GKEControllerManager

GKEControllerManager Schema #

Table description #

TableSection TableType TableSectionName Description
Usx Regular Microsoft Sentinel The Google Cloud Platform (GCP) Kubernetes Engine data connector allows you to monitor containerized applications, track performance metrics, and detect potential threats across your GKE environment.

Table retention #

HotDays ColdDays TotalInteractiveDays
14 16 30

Schema #

Name Description Type
_BilledSize Double
_IsBillable String
ClusterName The name of the GKE cluster from which the log was generated. String
ComponentLocation The zone or region of the Kubernetes component emitting the log. String
ComponentName The name of the GKE control plane component (e.g., kube-controller-manager). String
ComputeResourceName The name of the compute resource (e.g., VM name or controller name) associated with the log. String
Duration The time duration the operation took, generally in seconds with fractional precision (e.g., 1.234567s). String
InsertId A unique identifier for the log entry to prevent duplication. String
Key A unique identifier for the Kubernetes resource (typically namespace/name). String
Kind The type of Kubernetes resource being managed or referenced (e.g., Deployment, ReplicaSet). String
Labels Dynamic field containing various labels associated with the log entry. Object
Location The geographical location (region or zone) of the cluster. String
Logger The logging class or module that generated the message, often used for categorizing logs. String
LogName The full resource name of the log (e.g., projects/{project_id}/logs/{log_id}). String
Message The content of the log message. String
Pid The process ID of the component that emitted the log, if available. String
ProjectID The Google Cloud project ID where the GKE cluster is hosted. String
ReceiveTimestamp The time the log was received by Cloud Logging. DateTime
Severity The severity level of the log (e.g., DEBUG, INFO, WARNING, ERROR). String
SourceFile The source file in the Kubernetes codebase where the log originated. String
SourceLine The line number in the source file where the log was emitted. String
SourceSystem String
SyncStatus The synchronization status or result of the controller operation (e.g., success, error, requeue). String
TenantId Unique identifier of the tenant into which the data connector ingests data. String
TimeGenerated The timestamp indicating when the log event was created or generated by the source system. DateTime
Type The name of the table String

Schema changes #

Date Action
2026-01-02 Table added to tracking