Audit log example

This page shows an example of a Data Access audit log entry that is generated when you send a write request to Bigtable. For more details about audit log entries, see Understanding audit logs. For a list of Bigtable fields that are logged, see Audit log fields.

For brevity, some parts of the log entry are omitted, and some fields are highlighted for emphasis.

{
protoPayload:{
@type:"type.googleapis.com/google.cloud.audit.AuditLog",
status:{},
authenticationInfo:{
principalEmail:"user@example.com",
serviceAccountDelegationInfo:[
{
firstPartyPrincipal:{
principalEmail:"service-123@compute-system.iam.gserviceaccount.com"
}
}
],
principalSubject": "serviceAccount:123-compute@developer.gserviceaccount.com"
 },
 requestMetadata: {
 callerIp: "12.586.9.1",
 callerSuppliedUserAgent: "bigtable-1.4.0,jdk-1.8,hbase-1.4.7grpc-java-netty/1.10.1,gzip(gfe)",
 requestAttributes: {
 time: "2020年12月10日T03:22:59.373508362Z",
 auth: {}
 },
 destinationAttributes: {}
 },
 serviceName: "bigtable.googleapis.com",
 methodName: "google.bigtable.v2.Bigtable.MutateRow",
 authorizationInfo: [
 {
 resource: "projects/test-project/instances/test-instance/tables/test-table",
 permission: "bigtable.tables.mutateRows",
 granted: true,
 resourceAttributes: {}
 }
 ],
 resourceName: "projects/test-project/instances/test-instance/tables/test-table",
 request: {
 mutations: [
 {
 setCell: {
 familyName: "cf1",
 }
 }
 ],
 tableName: "projects/test-project/instances/test-instance/tables/test-table",
 @type: "type.googleapis.com/google.bigtable.v2.MutateRowRequest",
 rowKey: "cm93LWtleQ=="
 },
 },
 insertId: "1wt6rdna0",
 resource: {
 type: "audited_resource",
 labels: {
 service: "bigtable.googleapis.com",
 project_id: "test-project",
 method: "google.bigtable.v2.Bigtable.MutateRow"
 }
 },
 timestamp: "2019年05月27日T16:24:56.135Z",
 severity: "NOTICE",
 logName: "projects/test-project/logs/cloudaudit.googleapis.com%2Fdata_access",
 receiveTimestamp: "2020年05月27日T04:56:47.427539594Z"
 }