[ Web Proxy ]
URL:
Viewing: https://docs.cloud.google.com/logging/docs/audit-logging [Back]  [Original]

Cloud Logging audit logging  |  Google Cloud Documentation Skip to main content
Google Cloud Documentation [Google Cloud Documentation]
Send feedback

Cloud Logging audit logging Stay organized with collections Save and categorize content based on your preferences.

This document lists the audited methods for Cloud Logging. Google Cloud services generate audit logs that record administrative and access activities within your Google Cloud resources. For more information about Cloud Audit Logs, see the following:

Service name

To view the Cloud Logging audit logs, do the following:

  1. In the Google Cloud console, go to the Logs Explorer page:

    Go to Logs Explorer

  2. Copy and paste the following query into the Query field of the Logs Explorer, and then click Run query.

        protoPayload.serviceName="logging.googleapis.com"
      

Methods by permission type

Each IAM permission has a type property, whose value is an enum that can be one of four values: ADMIN_READ, ADMIN_WRITE, DATA_READ, or DATA_WRITE. When you call a method, Cloud Logging generates an audit log whose category is dependent on the type property of the permission required to perform the method. Methods that require an IAM permission with the type property value of DATA_READ, DATA_WRITE, or ADMIN_READ generate Data Access audit logs. Methods that require an IAM permission with the type property value of ADMIN_WRITE generate Admin Activity audit logs.

API methods in the following list that are marked with (LRO) are long-running operations (LROs). These methods usually generate two audit log entries: one when the operation starts and another when it ends. For more information see Audit logs for long-running operations.
Permission type Methods
ADMIN_READ google.cloud.location.Locations.GetLocation
google.cloud.location.Locations.ListLocations
google.iam.v1.IAMPolicy.GetIamPolicy
google.logging.v2.ConfigServiceV2.GetBucket
google.logging.v2.ConfigServiceV2.GetCmekSettings
google.logging.v2.ConfigServiceV2.GetExclusion
google.logging.v2.ConfigServiceV2.GetLink
google.logging.v2.ConfigServiceV2.GetLogScope
google.logging.v2.ConfigServiceV2.GetSettings
google.logging.v2.ConfigServiceV2.GetSink
google.logging.v2.ConfigServiceV2.GetView
google.logging.v2.ConfigServiceV2.ListBuckets
google.logging.v2.ConfigServiceV2.ListExclusions
google.logging.v2.ConfigServiceV2.ListLinks
google.logging.v2.ConfigServiceV2.ListLogScopes
google.logging.v2.ConfigServiceV2.ListSinks
google.logging.v2.ConfigServiceV2.ListViews
google.logging.v2.LoggingServiceV2.ListLogs
google.logging.v2.MetricsServiceV2.GetLogMetric
google.logging.v2.MetricsServiceV2.ListLogMetrics
google.longrunning.Operations.GetOperation
google.longrunning.Operations.ListOperations
ADMIN_WRITE google.iam.v1.IAMPolicy.SetIamPolicy
google.logging.v2.ConfigServiceV2.CreateBucket
google.logging.v2.ConfigServiceV2.CreateBucketAsync (LRO)
google.logging.v2.ConfigServiceV2.CreateExclusion
google.logging.v2.ConfigServiceV2.CreateLink (LRO)
google.logging.v2.ConfigServiceV2.CreateLogScope
google.logging.v2.ConfigServiceV2.CreateSink
google.logging.v2.ConfigServiceV2.CreateView
google.logging.v2.ConfigServiceV2.DeleteBucket
google.logging.v2.ConfigServiceV2.DeleteExclusion
google.logging.v2.ConfigServiceV2.DeleteLink (LRO)
google.logging.v2.ConfigServiceV2.DeleteLogScope
google.logging.v2.ConfigServiceV2.DeleteSink
google.logging.v2.ConfigServiceV2.DeleteView
google.logging.v2.ConfigServiceV2.UndeleteBucket
google.logging.v2.ConfigServiceV2.UpdateBucket
google.logging.v2.ConfigServiceV2.UpdateBucketAsync (LRO)
google.logging.v2.ConfigServiceV2.UpdateCmekSettings
google.logging.v2.ConfigServiceV2.UpdateExclusion
google.logging.v2.ConfigServiceV2.UpdateLogScope
google.logging.v2.ConfigServiceV2.UpdateSettings
google.logging.v2.ConfigServiceV2.UpdateSink
google.logging.v2.ConfigServiceV2.UpdateView
google.logging.v2.LoggingServiceV2.DeleteLog
google.logging.v2.MetricsServiceV2.CreateLogMetric
google.logging.v2.MetricsServiceV2.DeleteLogMetric
google.logging.v2.MetricsServiceV2.UpdateLogMetric
google.longrunning.Operations.CancelOperation
DATA_READ google.logging.v2.ConfigServiceV2.CopyLogEntries (LRO)
google.logging.v2.LoggingServiceV2.ListLogEntries

API interface audit logs

For information about how and which permissions are evaluated for each method, see the Identity and Access Management documentation for Cloud Logging.

google.cloud.location.Locations

The following audit logs are associated with methods belonging to google.cloud.location.Locations.

GetLocation

ListLocations

google.iam.v1.IAMPolicy

The following audit logs are associated with methods belonging to google.iam.v1.IAMPolicy.

GetIamPolicy

SetIamPolicy

google.logging.v2.ConfigServiceV2

The following audit logs are associated with methods belonging to google.logging.v2.ConfigServiceV2.

CopyLogEntries

CreateBucket

CreateBucketAsync

CreateExclusion

CreateLogScope

CreateSink

CreateView

DeleteBucket

DeleteExclusion

DeleteLogScope

DeleteSink

DeleteView

GetBucket

GetCmekSettings

GetExclusion

GetLogScope

GetSettings

GetSink

GetView

ListBuckets

ListExclusions

ListLogScopes

ListSinks

ListViews

UndeleteBucket

UpdateBucket

UpdateBucketAsync

UpdateCmekSettings

UpdateExclusion

UpdateLogScope

UpdateSettings

UpdateSink

UpdateView

google.logging.v2.LoggingServiceV2

The following audit logs are associated with methods belonging to google.logging.v2.LoggingServiceV2.

DeleteLog

ListLogEntries

ListLogs

google.logging.v2.MetricsServiceV2

The following audit logs are associated with methods belonging to google.logging.v2.MetricsServiceV2.

CreateLogMetric

DeleteLogMetric

GetLogMetric

ListLogMetrics

UpdateLogMetric

google.longrunning.Operations

The following audit logs are associated with methods belonging to google.longrunning.Operations.

CancelOperation

GetOperation

ListOperations

Methods that don't produce audit logs

A method might not produce audit logs for one or more of the following reasons:

The following methods don't produce audit logs:

Send feedback

Except as otherwise noted, the content of this page is licensed under the Creative Commons Attribution 4.0 License, and code samples are licensed under the Apache 2.0 License. For details, see the Google Developers Site Policies. Java is a registered trademark of Oracle and/or its affiliates.

Last updated 2026-08-12 UTC.

Need to tell us more? [[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Hard to understand","hardToUnderstand","thumb-down"],["Incorrect information or sample code","incorrectInformationOrSampleCode","thumb-down"],["Missing the information/samples I need","missingTheInformationSamplesINeed","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2026-08-12 UTC."],[],[]]

Web Proxy Viewer  |  New URL  |  Original Page