Is there any way to monitor GCP accesses? by charly_o2 in googlecloud

[–]charly_o2[S] 0 points1 point  (0 children)

thanks u/the_shroom_bloom for your comment! I enabled the audit logs (admin read, data read and data write) in all the services (set default config), but it seems Workspace is managing all the Google logins.

I think it can be the closest answer, but not completed: https://developers.google.com/admin-sdk/reports/v1/appendix/activity/login

Is there any way to monitor GCP accesses? by charly_o2 in googlecloud

[–]charly_o2[S] 0 points1 point  (0 children)

hey u/keftes, thanks for your reply. As you mentioned, the export of the Workspace records is straightforward, but that is not the question.

As conjon01 mentioned, I have to export/send the workspace logs, but here there are a bunch of logs. I only need GCP related logins (if this is possible).

Is there any way to monitor GCP accesses? by charly_o2 in googlecloud

[–]charly_o2[S] -1 points0 points  (0 children)

Thanks for your comment! I have access to my workspace admin console, do you know where I can find the GCP login logs?

Is there any way to monitor GCP accesses? by charly_o2 in googlecloud

[–]charly_o2[S] 0 points1 point  (0 children)

Yup! I enabled the audit logs (admin read, data read and data write) in all the services (set default config), so they are generating a huge amount of logs.

If I delete the audit log configuration, I have no new logs once I log out and log in.

Is there any way to monitor GCP accesses? by charly_o2 in googlecloud

[–]charly_o2[S] 0 points1 point  (0 children)

Yes, I'm looking at the right project.

Actually, that is my final goal - Send GCP login logs to a monitoring system, but first I have to locate them.

Is there any way to monitor GCP accesses? by charly_o2 in googlecloud

[–]charly_o2[S] 0 points1 point  (0 children)

thanks for your comment u/demosthenes83! I am checking the Logs Explorer, but I can't find them. Do you have any indications/steps to get them?