One difficult half right here is that some companies (e.g., BigQuery) have Audit Logs enabled by default and you can’t disable them. These companies won’t present up within the checklist of companies however that’s okay. You’ll be able to take into account them as Audit Log enabled and transfer on to the following step.
Step 2: Carry out an operation on the service
Subsequent, carry out an operation on the service that you just’re serious about. For instance, in the event you’re serious about object creation occasions in Cloud Storage, then, create/copy an object right into a bucket:
gsutil cp random.txt gs://events-storage-atamel/random.txt
This won’t solely create the thing within the bucket however it should additionally generate an Audit Log entry for it. Within the subsequent step, you’ll test this Audit Log.
Step 3: Verify Audit Logs and convert to occasion filters
Within the final step, test Audit Logs for the occasion you generated within the earlier step.
Logs Explorer in Cloud Console. The Question outcomes part lists essentially the most not too long ago generated logs. The Question builder part can be utilized to filter via logs.
On this instance, we’re serious about Cloud Storage occasions and solely from a sure bucket. That is the question we are able to run to filter the outcomes: