GKEHPADecision

GKEHPADecision Schema #

Table description #

TableSection TableType TableSectionName Description
Usx Regular Microsoft Sentinel The Google Cloud Platform (GCP) Kubernetes Engine data connector allows you to monitor containerized applications, track performance metrics, and detect potential threats across your GKE environment.

Table retention #

HotDays ColdDays TotalInteractiveDays
14 16 30

Schema #

Name Description Type
_BilledSize Double
_IsBillable String
ActuationLatencySeconds Time taken (in seconds) to apply the autoscaling decision from the time it was made. Double
ActuationTime The timestamp when the autoscaler made a scaling decision. DateTime
ClusterName The name of the GKE cluster where the HPA decision occurred. String
ComponentLocation The physical location (region or zone) of the Kubernetes component emitting the log. String
ComponentName The name of the GKE control plane component (typically ‘horizontal-pod-autoscaler’). String
ComputeResourceName The name of the compute resource or pod that is being scaled. String
ConfiguredSize The number of replicas configured after the autoscaler decision. Int32
HPA The name of the Horizontal Pod Autoscaler making the decision. String
InsertId A unique ID assigned to the log entry to ensure de-duplication. String
Labels Dynamic field containing various labels associated with the log entry. Object
LeadingMetricIndex Index indicating the metric that most influenced the autoscaling decision. Int32
Location The geographical location (region or zone) of the cluster. String
LogName The resource path of the log (e.g., projects/{project_id}/logs/{log_id}). String
Message The content of the log message. String
ProjectID The Google Cloud project ID that owns the GKE cluster. String
ReceiveTimestamp The timestamp when the log was received by the logging system. DateTime
Replicas The current number of replicas before the scaling decision. Int32
Severity The severity level of the log (e.g., DEBUG, INFO, WARNING, ERROR). String
SourceFile The source code file where the log originated from. String
SourceLine The specific line number in the source file that generated the log. String
SourceSystem String
StartTime The time when metric collection or evaluation started for the autoscaler. DateTime
TargetRefAPIVersion API version of the target resource (e.g., apps/v1). String
TargetRefKind Kind of the target Kubernetes resource (e.g., Deployment, StatefulSet). String
TargetRefName The name of the target Kubernetes object being scaled. String
TenantId Unique identifier of the tenant into which the data connector ingests data. String
TimeGenerated The timestamp indicating when the log event was created or generated by the source system. DateTime
TopLevelLimit The top-level scaling limit set on the number of replicas (e.g., maxReplicas). String
TopLevelOverride An override value for top-level limits, if specified (e.g., via policy or admin input). String
Type The name of the table String
VMName The name of the VM instance hosting the workload. String
Zone The specific zone in which the resource resides. String

Schema changes #

Date Action
2026-01-02 Table added to tracking