Is Audit logging enabled by default on GCP?

0 votes

Does GCP have audit logging enabled by default?

I'm interested in logs which record when VM instances and App Engine applications are created.

However, I've tried creating a VM instance on my project's compute Engine and checking the Stackdriver logs, however nothing shows up.

I don't think it's a permissions issue, as I have the permissions and can see various older logs in the Audited Resource category.

Sep 27 in GCP by Karan
• 3,250 points
16 views

1 answer to this question.

0 votes

The first thing to know about Cloud Audit Logging is that each project consists of two log streams: admin activity and data access.

GCP services generate these logs to help you answer the question of "who did what, where, and when?" within your GCP projects.

Further, these logs are distinct from your application logs.

  • Admin activity logs contain log entries for API calls or other administrative actions that modify the configuration or metadata of resources. Admin activity logs are always enabled. There's no charge for admin activity audit logs, and they're retained for 13 months/400 days.

  • Data access logs, on the other hand, record API calls that create, modify or read user-provided data. Data access audit logs are disabled by default because they can grow to be quite large.

answered Sep 27 by Sirajul
• 29,340 points

Related Questions In GCP

0 votes
1 answer
0 votes
1 answer

Changing Machine Instance on GCP

There is no direct method to change ...READ MORE

answered Aug 1, 2018 in GCP by kurt_cobain
• 9,240 points
41 views
0 votes
1 answer

How do I create a Virtual Machine on GCP?

To create a VM instance: It is important you ...READ MORE

answered Sep 20 in GCP by Sirajul
• 29,340 points
28 views
0 votes
1 answer
0 votes
1 answer

Creating a SQL Server instance using Google Compute engine.

Google Compute Engine provides public images preconfigured with ...READ MORE

answered Sep 23 in GCP by Sirajul
• 29,340 points
18 views
0 votes
1 answer

How do i install gcloud compute?

The gcloud compute command-line tool enables you to easily ...READ MORE

answered Sep 23 in GCP by Sirajul
• 29,340 points
16 views
0 votes
1 answer

Creating password for a windows instance on GCP

Windows Server instances use password authentication instead ...READ MORE

answered Sep 24 in GCP by Sirajul
• 29,340 points
44 views