Note
Access to this page requires authorization. You can try signing in or changing directories.
Access to this page requires authorization. You can try changing directories.
The Google Cloud Platform (GCP) Kubernetes Engine data connector allows you to monitor containerized applications, track performance metrics, and detect potential threats across your GKE environment.
Table attributes
| Attribute | Value |
|---|---|
| Resource types | - |
| Categories | Security |
| Solutions | SecurityInsights |
| Basic log | Yes |
| Ingestion-time transformation | No |
| Sample Queries | - |
Columns
| Column | Type | Description |
|---|---|---|
| _BilledSize | real | The record size in bytes |
| ClusterName | string | The name of the GKE cluster from which the log entry originated. |
| ComputeResourceName | string | The name of the underlying compute resource (such as the node or instance). |
| ContainerName | string | The name of the container inside the pod that generated the log. |
| InsertId | string | A unique identifier for the log entry, useful for deduplication. |
| _IsBillable | string | Specifies whether ingesting the data is billable. When _IsBillable is false ingestion isn't billed to your Azure account |
| JsonPayload | dynamic | Structured JSON-formatted log content if available. |
| Labels | dynamic | Key-value pairs providing additional metadata about the log entry. |
| Location | string | The GCP region or zone where the log entry was generated. |
| LogName | string | The full resource name of the log (e.g., 'projects/[PROJECT_ID]/logs/[LOG_ID]'). |
| NamespaceName | string | The Kubernetes namespace associated with the log entry. |
| PodName | string | The name of the Kubernetes pod where the container is running. |
| ProjectID | string | The ID of the Google Cloud project where the log entry originated. |
| ReceiveTimestamp | datetime | The time the log entry was received by the logging system. |
| Severity | string | The severity level of the log entry (e.g., DEBUG, INFO, WARNING, ERROR). |
| SourceSystem | string | The type of agent the event was collected by. For example, OpsManager for Windows agent, either direct connect or Operations Manager, Linux for all Linux agents, or Azure for Azure Diagnostics |
| TenantId | string | The Log Analytics workspace ID |
| TextPayload | string | Unstructured text message associated with the log entry. |
| TimeGenerated | datetime | The timestamp indicating when the log event was created or generated by the source system. |
| Type | string | The name of the table |