如何在 Cloud Logging 中查看 GCP Firestore 的所有活动的详细日志

Question

对于在 Firestore DB 中执行的任何操作，例如创建 Firestore 实例、创建集合、添加文档、添加/删除字段等。我们如何查看 Cloud Logging 中执行的所有操作。

默认情况下，它只提供实例创建日志，而不提供 CRUD 操作。

*[
  {
    "protoPayload": {
      "@type": "type.googleapis.com/google.cloud.audit.AuditLog",
      "status": {
        "code": 3,
        "message": "Error; please try again later."
      },
      "authenticationInfo": {
        "principalEmail": "anubhav.kumar@....com"
      },
      "requestMetadata": {
        "callerIp": "168.149.187.2",
        "callerSuppliedUserAgent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.110 Safari/537.36 Edg/96.0.1054.62,gzip(gfe),gzip(gfe)",
        "requestAttributes": {
          "time": "2021-12-20T17:15:19.476045Z",
          "auth": {}
        },
        "destinationAttributes": {}
      },
      "serviceName": "firebasedatabase.googleapis.com",
      "methodName": "google.firebase.database.v1beta.RealtimeDatabaseService.CreateDatabaseInstance",
      "authorizationInfo": [
        {
          "resource": "projects/..",
          "permission": "firebasedatabase.instances.create",
          "granted": true,
          "resourceAttributes": {}
        }
      ],
      "resourceName": "projects/..",
      "request": {
        "@type": "type.googleapis.com/google.firebase.database.v1beta.CreateDatabaseInstanceRequest",
        "validateOnly": true,
        "parent": "projects/..",
        "databaseInstance": {
          "type": "DEFAULT_DATABASE"
        },
        "databaseId": ""
      }
    },*

Answer 1

默认情况下，实际上只有管理操作被添加到审计日志中。 如果您还想记录数据以进行常规数据操作和检索，您可以从审核日志页面启用这些功能。

Answer 2

Firestore 审核日志记录的文档建议您需要启用这些：

https://cloud.google.com/firestore/docs/audit-logging