Stay organized with collectionsSave and categorize content based on your preferences.
This page explains how to view the unprotected resource logs created in
Cloud Logging. These logs provide information about unprotected resources
across backup/recovery appliances.
Permissions and roles
You need theIAMpermissionroles/logging.viewerto view the
unprotected resource logs. The Logs Viewer role gives you read-only access to
view unprotected resource logs of all backup/recovery appliances in the specified
project. For more information about the IAM permissions and roles that apply
to unprotected resource logs data, seeAccess control with IAM.
View unprotected resource logs
You can view Backup and DR unprotected resource logs in Cloud Logging by
using the Google Cloud console and the Google Cloud CLI.
Console
In the Google Cloud console, you can use theLogs Explorerto retrieve the
Backup and DR unprotected resource log entries for your backup/recovery appliances:
In the Google Cloud console, go to theLogging>Logs Explorer.
Select an existing Cloud project.
In theQuery builderpane, selectgcb_unprotected_resourcefrom theSelect Log namedrop-down.
gcloud
The Google Cloud CLI provides a command-line interface to the Cloud Logging API.
To read the unprotected resource log entries of backup/recovery appliances
in a project, run the following command:
[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Hard to understand","hardToUnderstand","thumb-down"],["Incorrect information or sample code","incorrectInformationOrSampleCode","thumb-down"],["Missing the information/samples I need","missingTheInformationSamplesINeed","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-09-04 UTC."],[[["\u003cp\u003eThis page explains how to access and view unprotected resource logs in Cloud Logging, which contain data about unprotected resources across backup/recovery appliances.\u003c/p\u003e\n"],["\u003cp\u003eTo view these logs, you need the \u003ccode\u003eroles/logging.viewer\u003c/code\u003e IAM permission, providing read-only access to the unprotected resource logs within the specified project.\u003c/p\u003e\n"],["\u003cp\u003eUnprotected resource logs can be accessed using the Google Cloud console via the Logs Explorer, where you can select \u003ccode\u003egcb_unprotected_resource\u003c/code\u003e as the log name.\u003c/p\u003e\n"],["\u003cp\u003eAlternatively, the Google Cloud CLI can be used to access the logs by executing the command \u003ccode\u003egcloud logging read "logName : projects/<var translate="no">PROJECT_ID</var>/logs/backupdr.googleapis.com%2Fgcb_unprotected_resource" --project=<var translate="no">PROJECT_ID</var>\u003c/code\u003e.\u003c/p\u003e\n"],["\u003cp\u003eThe logs include details such as Appliance ID, Discovered On date, Discovered By appliance, Host ID, Hostname, Instance name, Resource ID, Resource name, and Resource type, and also contains sample queries.\u003c/p\u003e\n"]]],[],null,["# Unprotected resource logs\n\nThis page explains how to view the unprotected resource logs created in\nCloud Logging. These logs provide information about unprotected resources\nacross backup/recovery appliances.\n\nPermissions and roles\n---------------------\n\nYou need the [IAM](/iam/docs) permission `roles/logging.viewer` to view the\nunprotected resource logs. The Logs Viewer role gives you read-only access to\nview unprotected resource logs of all backup/recovery appliances in the specified\nproject. For more information about the IAM permissions and roles that apply\nto unprotected resource logs data, see [Access control with IAM](/logging/docs/access-control).\n\nView unprotected resource logs\n------------------------------\n\nYou can view Backup and DR unprotected resource logs in Cloud Logging by\nusing the Google Cloud console and the Google Cloud CLI. \n\n### Console\n\nIn the Google Cloud console, you can use the **Logs Explorer** to retrieve the\nBackup and DR unprotected resource log entries for your backup/recovery appliances:\n\n1. In the Google Cloud console, go to the **Logging** \\\u003e **Logs Explorer**.\n2. Select an existing Cloud project.\n3. In the **Query builder** pane, select **gcb_unprotected_resource** from the **Select Log name** drop-down.\n\n### gcloud\n\nThe Google Cloud CLI provides a command-line interface to the Cloud Logging API.\nTo read the unprotected resource log entries of backup/recovery appliances\nin a project, run the following command: \n\n ```sh\n gcloud logging read \"logName : projects/\u003cvar translate=\"no\"\u003ePROJECT_ID\u003c/var\u003e/logs/backupdr.googleapis.com%2Fgcb_unprotected_resource\" --project=\u003cvar translate=\"no\"\u003ePROJECT_ID\u003c/var\u003e\n ```\n\nUnprotected resource log format\n-------------------------------\n\nBackup and DR unprotected resource log entries include the following fields:\n\nThe following sample is an example log entry logged on a backup/recovery appliance `sky-full-82959`. \n\n {\n \"insertId\": \"55552852_145719527555\",\n \"jsonPayload\": {\n \"host_name\": \"host4\",\n \"resource_id\": \"55552852\",\n \"host_id\": \"55550547\",\n \"instance_name\": \"NA\",\n \"discovered_on\": \"2024-07-02T13:59:46.795078Z\",\n \"resource_type\": \"FileSystem\",\n \"resource_name\": \"/boot/efi\",\n \"discovered_by\": \"sky-full-82959\",\n \"appliance_id\": \"145719527555\"\n },\n \"resource\": {\n \"type\": \"backupdr.googleapis.com/ManagementConsole\",\n \"labels\": {\n \"resource_container\": \"projects/myproject\",\n \"location\": \"us-central1\",\n \"management_server_id\": \"my-management-server-id\"\n }\n },\n \"timestamp\": \"2024-07-24T10:11:14.984Z\",\n \"logName\": \"projects/project_ID/logs/backupdr.googleapis.com%2Fgcb_unprotected_resource\",\n \"receiveTimestamp\": \"2024-07-24T10:16:16.320083904Z\"\n }\n\nSample queries\n--------------\n\nTo view selected logs, you can write custom queries in the query section.\n\nUse the following query to view all the unprotected resource logs for a given PROJECT_ID: \n\n logName=\"projects/\u003cvar translate=\"no\"\u003ePROJECT_ID\u003c/var\u003e/logs/backupdr.googleapis.com%2Fgcb_unprotected_resource\"\n\nIf you are looking for the unprotected data logs associated with a particular resource. \n\n logName=\"projects/\u003cvar translate=\"no\"\u003ePROJECT_ID\u003c/var\u003e/logs/backupdr.googleapis.com%2Fgcb_unprotected_resource\"\n jsonPayload.resource_name=\"\u003cvar translate=\"no\"\u003eresource_name\u003c/var\u003e\"\n\nIf you are looking for the unprotected resource logs associated with a particular resource type. \n\n logName=\"projects/\u003cvar translate=\"no\"\u003ePROJECT_ID\u003c/var\u003e/logs/backupdr.googleapis.com%2Fgcb_unprotected_resource\"\n jsonPayload.resource_type=\"\u003cvar translate=\"no\"\u003eresource_type\u003c/var\u003e\"\n\nIf you are looking for the unprotected resource logs associated with a particular host. \n\n logName=\"projects/\u003cvar translate=\"no\"\u003ePROJECT_ID\u003c/var\u003e/logs/backupdr.googleapis.com%2Fgcb_unprotected_resource\"\n jsonPayload.host_name=\"\u003cvar translate=\"no\"\u003ehost_name\u003c/var\u003e\"\n\nWhat's next\n-----------\n\n- To configure log-based alerts for Backup and DR Service, create a log query, using the [filter unprotected resource logs](#log), and then [Configure log-based alerts](/backup-disaster-recovery/docs/configure-alerts)."]]
