GKEScheduler

GKEScheduler Schema #

Table description #

TableSection TableType TableSectionName Description
Usx Regular Microsoft Sentinel The Google Cloud Platform (GCP) Kubernetes Engine data connector allows you to monitor containerized applications, track performance metrics, and detect potential threats across your GKE environment.

Table retention #

HotDays ColdDays TotalInteractiveDays
14 16 30

Schema #

Name Description Type
_BilledSize Double
_IsBillable String
AuditID An identifier used for tracking the audit trail of the request. String
ClusterName Name of the GKE cluster from which the log originated. String
ComponentLocation Location or zone of the component (e.g., us-central1-a) within the cluster. String
ComponentName Name of the component or microservice generating the log (e.g., kube-apiserver). String
ComputeResourceName Name of the compute resource (e.g., VM instance) related to the log entry. String
HttpVerb The HTTP method used in the request (e.g., GET, POST). String
InsertId A unique identifier for the log entry, used to deduplicate log records. String
Labels Dynamic field containing various labels associated with the log entry. Object
Latency Request latency duration (e.g., time taken to complete the request). String
Location Geographical region or zone of the GKE cluster or resource. String
LogName The full resource name of the log to which this log entry belongs, typically includes project and log type. String
Message The content of the log message. String
Pid Process ID associated with the log entry, if available. String
ProjectID Google Cloud project ID associated with the log entry. String
Protocol The protocol used for the request, such as HTTP. String
ReceiveTimestamp The timestamp when the log entry was received by the logging system. DateTime
ResponseCode HTTP status code returned in the response (e.g., 200, 403). Int32
Severity The severity level of the log (e.g., INFO, WARNING, ERROR). String
SourceFile The source file where the log was generated, if available from sourceLocation. String
SourceLine The line number in the source file where the log was generated. String
SourceSystem String
SrcIP Source IP address of the client making the request. String
TenantId Unique identifier of the tenant into which the data connector ingests data. String
TimeGenerated The timestamp indicating when the log event was created or generated by the source system DateTime
Type The name of the table String
URI The requested URI path extracted from the log message. String
UserAgent The user agent string from the client that made the request. String

Schema changes #

Date Action
2026-01-02 Table added to tracking