Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊
Reference for GCPNATAudit table in Azure Monitor Logs.
| Attribute | Value |
|---|---|
| Category | GCP |
| Basic Logs Eligible | ✓ Yes (source) |
| Supports Transformations | ✓ Yes (source) |
| Ingestion API Supported | ✓ Yes |
| Lake-Only Ingestion | ✓ Yes (source) |
| Azure Monitor Tables Reference | View Documentation |
| Azure Monitor Logs Ingestion API | View Documentation |
Source: Azure Monitor documentation
| Column Name | Type | Description |
|---|---|---|
| _BilledSize | real | The record size in bytes |
| _IsBillable | string | Specifies whether ingesting the data is billable. When _IsBillable is false ingestion isn't billed to your Azure account |
| AuthorizationInfo | string | Details about the authorization. |
| CallerIp | string | IP address of the caller. |
| EncryptedInterconnectRouter | bool | Whether the router uses encrypted interconnect. |
| GCPResourceName | string | Name of the resource affected. |
| GCPResourceType | string | Type of the GCP resource. |
| InsertId | string | A unique ID for the log entry. |
| LogName | string | The name of the log stream. |
| MethodName | string | API method invoked. |
| OperationFirst | bool | Indicates if this is the first operation in the series. |
| OperationId | string | Identifier of the operation. |
| OperationLast | bool | Indicates if this is the last operation in the series. |
| OperationProducer | string | Producer of the operation. |
| PayloadRequestNats | string | NATs request payload. |
| PayloadType | string | Type of payload in the log. |
| PrincipalEmail | string | Email of the principal initiating the request. |
| PrincipalSubject | string | Subject or identity of the principal. |
| ProjectId | string | GCP Project ID where the event occurred. |
| ReceiveTimestamp | datetime | Time when the log was received. |
| RequestAttributeAuth | string | Authorization details of the request. |
| RequestAttributeDestination | string | Destination details of the request. |
| RequestAttributeTime | datetime | Timestamp of the request attribute. |
| RequestId | string | Unique ID of the request. |
| RequestName | string | Name of the request. |
| RequestNetwork | string | Network where the request was made. |
| RequestRegion | string | Region where the request originated. |
| RequestSelfLink | string | SelfLink URL of the request resource. |
| RequestType | string | Type of the request. |
| ResourceLocation | string | Geographic location of the resource. |
| ResourceRegion | string | Region of the GCP resource. |
| ResponseErrorCode | string | Error code if any error occurred. |
| ResponseErrorMessage | string | Error message returned, if any. |
| ResponseErrors | string | Details of any errors returned. |
| ResponseId | string | Identifier of the response. |
| ResponseInsertTime | datetime | Insert time of the response. |
| ResponseName | string | Name of the response. |
| ResponseOperationType | string | Type of operation performed. |
| ResponseProgress | string | Progress status of the response. |
| ResponseRegion | string | Region associated with the response. |
| ResponseSelfLink | string | SelfLink URL of the response. |
| ResponseSelfLinkWithId | string | SelfLink URL with ID in the response. |
| ResponseStartTime | datetime | Start time of the response. |
| ResponseStatus | string | Status of the response. |
| ResponseTargetId | string | Target ID in the response. |
| ResponseTargetLink | string | Target link in the response. |
| ResponseType | string | Type of the response returned. |
| ResponseUser | string | User returned in the response. |
| RootTriggerId | string | Root trigger ID of the operation. |
| RouterId | string | Identifier of the Cloud Router. |
| ServiceName | string | Name of the GCP service. |
| Severity | string | Severity level of the event. |
| SourceSystem | string | The type of agent the event was collected by. For example, OpsManager for Windows agent, either direct connect or Operations Manager, Linux for all Linux agents, or Azure for Azure Diagnostics |
| TenantId | string | The Log Analytics workspace ID |
| TimeGenerated | datetime | The time at which the log was generated. |
| Type | string | The name of the table |
| UserAgent | string | User agent string of the caller. |
This table is used by the following solutions:
This table is ingested by the following connectors:
| Connector | Selection Criteria |
|---|---|
| Google Cloud Platform NAT (via Codeless Connector Framework) |
Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊