Note
Access to this page requires authorization. You can try signing in or changing directories.
Access to this page requires authorization. You can try changing directories.
The Google Cloud Platform (GCP) Kubernetes Engine data connector allows you to monitor containerized applications, track performance metrics, and detect potential threats across your GKE environment.
Table attributes
| Attribute | Value |
|---|---|
| Resource types | - |
| Categories | Security |
| Solutions | SecurityInsights |
| Basic log | Yes |
| Ingestion-time transformation | No |
| Sample Queries | - |
Columns
| Column | Type | Description |
|---|---|---|
| _BilledSize | real | The record size in bytes |
| ClusterName | string | The name of the GKE cluster from which the log was generated. |
| ComponentLocation | string | The zone or region of the Kubernetes component emitting the log. |
| ComponentName | string | The name of the GKE control plane component (e.g., kube-controller-manager). |
| ComputeResourceName | string | The name of the compute resource (e.g., VM name or controller name) associated with the log. |
| Duration | string | The time duration the operation took, generally in seconds with fractional precision (e.g., 1.234567s). |
| InsertId | string | A unique identifier for the log entry to prevent duplication. |
| _IsBillable | string | Specifies whether ingesting the data is billable. When _IsBillable is false ingestion isn't billed to your Azure account |
| Key | string | A unique identifier for the Kubernetes resource (typically namespace/name). |
| Kind | string | The type of Kubernetes resource being managed or referenced (e.g., Deployment, ReplicaSet). |
| Labels | dynamic | Dynamic field containing various labels associated with the log entry. |
| Location | string | The geographical location (region or zone) of the cluster. |
| Logger | string | The logging class or module that generated the message, often used for categorizing logs. |
| LogName | string | The full resource name of the log (e.g., projects/{project_id}/logs/{log_id}). |
| Message | string | The content of the log message. |
| Pid | string | The process ID of the component that emitted the log, if available. |
| ProjectID | string | The Google Cloud project ID where the GKE cluster is hosted. |
| ReceiveTimestamp | datetime | The time the log was received by Cloud Logging. |
| Severity | string | The severity level of the log (e.g., DEBUG, INFO, WARNING, ERROR). |
| SourceFile | string | The source file in the Kubernetes codebase where the log originated. |
| SourceLine | string | The line number in the source file where the log was emitted. |
| SourceSystem | string | The type of agent the event was collected by. For example, OpsManager for Windows agent, either direct connect or Operations Manager, Linux for all Linux agents, or Azure for Azure Diagnostics |
| SyncStatus | string | The synchronization status or result of the controller operation (e.g., success, error, requeue). |
| TenantId | string | The Log Analytics workspace ID |
| TimeGenerated | datetime | The timestamp indicating when the log event was created or generated by the source system. |
| Type | string | The name of the table |