Optional[customOptional[unknownExample: service.name = 'iam' AND resource.hierarchy.id:'container-e0t' AND regex(resource.metadata.name, '^.test.$')
Supported filters: "=" - equals "!=" - not equals ":" - contains regex - regular expression
Fields that can be used for filtering: action authentication.static_key_credential.id authentication.subject.service_account_id authentication.subject.tenant_user_id authentication.token_credential.masked_token project_region.name resource.hierarchy.id resource.hierarchy.name resource.metadata.id resource.metadata.name resource.metadata.type service.name type status
OptionalfromReturns results with a timestamp greater than or equal to this value.
OptionaltoReturns results with a timestamp lower than this value.
Type of audit event to filter by.