Log categories
In this section, we broadly divide logs into three categories. We will look at each category from the perspective of security.
Figure 12.3 – Log categories
Figure 12.3 illustrates the different types of log categories: security logs, user logs, and platform logs. Security logs consist of admin activity logs, data access logs, system event logs, and transparency logs. User logs are generated by user software, services, or applications and are written to Cloud Logging using a logging agent, the Cloud Logging API, or the Cloud Logging client libraries. Google Cloud Platform logs are service-specific logs that can help you better understand the Google Cloud services you’re using. VPC flow logs, firewall logs, and other API logs are examples of platform logs.
Our focus will be only on logs that are useful from a security perspective. That doesn’t necessarily mean that we will only look at the security logs category. We...
