Audit log sources

Audit log sources in Google Distributed Cloud (GDC) air-gapped appliance capture raw event records to help you track administrative actions, investigate security incidents, and maintain compliance across your environment. Reviewing the JSON schemas and field definitions for these log sources lets you interpret raw audit events and build targeted queries for the following sources: