GCPCloudSQL

GCPCloudSQL Schema #

Table description #

TableSection TableType TableSectionName Description
Usx Regular Microsoft Sentinel The GCP Cloud SQL data connector provides the capability to ingest Audit logs into Microsoft Sentinel using the GCP Cloud SQL API. Refer to GCP cloud SQL Audit Logs documentation for more information.

Table retention #

HotDays ColdDays TotalInteractiveDays
14 16 30

Schema #

Name Description Type
_BilledSize Double
_IsBillable String
AuthInfoPrincipalEmail The principal email address initiating the request. String
AuthInfoPrincipalSubject The subject associated with the principal. String
AuthInfoServiceAccountKeyName Name of the service account key used for the request. String
GCPResourceName Full resource name of the Cloud SQL instance. String
GCPResourceType Type of the resource. String
InsertId Unique identifier for the log entry. String
LogName Name of the log where the entry is recorded. String
MetadataType Type of metadata associated with the log entry. String
OperationFirst Indicates if this is the first log entry in an operation. Boolean
OperationId Identifier of the associated operation. String
OperationInsertTime Timestamp when the operation was inserted. DateTime
OperationLast Indicates if this is the last log entry in an operation. Boolean
OperationProducer The service that produced the operation. String
PayloadType Type of the payload in the log entry. String
ReceiveTimestamp Timestamp when the log was received. DateTime
RequestBodyBackup Backup configuration in the request body. String
RequestBodyCloneContextDestinationInstanceName Destination instance name in clone context. String
RequestBodyCommonName Common name used for certificates. String
RequestBodyDescription Description of the instance or operation. String
RequestBodyExportContext Export context details. Object
RequestBodyFailoverContext Context for failover configuration. Object
RequestBodyInstance Instance details in the request body. String
RequestBodyKind The kind field in the request body. String
RequestBodyLocation Location setting in the request body. String
RequestBodyNodeCount Number of nodes configured in the request. String
RequestBodyProject Project ID in the request body. String
RequestBodyRestoreInstanceSettingsInstanceUid UID of the instance in restore settings. String
RequestBodyRestoreInstanceSettingsName Instance name in restore settings. String
RequestBodyRestoreInstanceSettingsProject Project ID in restore settings. String
RequestBodyRestoreInstanceSettingsRegion Region in restore settings. String
RequestBodyRotateServerCaContext Server CA rotation configuration context. Object
RequestBodySettingsActivationPolicy Activation policy for the instance. String
RequestBodySettingsActiveDirectoryConfig Active Directory configuration settings. String
RequestBodySettingsAvailabilityType Availability type setting. String
RequestBodySettingsBackupEnabled Indicates if backups are enabled. Boolean
RequestBodySettingsBackupLocation Location for backups. String
RequestBodySettingsBackupPointInTimeRecoveryEnabled Flag for point-in-time recovery. String
RequestBodySettingsBackupStartTime Scheduled start time for backups. String
RequestBodySettingsBinaryLogEnabled Indicates if binary logging is enabled. Boolean
RequestBodySettingsConnectionPoolConfig Connection pool configuration. String
RequestBodySettingsdataCacheConfigDataCacheEnabled Flag for enabling data cache. Boolean
RequestBodySettingsDataDiskSizeGb Size of the data disk in GB. String
RequestBodySettingsDataDiskType Type of data disk used. String
RequestBodySettingsDeletionProtectionEnabled Indicates if deletion protection is enabled. Boolean
RequestBodySettingsEdition Edition of the Cloud SQL instance. String
RequestBodySettingsEnableGoogleMlIntegration Flag to enable Google ML integration. Boolean
RequestBodySettingsInsightsConfig Insights configuration settings. Object
RequestBodySettingsIPConfiguration IP configuration settings. Object
RequestBodySettingsLocationPreference Location preference for the instance. String
RequestBodySettingsMaintenanceWindow Maintenance window configuration. Object
RequestBodySettingsRetainBackupsOnDelete Flag to retain backups after deletion. Boolean
RequestBodySettingsRetentinedBackup Retention policy for backups. String
RequestBodySettingsRetentionUnit Unit of retention for backups. String
RequestBodySettingsSqlServerAuditConfigRetentionInterval Audit retention interval for SQL Server. DateTime
RequestBodySettingsSqlServerAuditConfigUploadInterval Audit upload interval for SQL Server. DateTime
RequestBodySettingsStorageAutoResize Indicates if storage auto-resize is enabled. Boolean
RequestBodySettingsTier Service tier of the instance. String
RequestBodySettingsTmeZone Time zone settings for the instance. String
RequestBodySettingsTransactionLogRetentionDays Retention period for transaction logs. String
RequestBodySettingsUserbackuplable User backup label setting. String
RequestBodySettingsVersion Version information flag. Boolean
RequestDatabase Database name specified in the request. String
RequestEnableFinalBackup Indicates if final backup was enabled in the request. Boolean
RequestEndTime Timestamp marking when the request processing completed DateTime
RequestFilter Filter used in the request to narrow results. String
RequestFinalBackupTtlDays Time to live (in days) for the final backup. String
RequestId Unique ID of the request. String
RequestInstance Instance identifier from the request. String
RequestMaxResults Maximum number of results requested. String
RequestMetadataCallerIP IP address of the caller. String
RequestMetadataRequestAttributesAuth Authentication attributes of the request. String
RequestMetadataRequestAttributesDestinationAttributes Destination attributes for the request. String
RequestMetadataRequestAttributesRequestReason Reason for the request. String
RequestMetadataRequestAttributesRequestTime Timestamp when the request was made. DateTime
RequestName Name field from the request payload. String
RequestOperation The operation type included in the request. String
RequestPageSize Page size specified in the request. String
RequestParent The parent resource under which the request is made. String
RequestProject Project associated with the request. String
RequestResourceId ID of the resource being requested. String
RequestSha1Fingerprint SHA-1 fingerprint associated with the certificate. String
RequestStartTime Start time specified in the request. DateTime
ResourceLabelsDatabaseId Database identifier from resource labels. String
ResourceLabelsProjectId Project ID from resource labels. String
ResourceLabelsRegion Region from resource labels. String
ResponseBackupContextBackupId Backup ID from the response’s backup context. String
ResponseBackupContextKind Kind of backup context returned. String
ResponseBackupContextName Name in the backup context of the response. String
ResponseClientCert Client certificate in the response. String
ResponseEphemeralCertKind Kind of ephemeral certificate in the response. String
ResponseInstanceUid Instance UID returned in the response. String
ResponseKind Kind field of the response. String
ResponseName Name included in the response. String
ResponseOperation Indicates the type of operation performed in the response. String
ResponseOperationType Operation type in the response. String
ResponsePromoteContextPrimary Primary instance in the promote context. String
ResponsePromoteContextReplica Replica instance in the promote context. String
ResponseSelfLink Self-link URL of the response resource. String
ResponseServerCaCert PEM-encoded CA certificate from the server used for TLS validation String
ResponseStatus Status of the response operation. String
ResponseTargetId Target ID in the response. String
ResponseTargetLink Target link URL in the response. String
ResponseTargetProject Project associated with the response target. String
ResponseType Type of the response. String
ResponseUser User information from the response. String
ServiceName Name of the GCP service handling the request. String
Severity Severity level of the log entry. String
SourceSystem String
StatusCode Status code returned by the operation. String
StatusMessage Message describing the status of the operation. String
TenantId Unique identifier of the tenant into which the data connector ingests data. String
TimeGenerated Time when the log entry was generated. DateTime
Timestamp Timestamp of the logged event. DateTime
Type The name of the table String

Schema changes #

Date Action
2026-01-02 Table added to tracking