- HTTP request
- Path parameters
- Query parameters
- Request body
- Response body
- Authorization scopes
- EffectiveVpcFlowLogsConfig
- Scope
- Try it!
vpcFlowLogsConfigs.showEffectiveFlowLogsConfigs returns a list of all VPC Flow Logs configurations applicable to a specified resource.
HTTP request
GET https://networkmanagement.googleapis.com/v1beta1/{parent=projects/*/locations/*}/vpcFlowLogsConfigs:showEffectiveFlowLogsConfigs
The URL uses gRPC Transcoding syntax.
Path parameters
Parameters | |
---|---|
parent |
Required. The parent resource of the VpcFlowLogsConfig, specified in the following format: Authorization requires the following IAM permission on the specified resource
|
Query parameters
Parameters | |
---|---|
resource |
Required. The resource to get the effective VPC Flow Logs configuration for. The resource must belong to the same project as the parent. The resource must be a network, subnetwork, interconnect attachment, VPN tunnel, or a project. |
pageSize |
Optional. Number of |
pageToken |
Optional. Page token from an earlier query, as returned in |
filter |
Optional. Lists the |
Request body
The request body must be empty.
Response body
Response for the vpcFlowLogsConfigs.showEffectiveFlowLogsConfigs
method.
If successful, the response body contains data with the following structure:
JSON representation |
---|
{
"effectiveFlowLogsConfigs": [
{
object ( |
Fields | |
---|---|
effectiveFlowLogsConfigs[] |
List of Effective Vpc Flow Logs configurations. |
nextPageToken |
Page token to fetch the next set of configurations. |
unreachable[] |
Locations that could not be reached (when querying all locations with |
Authorization scopes
Requires the following OAuth scope:
https://www.googleapis.com/auth/cloud-platform
For more information, see the Authentication Overview.
EffectiveVpcFlowLogsConfig
A configuration to generate a response for GetEffectiveVpcFlowLogsConfig request.
JSON representation |
---|
{ "name": string, "metadataFields": [ string ], "state": enum ( |
Fields | |
---|---|
name |
Unique name of the configuration. The name can have one of the following forms:
|
metadataFields[] |
Custom metadata fields to include in the reported VPC flow logs. Can only be specified if "metadata" was set to CUSTOM_METADATA. |
state |
The state of the VPC Flow Log configuration. Default value is ENABLED. When creating a new configuration, it must be enabled. Setting state=DISABLED will pause the log generation for this config. |
aggregationInterval |
The aggregation interval for the logs. Default value is INTERVAL_5_SEC. |
flowSampling |
The value of the field must be in (0, 1]. The sampling rate of VPC Flow Logs where 1.0 means all collected logs are reported. Setting the sampling rate to 0.0 is not allowed. If you want to disable VPC Flow Logs, use the state field instead. Default value is 1.0. |
metadata |
Configures whether all, none or a subset of metadata fields should be added to the reported VPC flow logs. Default value is INCLUDE_ALL_METADATA. |
filterExpr |
Export filter used to define which VPC Flow Logs should be logged. |
crossProjectMetadata |
Determines whether to include cross project annotations in the logs. This field is available only for organization configurations. If not specified in org configs will be set to CROSS_PROJECT_METADATA_ENABLED. |
Union field target_resource . Reference to the resource of the config scope. That is, the scope from which traffic is logged. The target resource must belong to the same project as the configuration. This field is not supported for organization level configurations. target_resource can be only one of the following: |
|
network |
Traffic will be logged from VMs, VPN tunnels and Interconnect Attachments within the network. Format: projects/{projectId}/global/networks/{name} |
subnet |
Traffic will be logged from VMs within the subnetwork. Format: projects/{projectId}/regions/{region}/subnetworks/{name} |
interconnectAttachment |
Traffic will be logged from the Interconnect Attachment. Format: projects/{projectId}/regions/{region}/interconnectAttachments/{name} |
vpnTunnel |
Traffic will be logged from the VPN Tunnel. Format: projects/{projectId}/regions/{region}/vpnTunnels/{name} |
scope |
Specifies the scope of the config (e.g., SUBNET, NETWORK, ORGANIZATION..). |
Scope
The scope for this flow log configuration.
Enums | |
---|---|
SCOPE_UNSPECIFIED |
Scope is unspecified. |
SUBNET |
Target resource is a subnet (Network Management API). |
COMPUTE_API_SUBNET |
Target resource is a subnet, and the config originates from the Compute API. |
NETWORK |
Target resource is a network. |
VPN_TUNNEL |
Target resource is a VPN tunnel. |
INTERCONNECT_ATTACHMENT |
Target resource is an interconnect attachment. |
ORGANIZATION |
Configuration applies to an entire organization. |