctions-runtime
managed-by
commit-sha
gcb-trigger-id
gcb-build-id
container_name		 DEFAULT
DEBUG
INFO
NOTICE
WARNING
ERROR
CRITICAL
ALERT
EMERGENCY
run.googleapis.com/requests cloud_run_revision Cloud Run request logs. Each request served by a Cloud Run service should have a corresponding request log entry. instanceId
goog-managed-by
goog-cloudfunctions-runtime
managed-by
commit-sha
gcb-trigger-id
gcb-build-id		 DEFAULT
INFO
WARNING
ERROR
run.googleapis.com//dev/log cloud_run_revision Cloud Run syslogs. These are syslog-structured logs written to /dev/log in the user container. instanceId
goog-managed-by
goog-cloudfunctions-runtime
managed-by
commit-sha
gcb-trigger-id
gcb-build-id
container_name		 DEFAULT
DEBUG
INFO
NOTICE
WARNING
ERROR
CRITICAL
ALERT
EMERGENCY
run.googleapis.com//var/log cloud_run_revision Cloud Run /var/log logs. Each entry contains a line (or multiple lines, if they match a known multi-line exception format like a stack trace) written to /var/log/** from the user container. instanceId
goog-managed-by
goog-cloudfunctions-runtime
managed-by
commit-sha
gcb-trigger-id
gcb-build-id
container_name		 DEFAULT
DEBUG
INFO
NOTICE
WARNING
ERROR
CRITICAL
ALERT
EMERGENCY
run.googleapis.com/stdout cloud_run_job Cloud Run stdout logs. Each entry contains a line (or multiple lines, if they match a known multi-line exception format like a stack trace) written to stdout from the user container. instanceId
run.googleapis.com/execution_name
run.googleapis.com/task_index
run.googleapis.com/task_attempt
managed-by
commit-sha
gcb-trigger-id
gcb-build-id
container_name		 DEFAULT
DEBUG
INFO
NOTICE
WARNING
ERROR
CRITICAL
ALERT
EMERGENCY
run.googleapis.com/stderr cloud_run_job Cloud Run stderr logs. Each entry contains a line (or multiple lines, if they match a known multi-line exception format like a stack trace) written to stderr from the user container. instanceId
run.googleapis.com/execution_name
run.googleapis.com/task_index
run.googleapis.com/task_attempt
managed-by
commit-sha
gcb-trigger-id
gcb-build-id
container_name		 DEFAULT
DEBUG
INFO
NOTICE
WARNING
ERROR
CRITICAL
ALERT
EMERGENCY
run.googleapis.com//dev/log cloud_run_job Cloud Run syslogs. These are syslog-structured logs written to /dev/log in the user container. instanceId
run.googleapis.com/execution_name
run.googleapis.com/task_index
run.googleapis.com/task_attempt
managed-by
commit-sha
gcb-trigger-id
gcb-build-id
container_name		 DEFAULT
DEBUG
INFO
NOTICE
WARNING
ERROR
CRITICAL
ALERT
EMERGENCY
run.googleapis.com//var/log cloud_run_job Cloud Run /var/log logs. Each entry contains a line (or multiple lines, if they match a known multi-line exception format like a stack trace) written to /var/log/** from the user container. instanceId
run.googleapis.com/execution_name
run.googleapis.com/task_index
run.googleapis.com/task_attempt
managed-by
commit-sha
gcb-trigger-id
gcb-build-id
container_name		 DEFAULT
DEBUG
INFO
NOTICE
WARNING
ERROR
CRITICAL
ALERT
EMERGENCY

Cloud SQL

Logging API service name: cloudsql.googleapis.com

Log ID Monitored resource Payload Labels Severities
cloudsql.googleapis.com/mysql.err cloudsql_database The error log contains a record and diagnostic messages such as errors, warnings, and notes that occur during server startup, shutdown, and while the server is running. INSTANCE_UID
IS_EXTERNAL_SERVER_REPLICA
LOG_BUCKET_NUM
SOURCE_ID		 DEFAULT
DEBUG
INFO
NOTICE
WARNING
ERROR
CRITICAL
ALERT
EMERGENCY
cloudsql.googleapis.com/mysql-slow.log cloudsql_database The slow query log consists of SQL statements that take more than long_query_time seconds to execute. INSTANCE_UID
IS_EXTERNAL_SERVER_REPLICA
LOG_BUCKET_NUM
SOURCE_ID		 DEFAULT
DEBUG
INFO
NOTICE
WARNING
ERROR
CRITICAL
ALERT
EMERGENCY
cloudsql.googleapis.com/mysql-general.log cloudsql_database The general query log records when clients connect or disconnect, and it logs each SQL statement received from clients. INSTANCE_UID
IS_EXTERNAL_SERVER_REPLICA
LOG_BUCKET_NUM
SOURCE_ID		 DEFAULT
DEBUG
INFO
NOTICE
WARNING
ERROR
CRITICAL
ALERT
EMERGENCY
cloudsql.googleapis.com/replication-setup.log cloudsql_database They are related to external server replication setup. INSTANCE_UID
IS_EXTERNAL_SERVER_REPLICA
LOG_BUCKET_NUM
SOURCE_ID		 DEFAULT
DEBUG
INFO
NOTICE
WARNING
ERROR
CRITICAL
ALERT
EMERGENCY
cloudsql.googleapis.com/replication-status.log cloudsql_database They are related to external server replication status monitoring. INSTANCE_UID
IS_EXTERNAL_SERVER_REPLICA
LOG_BUCKET_NUM
SOURCE_ID		 DEFAULT
DEBUG
INFO
NOTICE
WARNING
ERROR
CRITICAL
ALERT
EMERGENCY
cloudsql.googleapis.com/active_directory.log cloudsql_database It logs Active Directory related events for SQL Server instances. N/A DEFAULT
DEBUG
INFO
NOTICE
WARNING
ERROR
CRITICAL
ALERT
EMERGENCY
cloudsql.googleapis.com/xevents.log cloudsql_database It logs Extended Events related events for SQL Server instances. N/A DEFAULT
DEBUG
INFO
NOTICE
WARNING
ERROR
CRITICAL
ALERT
EMERGENCY
cloudsql.googleapis.com/mysql-upgrade.log cloudsql_database Used to contain mysql_upgrade logs. Now deprecated. N/A DEFAULT
DEBUG
INFO
NOTICE
WARNING
ERROR
CRITICAL
ALERT
EMERGENCY
cloudsql.googleapis.com/postgres.log cloudsql_database It contains the database server's log output from the Cloud SQL instance. INSTANCE_UID
IS_EXTERNAL_SERVER_REPLICA
LOG_BUCKET_NUM
SOURCE_ID		 DEFAULT
DEBUG
INFO
NOTICE
WARNING
ERROR
CRITICAL
ALERT
EMERGENCY
cloudsql.googleapis.com/postgres-audit.log cloudsql_database It contains the audit log entries from the pgAudit extension in the Cloud SQL instance. N/A DEFAULT
DEBUG
INFO
NOTICE
WARNING
ERROR
CRITICAL
ALERT
EMERGENCY
cloudsql.googleapis.com/sqlserver.err cloudsql_database These logs are from the SQL Server errorlog on the Cloud SQL instance. CONTAINER_ID
CONTAINER_ID_FULL
CONTAINER_NAME
CONTAINER_TAG
CONTAINER_PARTIAL_ID
CONTAINER_PARTIAL_LAST
CONTAINER_PARTIAL_MESSAGE
CONTAINER_PARTIAL_ORDINAL
IMAGE_NAME
INSTANCE_ID
INSTANCE_UID
LOG_BUCKET_NUM
SYSLOG_IDENTIFIER
_BOOT_ID
_CAP_EFFECTIVE
_CMDLINE
_COMM
_EXE
_GID
_HOSTNAME
_MACHINE_ID
_PID
_SOURCE_REALTIME_TIMESTAMP
_SYSTEMD_CGROUP
_SYSTEMD_INVOCATION_ID
_SYSTEMD_SLICE
_SYSTEMD_UNIT
_TRANSPORT
UID
_MONOTONICTIMESTAMP
_REALTIME_TIMESTAMP
SOURCE_ID		 DEFAULT
DEBUG
INFO
NOTICE
WARNING
ERROR
CRITICAL
ALERT
EMERGENCY
cloudsql.googleapis.com/sqlagent.out cloudsql_database These logs are from sqlagent.out on the Cloud SQL instance. INSTANCE_UID
IS_EXTERNAL_SERVER_REPLICA
LOG_BUCKET_NUM
SOURCE_ID		 DEFAULT
DEBUG
INFO
NOTICE
WARNING
ERROR
CRITICAL
ALERT
EMERGENCY
cloudsql.googleapis.com/operationdetails.log cloudsql_database These logs show details of long running operations such as Import SQL for SQL Server instances. INSTANCE_UID
LOG_BUCKET_NUM
SOURCE_ID		 DEFAULT
DEBUG
INFO
NOTICE
WARNING
ERROR
CRITICAL
ALERT
EMERGENCY
cloudsql.googleapis.com/postgres-upgrade.log cloudsql_database It contains log output by pg_upgrade during database major version upgrade. FILE_NAME
INSTANCE_UID
LOG_BUCKET_NUM
SOURCE_ID		 DEFAULT
DEBUG
INFO
NOTICE
WARNING
ERROR
CRITICAL
ALERT
EMERGENCY
cloudsql.googleapis.com/event.log cloudsql_database It logs structured database environment events such as out of memory. N/A DEFAULT
DEBUG
INFO
NOTICE
WARNING
ERROR
CRITICAL
ALERT
EMERGENCY

Cloud Setup

Logging API service name: cloudsetup.googleapis.com

Log ID Monitored resource Payload Labels Severities
cloudsetup.googleapis.com/complete_deployment api type.googleapis.com/google.cloud.cloudsetup.logging.v1.CompleteDeploymentEvent activity_type_name DEFAULT

Cloud VPN

Logging API service name: vpn.googleapis.com

Log ID Monitored resource Payload Labels Severities
vpn.googleapis.com/ipsec_events vpn_gateway VPN Tunnel logs from the VPN Gateway instance tunnel_id DEBUG
NOTICE

Cloud Workstations

Logging API service name: workstations.googleapis.com

Log ID Monitored resource Payload Labels Severities
workstations.googleapis.com/disk_assignments workstations.googleapis.com/Workstation Disk assignment logs disk NOTICE
workstations.googleapis.com/vm_assignments workstations.googleapis.com/Workstation VM assignment logs external_ip
instance_id
internal_ip
instance_name		 NOTICE
workstations.googleapis.com/workstation_shutdowns workstations.googleapis.com/Workstation Workstation shutdown logs external_ip
instance_id
internal_ip
instance_name
shutdown_reason		 NOTICE

Compute Engine

Logging API service name: compute.googleapis.com

Log ID Monitored resource Payload Labels Severities
compute.googleapis.com/gce_disaster_recovery gce_instance type.googleapis.com/google.compute.logging.dr.v1.DisasterRecoveryEvent N/A N/A
compute.googleapis.com/gce_disaster_recovery gce_disk type.googleapis.com/google.compute.logging.dr.v1.DisasterRecoveryEvent N/A N/A
compute.googleapis.com/gce_disaster_recovery gce_snapshot type.googleapis.com/google.compute.logging.dr.v1.DisasterRecoveryEvent N/A N/A
compute.googleapis.com/gce_disaster_recovery gce_instance_template type.googleapis.com/google.compute.logging.dr.v1.DisasterRecoveryEvent N/A N/A
compute.googleapis.com/gce_disaster_recovery gce_instance_group_manager type.googleapis.com/google.compute.logging.dr.v1.DisasterRecoveryEvent N/A N/A
compute.googleapis.com/gce_disaster_recovery gce_resevered_address type.googleapis.com/google.compute.logging.dr.v1.DisasterRecoveryEvent N/A N/A
compute.googleapis.com/gdnsusage gce_instance type.googleapis.com/google.compute.logging.gdnsusage.v1.GdnsVmUsagePlatformLog resource_name DEBUG

Container Security API

Logging API service name: containersecurity.googleapis.com

Log ID Monitored resource Payload Labels Severities
containersecurity.googleapis.com/finding k8s_cluster type.googleapis.com/cloud.kubernetes.security.containersecurity_logging.Finding N/A INFO

Dataform

Logging API service name: dataform.googleapis.com

Log ID Monitored resource Payload Labels Severities
dataform.googleapis.com/workflow_invocation_completion dataform.googleapis.com/Repository type.googleapis.com/google.cloud.dataform.logging.v1.WorkflowInvocationCompletionLogEntry N/A INFO
WARNING
ERROR

Datapipelines API

Logging API service name: datapipelines.googleapis.com

Log ID Monitored resource Payload Labels Severities
datapipelines.googleapis.com/requests datapipelines.googleapis.com/Location type.googleapis.com/google.cloud.datapipelines.logging.v1.RequestLogEntry N/A DEFAULT
datapipelines.googleapis.com/requests datapipelines.googleapis.com/Pipeline type.googleapis.com/google.cloud.datapipelines.logging.v1.RequestLogEntry N/A DEFAULT

Dataproc

Logging API service name: dataproc.googleapis.com

Log ID Monitored resource Payload Labels Severities
dataproc.googleapis.com/autoscaler cloud_dataproc_cluster type.googleapis.com/google.cloud.dataproc.logging.AutoscalerLog N/A INFO
WARNING
ERROR
CRITICAL
dataproc.googleapis.com/autoscaler cloud_dataproc_batch type.googleapis.com/google.cloud.dataproc.logging.AutoscalerLog N/A INFO
WARNING
ERROR
CRITICAL
dataproc.googleapis.com/autoscaler cloud_dataproc_session type.googleapis.com/google.cloud.dataproc.logging.AutoscalerLog N/A INFO
WARNING
ERROR
CRITICAL
dataproc.googleapis.com/reconciler cloud_dataproc_session type.googleapis.com/google.cloud.dataproc.logging.ReconciliationLog N/A INFO
dataproc.googleapis.com/reconciler cloud_dataproc_cluster type.googleapis.com/google.cloud.dataproc.logging.ReconciliationClusterHealLog N/A INFO
dataproc.googleapis.com/cluster_reconciler cloud_dataproc_cluster type.googleapis.com/google.cloud.dataproc.logging.ReconciliationClusterHealLog N/A INFO

Dataproc Metastore

Logging API service name: metastore.googleapis.com

Log ID Monitored resource Payload Labels Severities
metastore.googleapis.com/background metastore.googleapis.com/Service Dataproc Metastore background logs. logger DEFAULT
ERROR
INFO
WARNING
metastore.googleapis.com/system metastore.googleapis.com/Service Service system logs. method
service_region		 DEFAULT
ERROR
INFO
WARNING
metastore.googleapis.com/requests metastore.googleapis.com/Service Service request logs. method
service_region		 DEFAULT
INFO
metastore.googleapis.com/scheduled_backup metastore.googleapis.com/Service type.googleapis.com/google.cloud.metastore.logging.v1.ScheduledBackupLogEntry N/A DEFAULT
INFO
WARNING
ERROR

Event Threat Detection

Logging API service name: threatdetection.googleapis.com

Log ID Monitored resource Payload Labels Severities
threatdetection.googleapis.com/detection threat_detector Event Threat Detection finding. N/A NOTICE
WARNING
ALERT
CRITICAL
ERROR

Firestore

Logging API service name: firestore.googleapis.com

Log ID Monitored resource Payload Labels Severities
firestore.googleapis.com/undeliverable_first_gen_event firestore.googleapis.com/Database type.googleapis.com/google.firestore.v1beta1.UndeliverableFirstGenEvent firestore.googleapis.com/environment ERROR

Firestore/Datastore

Logging API service name: datastore.googleapis.com

Log ID Monitored resource Payload Labels Severities
datastore.googleapis.com/migration_state datastore_database type.googleapis.com/google.datastore.admin.v1.MigrationStateEvent N/A NOTICE
datastore.googleapis.com/migration_progress datastore_database type.googleapis.com/google.datastore.admin.v1.MigrationProgressEvent N/A INFO

GKE On-prem (Anthos)

Logging API service name: anthos.googleapis.com

Log ID Monitored resource Payload Labels Severities
anthos.googleapis.com/seesaw_engine anthos_l4lb These logs are from seesaw_engine on the Seesaw VM instances running in GKE OnPrem. N/A N/A
anthos.googleapis.com/seesaw_ha anthos_l4lb These logs are from seesaw_ha on the Seesaw VM instances running in GKE OnPrem. N/A N/A
anthos.googleapis.com/seesaw_healthcheck anthos_l4lb These logs are from seesaw_healthcheck on the Seesaw VM instances running in GKE OnPrem. N/A N/A
anthos.googleapis.com/seesaw_ncc anthos_l4lb These logs are from seesaw_ncc on the Seesaw VM instances running in GKE OnPrem. N/A N/A
anthos.googleapis.com/seesaw_ecu anthos_l4lb These logs are from seesaw_ecu on the Seesaw VM instances running in GKE OnPrem. N/A N/A
anthos.googleapis.com/seesaw_config anthos_l4lb These logs are from seesaw_config on the Seesaw VM instances running in GKE OnPrem. N/A N/A

Google Binary Authorization API

Logging API service name: binaryauthorization.googleapis.com

Log ID Monitored resource Payload Labels Severities
binaryauthorization.googleapis.com/continuous_validation k8s_cluster v1beta1: type.googleapis.com/google.cloud.binaryauthorization.v1beta1.ContinuousValidationEvent N/A WARNING

Google Maps Platform - Mobility Billing

Logging API service name: mobilitybilling.googleapis.com

Log ID Monitored resource Payload Labels Severities
mobilitybilling.googleapis.com/external_cloud_logs mobilitybilling.googleapis.com/Project type.googleapis.com/google.maps.mobilitybilling.logs.v1.ReportBillableEventLog environment DEFAULT
ERROR

Google Workspace Add-ons

Logging API service name: gsuiteaddons.googleapis.com

Log ID Monitored resource Payload Labels Severities
gsuiteaddons.googleapis.com/errors g_suite_add_ons type.googleapis.com/google.cloud.gsuiteaddons.logging.v1.GSuiteAddOnsLogEntry N/A ERROR

Identity Toolkit

Logging API service name: identitytoolkit.googleapis.com

Log ID Monitored resource Payload Labels Severities
identitytoolkit.googleapis.com/requests identitytoolkit_project type.googleapis.com/google.cloud.identitytoolkit.logging.RequestLog N/A INFO
ERROR
identitytoolkit.googleapis.com/requests identitytoolkit_tenant type.googleapis.com/google.cloud.identitytoolkit.logging.RequestLog N/A INFO
ERROR

Immersive Stream for XR

Logging API service name: stream.googleapis.com

Log ID Monitored resource Payload Labels Severities
stream.googleapis.com/session_event stream.googleapis.com/StreamInstance type.googleapis.com/google.cloud.stream.logging.v1.SessionEventLog N/A INFO
ERROR

Issuer Switch Service

Logging API service name: issuerswitch.googleapis.com

Log ID Monitored resource Payload Labels Severities
issuerswitch.googleapis.com/pgis_activity issuerswitch.googleapis.com/UPIInstance type.googleapis.com/google.cloud.paymentgateway.issuerswitch.v1.UpiTransaction N/A DEBUG
ERROR
INFO

Key Management Service

Logging API service name: cloudkms.googleapis.com

Log ID Monitored resource Payload Labels Severities
cloudkms.googleapis.com/cryptokey_events cloudkms_cryptokey type.googleapis.com/google.cloud.kms.logging.v1.CryptoKeyEvent N/A INFO
ERROR
cloudkms.googleapis.com/cryptokeyversion_events cloudkms_cryptokeyversion type.googleapis.com/google.cloud.kms.logging.v1.CryptoKeyVersionEvent N/A INFO
ERROR

Live Stream API

Logging API service name: livestream.googleapis.com

Log ID Monitored resource Payload Labels Severities
livestream.googleapis.com/channel_activities livestream.googleapis.com/Channel type.googleapis.com/google.cloud.video.livestream.logging.v1.ChannelActivity N/A INFO
DEBUG
ERROR

Local Rides and Deliveries API

Logging API service name: fleetengine.googleapis.com

Log ID Monitored resource Payload Labels Severities
fleetengine.googleapis.com/update_vehicle_attributes fleetengine.googleapis.com/Fleet type.googleapis.com/maps.fleetengine.v1.UpdateVehicleAttributesLog environment
vehicle_id		 DEFAULT
ERROR

Logging API

Logging API service name: logging.googleapis.com

Log ID Monitored resource Payload Labels Severities
logging.googleapis.com/sink_error logging_sink A report of an error encountered while trying to export data to a configured log sink. activity_type_name
destination
error_code
error_detail
log_entity_id
log_filter
sink_id		 ERROR
logging.googleapis.com/metric_throttled metric Informs customer that a metric associated with Logs-based metrics is being throttled. activity_type_name
dropped_labels
label_cardinalities
limit_type
metric_name
user_cardinality		 WARNING

Network Analyzer

Logging API service name: networkanalyzer.googleapis.com

Log ID Monitored resource Payload Labels Severities
networkanalyzer.googleapis.com/analyzer_reports networking.googleapis.com/Location type.googleapis.com/google.cloud.networkanalyzer.logging.v1.Report N/A DEFAULT

Partner Data Ingestion

Logging API service name: partnerdataingestion.googleapis.com

Log ID Monitored resource Payload Labels Severities
partnerdataingestion.googleapis.com/ingest_details consumed_api type.googleapis.com/google.search.partnerdataingestion.logging.v1.IngestDetailsLog N/A INFO

Recommender API

Logging API service name: recommender.googleapis.com

Log ID Monitored resource Payload Labels Severities
recommender.googleapis.com/actions recommender v1: type.googleapis.com/google.cloud.recommender.logging.v1.ActionLog
v1beta1: type.googleapis.com/google.cloud.recommender.logging.v1beta1.ActionLog		 N/A INFO
recommender.googleapis.com/actions recommender_insight_type v1: type.googleapis.com/google.cloud.recommender.logging.v1.InsightActionLog
v1beta1: type.googleapis.com/google.cloud.recommender.logging.v1beta1.InsightActionLog		 N/A INFO

SaaS Lifecycle Management

Logging API service name: saasmanagement.googleapis.com

Log ID Monitored resource Payload Labels Severities
saasmanagement.googleapis.com/terraform_internal saasmanagement.googleapis.com/Instance type.googleapis.com/google.cloud.saasaccelerator.management.logs.v1.InstanceEvent resource_project_number DEBUG
ERROR
INFO

Secret Manager API

Logging API service name: secretmanager.googleapis.com

Log ID Monitored resource Payload Labels Severities
secretmanager.googleapis.com/secret_event secretmanager.googleapis.com/Secret type.googleapis.com/google.cloud.secretmanager.logging.v1.SecretEvent N/A DEFAULT
DEBUG
INFO
NOTICE
WARNING
ERROR
CRITICAL
ALERT
EMERGENCY

Sensitive Actions Service

Logging API service name: sensitiveaction.googleapis.com

Log ID Monitored resource Payload Labels Severities
sensitiveaction.googleapis.com/action sensitiveaction.googleapis.com/Location type.googleapis.com/google.cloud.sensitiveaction.logging.v1.SensitiveAction N/A NOTICE

Serial Console

Logging API service name: serialconsole.googleapis.com

Log ID Monitored resource Payload Labels Severities
serialconsole.googleapis.com/serial_port_1_output gce_instance A virtual machine instance has four virtual serial ports. The instance's operating system, BIOS, and other system-level entities often write output to the serial ports, which makes them useful for troubleshooting crashes, failed boots, startup issues, or shutdown issues. compute.googleapis.com/resource_name
is_text_escaped		 INFO
DEBUG
serialconsole.googleapis.com/serial_port_2_output gce_instance A virtual machine instance has four virtual serial ports. The instance's operating system, BIOS, and other system-level entities often write output to the serial ports, which makes them useful for troubleshooting crashes, failed boots, startup issues, or shutdown issues. compute.googleapis.com/resource_name
is_text_escaped		 INFO
DEBUG
serialconsole.googleapis.com/serial_port_3_output gce_instance A virtual machine instance has four virtual serial ports. The instance's operating system, BIOS, and other system-level entities often write output to the serial ports, which makes them useful for troubleshooting crashes, failed boots, startup issues, or shutdown issues. compute.googleapis.com/resource_name
is_text_escaped		 INFO
DEBUG
serialconsole.googleapis.com/serial_port_4_output gce_instance A virtual machine instance has four virtual serial ports. The instance's operating system, BIOS, and other system-level entities often write output to the serial ports, which makes them useful for troubleshooting crashes, failed boots, startup issues, or shutdown issues. compute.googleapis.com/resource_name
is_text_escaped		 INFO
DEBUG
serialconsole.googleapis.com/serial_port_debug_output gce_instance A virtual machine instance has four virtual serial ports. The instance's operating system, BIOS, and other system-level entities often write output to the serial ports, which makes them useful for troubleshooting crashes, failed boots, startup issues, or shutdown issues. compute.googleapis.com/resource_name
is_text_escaped		 INFO
DEBUG

Storage Transfer

Logging API service name: storagetransfer.googleapis.com

Log ID Monitored resource Payload Labels Severities
storagetransfer.googleapis.com/transfer_activity storage_transfer_job type.googleapis.com/google.storagetransfer.logging.TransferActivityLog N/A INFO
WARNING
ERROR

Traffic Director

Logging API service name: trafficdirector.googleapis.com

Log ID Monitored resource Payload Labels Severities
trafficdirector.googleapis.com/events gce_network type.googleapis.com/google.networking.trafficdirector.type.TrafficDirectorLogEntry N/A ERROR
INFO
WARNING
trafficdirector.googleapis.com/events gateway_scope type.googleapis.com/google.networking.trafficdirector.type.TrafficDirectorLogEntry N/A ERROR
INFO
trafficdirector.googleapis.com/events mesh type.googleapis.com/google.networking.trafficdirector.type.TrafficDirectorLogEntry N/A INFO

Vertex AI API

Logging API service name: aiplatform.googleapis.com

Log ID Monitored resource Payload Labels Severities
aiplatform.googleapis.com/pipeline_job_events aiplatform.googleapis.com/PipelineJob type.googleapis.com/google.cloud.aiplatform.logging.PipelineJobLogEntry network
pipeline_name
pipeline_type
service_account
template_metadata_version
template_uri
vertex-ai-pipelines-run-billing-id
vertex_pipeline_system_label_propagate_labels		 ERROR
INFO
aiplatform.googleapis.com/pipeline_job_task_events aiplatform.googleapis.com/PipelineJob type.googleapis.com/google.cloud.aiplatform.logging.PipelineJobTaskLogEntry custom_job_id
network
pipeline_name
schedule_name
service_account
template_metadata_version
template_uri
vertex-ai-pipelines-run-billing-id
vertex_pipeline_system_label_propagate_labels		 ERROR
INFO

Web Security Scanner API

Logging API service name: websecurityscanner.googleapis.com

Log ID Monitored resource Payload Labels Severities
websecurityscanner.googleapis.com/scan_activity security_scanner_scan_config type.googleapis.com/google.cloud.websecurityscanner.v1.ScanRunLog N/A ERROR
WARNING
INFO

Workflows

Logging API service name: workflows.googleapis.com

Log ID Monitored resource Payload Labels Severities
workflows.googleapis.com/engine_call workflows.googleapis.com/Workflow type.googleapis.com/google.cloud.workflows.type.EngineCallLog workflows.googleapis.com/execution_id
workflows.googleapis.com/revision_id		 DEBUG
workflows.googleapis.com/executions_system workflows.googleapis.com/Workflow type.googleapis.com/google.cloud.workflows.type.ExecutionsSystemLog workflows.googleapis.com/execution_id
workflows.googleapis.com/revision_id		 INFO
ERROR

reCAPTCHA Enterprise

Logging API service name: recaptchaenterprise.googleapis.com

Log ID Monitored resource Payload Labels Severities
recaptchaenterprise.googleapis.com/assessment recaptchaenterprise.googleapis.com/Key type.googleapis.com/google.cloud.recaptchaenterprise.v1.Assessment N/A DEFAULT
ERROR
recaptchaenterprise.googleapis.com/annotation recaptchaenterprise.googleapis.com/Key type.googleapis.com/google.cloud.recaptchaenterprise.v1.AnnotateAssessmentRequest N/A DEFAULT
ERROR

Understand and manage platform logs

The following sections provide basic information about using and managing platform logs in Cloud Logging.

Log entry structure

Cloud Logging represents logs using a single data type, LogEntry, which defines certain common data for all log entries as well as the payloads that Google Cloud services can include. For detailed information about the contents of log entries, see the Logging API reference for the LogEntry type.

The index of platform logs highlights the following characteristics of log entries:

  • Log ID: The URL-encoded identifier within logName. For example, if the broader log name is organizations/1234567890/logs/cloudresourcemanager.googleapis.com/activity, then the log ID is cloudresourcemanager.googleapis.com/activity.

    Note that if the log ID string in a log entry's logName field is prefixed by serviceName.googleapis.com, it is a Google Cloud platform log entry.

  • Monitored resource: The resource from which the log entry originated. This consists of a resource type from the Monitored resource list and additional label values that identify a specific instance.

  • Payload: The log entry payload, which can be represented as textPayload or jsonPayload.

View logs

There are several ways to view your platform log entries:

Route logs

You can control how your log entries are routed and stored. The Log Router checks each log entry against existing rules to determine which log entries to discard, which log entries to store in Cloud Logging, and which log entries to include in exports to other destinations.

For details, see Routing and storage overview: Log Router.

Logs retention

Log entries are stored in Logging buckets for a specified length of time and are then deleted. For more information, see Logs retention periods.

Pricing

Cloud Logging doesn't charge to route logs to a supported destination; however, the destination might apply charges. With the exception of the _Required log bucket, Cloud Logging charges to stream logs into log buckets and for storage longer than the default retention period of the log bucket.

Cloud Logging doesn't charge for copying logs, or for queries issued through the Logs Explorer page or through the Log Analytics page.

For more information, see the following documents: