GCPLoadBalancer

GCPLoadBalancer Schema #

Table description #

TableSection TableType TableSectionName Description
Usx Regular Microsoft Sentinel The Google Cloud Platform (GCP) GCPLoadBalancer logs, enable you to capture network inbound activity from the load balancer and Web Application Firewall (WAF) to monitor access and detect potential threats across Google Cloud Platform (GCP) resources.

Table retention #

HotDays ColdDays TotalInteractiveDays
14 16 30

Schema #

Name Description Type
_BilledSize Double
_IsBillable String
BackendServiceName The backend service name in Google Cloud Platform . String
BackendTargetProjectNumber The Backend Service Project Number. String
CacheDecision Indicates whether a request was served from the cache or the backend. Object
EnforcedEdgeSecurityPolicy the edge security policy rule that was enforced. Object
EnforcedSecurityPolicy Indicates whether a security policy (such as a WAF or access control rules) was applied to a request. Object
ForwardingRuleName The forwarding rule resource of the load balancer in Google Cloud Platform. String
InsertId Optional. Providing a unique identifier for the log entry allows Logging to remove duplicate entries with the same timestamp and insertId in a single query result. String
Latency The latency of the request. String
LogName Information including a suffix identifying the log sub-type (e.g., admin activity, system access, data access) and where in the hierarchy the request was made. String
PayloadRemoteIp The remote ip address of the payload. String
PreviewEdgeSecurityPolicy populated if a request matches an edge security policy rule configured for preview. Object
PreviewSecurityPolicy Request matches a rule configured for preview (present only when a preview rule would have taken priority over the enforced rule). Object
ProjectId The Project id in Google Cloud Platform String
RemoteIp The remote ip of the request. String
RequestMethod The http method of the request. String
RequestSize The size of the request. String
RequestStatus The status code of the request. String
RequestUrl The url of the request. String
SecurityPolicyRequestData The security policy data of the request. Object
Severity The severity of the incident. String
SourceSystem String
StatusDetails The status details of the request. String
TenantId Unique identifier of the tenant into which the data connector ingests data. String
TimeGenerated The time the log entry was received by logging. DateTime
Timestamp The time the event described by the log entry occurred. DateTime
Type The name of the table String
UrlMapName The url map resource name in Google Cloud Platform. String
UserAgent The user agent of the request. String
Zone The Zone name of the Load Balancer. String

Schema changes #

Date Action
2026-01-02 Table added to tracking