Plugins 〉Google Cloud Logging

GCP logging team

Sign up to receive occasional product news and updates:

Data Source

Google Cloud Logging

  • Overview
  • Installation
  • Change log
  • Related content

Google Cloud Logging Data Source


The Google Cloud Logging Data Source is a backend data source plugin for Grafana, which allows users to query and visualize their Google Cloud logs in Grafana.

image info


Enable Cloud Resource Manager API

You need to enable the resource manager API. Otherwise, your cloud projects will not be displayed in the dropdown menu.

You can follow the steps to enable it:

  1. Navigate to the cloud resource manager API page in GCP and select your project
  2. Press the Enable button

Generate a JWT file & Assign IAM Permissions

  1. If you don't have gcp project, add a new gcp project. link
  2. Open the Credentials page in the Google API Console
  3. Click Create Credentials then click Service account
  4. On the Create service account page, enter the Service account details
  5. On the Create service account page, fill in the Service account details and then click Create and Continue
  6. On the Grant this service account access to project section, add the Logs Viewer role and Logs View Accessor role under Logging to the service account. Click Done
  7. In the next step, click the service account you just created. Under the Keys tab and select Add key and Create new key
  8. Choose key type JSON and click Create. A JSON key file will be created and downloaded to your computer

If you want to access logs in multiple cloud projects, you need to ensure the service account has permission to read logs from all of them.

If you host Grafana on a GCE VM, you can also use the Compute Engine service account. You need to make sure the service account has sufficient permissions to access the scopes and logs in all projects.

Service account impersonation

You can also configure the plugin to use service account impersonation. You need to ensure the service account used by this plugin has the iam.serviceAccounts.getAccessToken permission. This permission is in roles like the Service Account Token Creator role (roles/iam.serviceAccountTokenCreator). Also, the service account impersonated by this plugin needs logging read and project list permissions.

Grafana Configuration

  1. With Grafana restarted, navigate to Configuration -> Data sources (or the route /datasources)
  2. Click "Add data source"
  3. Select "Google Cloud Logging"
  4. Provide credentials in a JWT file, either by using the file selector or pasting the contents of the file.
  5. Click "Save & test" to test that logs can be queried from Cloud Logging.

image info

An alternative way to provision the data source

After the plugin is installed, you can define and configure the data source in YAML files as part of Grafana’s provisioning system, similar to the Google Cloud Monitoring plugin. For more information about provisioning, and for available configuration options, refer to Provisioning Grafana.

The following YAML is an example.

apiVersion: 1


  • name: Google Cloud Logging type: googlecloud-logging-datasource access: proxy jsonData: authenticationType: gce

Supported variables

The plugin currently supports variables for logging scopes. For example, you can define a project variable and switch between projects. The following screenshot shows an example using project, bucket, and view.

template variables

Below is an example of defining a variable for log views. define a variable


Grafana Alerting is not directly supported due to how Logging Query Language works on Google Cloud. If you need to create alerts based on logs, consider using Log-based metrics and a Cloud Monitoring data source.


Cloud Logging Logo (src/img/logo.svg) is from Google Cloud's Official icons and sample diagrams

As commented, JWTForm and JWTConfigEditor are largely based on Apache-2.0 licensed grafana-google-sdk-react

Installing Google Cloud Logging on Grafana Cloud:

For more information, visit the docs on plugin installation.


1.4.1 (2024-03-22)

  • Fix an encoding issue for parentheses
  • Fix cloud logging link scope issue
  • Add annotation support
  • Update a few dependencies

1.4.0 (2023-09-26)

  • Support service account impersonation
  • Update README for alerting

1.3.0 (2023-07-12)

  • Map default log level from debug to info
  • Add trace info
  • Correctly display protoPayload (#38)
  • Support log scope variables (#32)

1.2.1 (2023-05-05)

1.2.0 (2023-03-17)

  • Support GCE service account
  • Support field-based filters in Explore page
  • Interpolate variables in queries
  • Correctly extract label/value pairs from structs
  • Added a sample dashboard

1.1.1 (2023-02-03)

  • Move hide logic to datasource.ts filter and reuse client for test connection
  • Update dependencies in package.json

1.1.0 (2023-01-26)

  • Adds Cloud Logging Service Endpoint to configuration
  • Fixes hide not working for Cloud Logging query
  • Fixes inability to retrieve projects displaying an error

1.0.0 (2023-01-17)

Initial release.