GCPCloudRun

GCPCloudRun Schema #

Table description #

TableSection TableType TableSectionName Description
Usx Regular Microsoft Sentinel The GCP Cloud Run data connector provides the capability to ingest Cloud Run request logs into Microsoft Sentinel using Pub/Sub. Refer the Cloud Run Overview for more details.

Table retention #

HotDays ColdDays TotalInteractiveDays
14 16 30

Schema #

Name Description Type
_BilledSize Double
_IsBillable String
GCPResourceType The type of GCP resource (e.g., ‘CloudRunService’, ‘CloudRunJob’). String
InsertId Unique identifier for the log entry. String
Labels Generic labels associated with the log entry. String
LogName The name of the log from which the entry originated. String
PayloadAuthenticationInfoPrincipalSubject The subject identifier of the authenticated principal. String
PayloadAuthenticationInfoServiceAccountKeyName The name of the service account key used for authentication. String
PayloadAuthInfoPrincipalEmail The email address of the principal (user or service account) that initiated the action. String
PayloadAuthorizationInfo Detailed authorization information for the logged action, represented as a Dynamic (JSON) object. Object
PayloadMethodName The name of the API method that was invoked. String
PayloadRequestBuildpackBuildBaseImage The base image used by the buildpack for the build process. String
PayloadRequestBuildpackBuildEnableAutomaticUpdates Indicates whether automatic updates are enabled for the buildpack build. String
PayloadRequestDomainMappingApiVersion The API version of the Cloud Run domain mapping in the request. String
PayloadRequestDomainMappingKind The ‘kind’ of the Cloud Run domain mapping (e.g., ‘DomainMapping’). String
PayloadRequestDomainMappingMetadataAnnotations Annotations associated with the Cloud Run domain mapping’s request metadata. String
PayloadRequestDomainMappingMetadataName The name of the Cloud Run domain mapping within the request metadata. String
PayloadRequestDomainMappingMetadataNameSpace The namespace of the Cloud Run domain mapping within the request metadata. String
PayloadRequestDomainMappingSpec The specification details of the Cloud Run domain mapping in the request. String
PayloadRequestDomainMappingStatus The status of the Cloud Run domain mapping in the request. String
PayloadRequestImageUri The URI of the container image used for the Cloud Run service. String
PayloadRequestJobApiVersion The API version of the Cloud Run job in the request. String
PayloadRequestJobKind The ‘kind’ of the Cloud Run job (e.g., ‘Job’). String
PayloadRequestJobMetadataAnnotations Annotations associated with the Cloud Run job’s request metadata. String
PayloadRequestJobMetadataName The name of the Cloud Run job within the request metadata. String
PayloadRequestJobMetadataNameSpace The namespace of the Cloud Run job within the request metadata. String
PayloadRequestJobSpec The specification details of the Cloud Run job in the request. String
PayloadRequestLabelSelector The label selector used in the request, typically for filtering resources. String
PayloadrequestMetadataCallerIp The IP address of the client that made the request. String
PayloadrequestMetadatacallerSuppliedUserAgent The user agent String provided by the caller. String
PayloadrequestMetadataDestinationAttributes Attributes related to the destination of the request. String
PayloadrequestMetadatarequestAttributesAuth Authentication attributes embedded within the request. String
PayloadRequestMetadataRequestAttributesReason The reason specified in the request attributes metadata. String
PayloadrequestMetadatarequestAttributesTime The timestamp associated with the request attributes. DateTime
PayloadRequestName The name of the specific request. String
PayloadRequestOptionsRequestedPolicyVersion The requested policy version within the request options. String
PayloadRequestParent The parent resource of the request. String
PayloadRequestRegion The GCP region where the request originated or was processed. String
PayloadRequestResource The resource specified in the request. String
PayloadRequestServiceApiVersion The API version of the Cloud Run service in the request. String
PayloadRequestServiceKind The ‘kind’ of the Cloud Run service (e.g., ‘Service’). String
PayloadRequestServiceLatestRevision The name of the latest revision for the Cloud Run service in the request status. String
PayloadRequestServiceMetadataAnnotations Annotations associated with the Cloud Run service’s request metadata. String
PayloadRequestServiceMetadataCreationTimestamp The timestamp when the Cloud Run service in the request metadata was created. String
PayloadRequestServiceMetadataGeneration The generation number of the Cloud Run service in the request metadata. String
PayloadRequestServiceMetadatalabels Labels from the Cloud Run service metadata within the request. String
PayloadRequestServiceMetadataName The name of the Cloud Run service within the request metadata. String
PayloadRequestServiceMetadataNameSpace The namespace of the Cloud Run service within the request metadata. String
PayloadRequestServiceMetadataResourceVersion The resource version of the Cloud Run service in the request metadata. String
PayloadRequestServiceMetadataSelfLink The self-link URL for the Cloud Run service in the request metadata. String
PayloadRequestServiceMetadataUID The unique identifier (UID) of the Cloud Run service in the request metadata. String
PayloadRequestServiceObservedGeneration The observed generation of the Cloud Run service in the request status. String
PayloadRequestServiceReadyRevision The name of the ready revision for the Cloud Run service in the request status. String
PayloadRequestServiceServiceURL The URL of the Cloud Run service in the request status. String
PayloadRequestServiceSpec The specification details of the Cloud Run service in the request. String
PayloadRequestServiceStatusConditions Conditions indicating the current state of the Cloud Run service in the request status. String
PayloadRequestServiceTraffic Traffic distribution settings for the Cloud Run service in the request status. String
PayloadRequestStorageSourceGeneration The generation of the storage source used in the request. String
PayloadRequestType The type of request made to the Cloud Run service. String
PayloadResourceLocationCurrentLocations Current location(s) of the resource involved in the log entry. String
PayloadResourceName The name of the GCP resource relevant to the log entry. String
PayloadResponseApiVersion The API version of the response from the Cloud Run service. String
PayloadResponseKind The ‘kind’ of resource returned in the response (e.g., ‘Service’). String
PayloadResponseMetadataAnnotations Annotations associated with the response metadata, typically key-value pairs. String
PayloadResponseMetadataCreationTimestamp The timestamp when the resource in the response metadata was created. String
PayloadResponseMetadataGeneration The generation number of the resource in the response metadata. String
PayloadResponseMetadataName The name of the resource within the response metadata. String
PayloadResponseMetadataResourceVersion The resource version of the resource in the response metadata, indicating its state. String
PayloadResponseMetadataSelfLink The self-link URL for the resource in the response metadata. String
PayloadResponseMetadataUID The unique identifier (UID) of the resource in the response metadata. String
PayloadResponseNameSpace The namespace of the resource within the response. String
PayloadResponseServiceMetadatalabels Labels from the service metadata within the response. String
PayloadResponseSpec The specification details of the resource in the response. String
PayloadResponseStatus The status of the operation or resource in the response. String
PayloadResponseType The type of response received from the Cloud Run service. String
PayloadServiceName The name of the GCP service involved in the log entry. String
PayloadType The type of payload contained within the log entry. String
ReceiveTimestamp The timestamp when the log entry was received by Log Analytics. DateTime
ResourceLabelsConfigurationName The name of the associated Cloud Run configuration. String
ResourceLabelsJobName The name of the associated Cloud Run job. String
ResourceLabelslocation The GCP location of the Cloud Run resource. String
ResourceLabelsProjectId The GCP project ID where the Cloud Run resource resides. String
ResourceLabelsRevisionName The name of the associated Cloud Run revision. String
ResourceLabelsServiceName The name of the associated Cloud Run service. String
Severity The severity level of the log entry (e.g., INFO, WARNING, ERROR). String
SourceSystem String
TenantId Unique identifier of the tenant into which the data connector ingests data. String
TimeGenerated The timestamp when the log entry was originally generated in GCP. DateTime
Type The name of the table String

Schema changes #

Date Action
2026-01-02 Table added to tracking