Is Audit logging enabled by default on GCP?

0 votes

Does GCP have audit logging enabled by default?

I'm interested in logs which record when VM instances and App Engine applications are created.

However, I've tried creating a VM instance on my project's compute Engine and checking the Stackdriver logs, however nothing shows up.

I don't think it's a permissions issue, as I have the permissions and can see various older logs in the Audited Resource category.

Sep 27, 2019 in GCP by Karan
• 10,310 points
146 views

1 answer to this question.

0 votes

The first thing to know about Cloud Audit Logging is that each project consists of two log streams: admin activity and data access.

GCP services generate these logs to help you answer the question of "who did what, where, and when?" within your GCP projects.

Further, these logs are distinct from your application logs.

  • Admin activity logs contain log entries for API calls or other administrative actions that modify the configuration or metadata of resources. Admin activity logs are always enabled. There's no charge for admin activity audit logs, and they're retained for 13 months/400 days.

  • Data access logs, on the other hand, record API calls that create, modify or read user-provided data. Data access audit logs are disabled by default because they can grow to be quite large.

answered Sep 27, 2019 by Sirajul
• 53,970 points

Related Questions In GCP

0 votes
1 answer
0 votes
1 answer
0 votes
1 answer
0 votes
1 answer

Creating a SQL Server instance using Google Compute engine.

Google Compute Engine provides public images preconfigured with ...READ MORE

answered Sep 23, 2019 in GCP by Sirajul
• 53,970 points
327 views
0 votes
1 answer
0 votes
1 answer

How do i install gcloud compute?

The gcloud compute command-line tool enables you to easily ...READ MORE

answered Sep 23, 2019 in GCP by Sirajul
• 53,970 points
261 views
0 votes
1 answer

Creating password for a windows instance on GCP

Windows Server instances use password authentication instead ...READ MORE

answered Sep 24, 2019 in GCP by Sirajul
• 53,970 points
893 views
0 votes
1 answer