Cloud Logging Admin

The Cloud Logging Admin source enables tools to interact with the Cloud Logging API, allowing for the retrieval of log names, monitored resource types, and the querying of log data.

About

The Cloud Logging Admin source provides a client to interact with the Google Cloud Logging API. This allows tools to list log names, monitored resource types, and query log entries.

Authentication can be handled in two ways:

  1. Application Default Credentials (ADC): By default, the source uses ADC to authenticate with the API.
  2. Client-side OAuth: If useClientOAuth is set to true, the source will expect an OAuth 2.0 access token to be provided by the client (e.g., a web browser) for each request.

Available Tools

Example

Initialize a Cloud Logging Admin source that uses ADC:

kind: sources
name: my-cloud-logging
type: cloud-logging-admin
project: my-project-id

Initialize a Cloud Logging Admin source that uses client-side OAuth:

kind: sources
name: my-oauth-cloud-logging
type: cloud-logging-admin
project: my-project-id
useClientOAuth: true

Initialize a Cloud Logging Admin source that uses service account impersonation:

kind: sources
name: my-impersonated-cloud-logging
type: cloud-logging-admin
project: my-project-id
impersonateServiceAccount: "my-service-account@my-project.iam.gserviceaccount.com"

Reference

fieldtyperequireddescription
typestringtrueMust be “cloud-logging-admin”.
projectstringtrueID of the GCP project.
useClientOAuthbooleanfalseIf true, the source will use client-side OAuth for authorization. Otherwise, it will use Application Default Credentials. Defaults to false. Cannot be used with impersonateServiceAccount.
impersonateServiceAccountstringfalseThe service account to impersonate for API calls. Cannot be used with useClientOAuth.
Last modified February 12, 2026: chore(main): release 0.27.0 (#2363) (c5524d3)