Skip to content

Instantly share code, notes, and snippets.

@bskim45

bskim45/README.md

Last active February 6, 2023 09:48
Show Gist options
  • Save bskim45/0803b84a95ee7d8d608bc956ac606e54 to your computer and use it in GitHub Desktop.
Save bskim45/0803b84a95ee7d8d608bc956ac606e54 to your computer and use it in GitHub Desktop.
Download ZIP
BigQuery Audit Log Cheatsheet (Cloud Logging)
Raw
README.md

BigQuery Audit Log Cheatsheet (Cloud Logging)

Audit log format reference: https://cloud.google.com/bigquery/docs/reference/auditlogs

More sample queries: https://cloud.google.com/logging/docs/view/query-library#bigquery-filters

Get logs for dataset delete operations:

resource.type="bigquery_resource"
protoPayload.methodName="datasetservice.delete"
protoPayload.resourceName:"projects/{project_id}/datasets/{dataset_id}"

Get logs for table delete operations:

// exact match
resource.type="bigquery_resource"
protoPayload.methodName="tableservice.delete"
protoPayload.resourceName="projects/{project_id}/datasets/{dataset_id}/tables/{table_id}"

// filter by dataset (match by prefix)
resource.type="bigquery_resource"
protoPayload.methodName="tableservice.delete"
protoPayload.resourceName:"projects/{project_id}/datasets/{dataset_id}/"
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment