ProtoPayload Service | Hide Query Show Query serviceName:= protoPayload.serviceName|groupBy("serviceName")
| Table |
Severity | Hide Query Show Query resource.labels.project_id=?Project AND severity=?Severity|groupBy("severity")
| Pie Chart |
Raw Events | Hide Query Show Query |resource.labels.project_id=?Project AND severity=?Severity|
| Event List |
Events by Resources | Hide Query Show Query resource.labels.project_id=?Project AND severity=?Severity|resource:=resource.type|top(resource)
| Table |
Audit events by Severity | Hide Query Show Query resource.labels.project_id=?Project AND severity=?Severity|timechart("severity")
| Time Chart |
Logfiles | Hide Query Show Query resource.labels.project_id=?Project AND severity=?Severity|top(logName)|logname:=splitString(field=logName, by="/")|logname:=logname[3]|select([logname,_count])
| Table |
Methods by Principal | Hide Query Show Query resource.labels.project_id=?Project AND severity=?Severity|eval(principalEmail=protoPayload.authenticationInfo.principalEmail) | principalEmail="*@*"|methods := protoPayload.methodName|groupBy([principalEmail, methods])
| Table |
Events over time | Hide Query Show Query resource.labels.project_id=?Project AND severity=?Severity|timeChart(span=1h, function=count())
| Time Chart |
Top Methods | Hide Query Show Query resource.labels.project_id=?Project AND severity=?Severity|methods := protoPayload.methodName| top(methods)
| Table |
Events | Hide Query Show Query resource.labels.project_id=?Project AND severity=?Severity|count()
| Gauge |
ProtoPayload Methods | Hide Query Show Query resource.labels.project_id=?Project AND severity=?Severity|methods := protoPayload.methodName |groupBy("methods")
| Pie Chart |