GCP Cloud Audit Activeboard

Purpose

This Activeboard summarizes information about the most relevant fields contained in GPC Cloud Audit log entries related to GCP Services audited API calls for a selected period of time. It allows you to filter by main log entry fields (Resource Type, Project ID, Service Name, Principal - entity issuing API calls - and Caller IP). The Activeboard is divided into four sections:

Overview
Errors
Data by Main Categories
Data Tables

Open Cloud Audit Activeboard

Once you have installed the application, you can access the Activeboard in the following ways:

Go to Exchange in the navigation pane and look for the Activeboard to open it. Click Open.

Go to Activeboards in the navigation pane and use the filter to open the Activeboard you downloaded.

Know more about Activeboards

Refer to Manage and filter Activeboards article to know how to work with Activeboards.

Exploring the Activeboard

When opening the GCP Cloud Audit Activeboard, the information displays in 5 different sections:

1. GCP Cloud Audit

Widget	Details
	Resource Type
	Project ID
	Service
	Principal
	Caller IP
	Line Graphs Grouping Period

2. Overview

Widget	Details
	Total Number of Log Entries
	Log Entries by Top 3 Resources Locations
	Log Entries by Caller IP Location
	Top 5 Most Active Public IPv4’s
	Log Entries by Type
	Top 5 Log Entries by Severity
	Top 7 Log Entries by Type & Severity Over Time
	Top 7 Most Active Service Accounts
	Top 5 Most Active System Processes
	Top 5 Most Active Public IPv4’s
	Top 5 Most Active Users

3. Errors

Widget	Details
	Top 5 Users with Error in Logged Actions
	Top 5 Public IPv4’s with Error in LA’s
	Log Entries with Error
	Ok vs Error Log Entries
	Top 5 Log Entries by Error Over Time
	Top 5 Public IPv4’s with Error in Logged Actions
	Top 5 SP’s with Error in Logged Actions
	Top 5 Log Entries by Error
	Top 5 Log Entries by Error Over Time

3. Data by Main Categories

Widget	Details
	Top 5 Log Entries by Resource Types
	Top 5 Log Entries by Resource Type Over Time
	Top 5 Log Entries by Progect ID
	Top 5 Log Entries by Project ID Over Time
	Top 5 Log Entries by Service
	Top 5 Log Entries by Service Over Time
	Top 5 Log Entries by Method
	Top 5 Log Entries by Method Over Time

4. Data Table

Widget	Details
	Data Groupes by Main Categories

Load data takes too long

Sometimes some widgets take time to upload the data, it is possible to speed up the process by creating aggregation tasks. Refer to Aggregation tasks article to learn how to do it.