google-cloud-platform

GCP Logging: who created a Project?

I'm trying to find Project creation events in GCP, but the query I'm using doesn't return any results:

protoPayload.methodName="google.cloudresourcemanager.v1.ProjectService.CreateProject"
resource.type="project"

I tried searching both in Organization scope and in a Folder scope and neither returns any results. I am filtering by the last 400 days to make sure that I'm searching all the retained logs.

Solution

  • protoPayload.methodName should be CreateProject.

    protoPayload.serviceName is cloudresourcemanager.googleapis.com