Stay organized with collectionsSave and categorize content based on your preferences.
This page explains how to view the backup vault consumption logs for the vaulted
backups in Cloud Logging. These backups are for the resources protected usingbackup plans.
These logs provide insights of the storage consumption details in a backup vault.
Permissions and roles
You need the IAM permissionroles/logging.viewerto view the
backup vault consumption logs. TheLogs Viewerrole gives you read-only
access to view backup vault consumption logs of all resources protected
by backup plan in your backup vault project. For more information
about the IAM permissions and roles that apply to
backup vault consumption logs data, seeAccess control with IAM.
View backup vault consumption logs
You can view backup vault consumption logs in Cloud Logging by using the
Google Cloud console and the Google Cloud CLI.
Console
In the Google Cloud console, you can use theLogs Explorerto retrieve the
backup vault consumption logs entries for your vaulted backups:
In the Google Cloud console, go to theLogging>Logs Explorer.
Select an existing Cloud project.
In theQuery builderpane, selectbdr_backup_vault_detailsfrom theSelect Log namedrop-down.
gcloud
The Google Cloud CLI provides a command-line interface to the logging API.
To read your backup vault consumption logs entries, run the following
command:
[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Hard to understand","hardToUnderstand","thumb-down"],["Incorrect information or sample code","incorrectInformationOrSampleCode","thumb-down"],["Missing the information/samples I need","missingTheInformationSamplesINeed","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-09-04 UTC."],[[["\u003cp\u003eThis page guides users on how to access and interpret backup vault consumption logs in Cloud Logging for resources protected by backup plans.\u003c/p\u003e\n"],["\u003cp\u003eTo view these logs, users need the \u003ccode\u003eroles/logging.viewer\u003c/code\u003e IAM permission, which provides read-only access to the backup vault consumption logs.\u003c/p\u003e\n"],["\u003cp\u003eBackup vault consumption logs can be viewed through the Google Cloud console's Logs Explorer by selecting "bdr_backup_vault_details" or using the \u003ccode\u003egcloud logging read\u003c/code\u003e command with the same log name.\u003c/p\u003e\n"],["\u003cp\u003eEach log entry includes fields like \u003ccode\u003ebackupVaultName\u003c/code\u003e, \u003ccode\u003esourceResourceName\u003c/code\u003e, \u003ccode\u003estoredBytesGib\u003c/code\u003e, and \u003ccode\u003efirstAvailableRestorePoint\u003c/code\u003e to detail storage usage and backup specifics.\u003c/p\u003e\n"],["\u003cp\u003eYou can create custom queries to view specific consumption details, such as those related to a specific backup vault name, backup plan, or source resource.\u003c/p\u003e\n"]]],[],null,["# Backup vault consumption logs for vaulted backups\n\nThis page explains how to view the backup vault consumption logs for the vaulted\nbackups in Cloud Logging. These backups are for the resources protected using\n[backup plans](/backup-disaster-recovery/docs/cloud-console/backup-plan).\nThese logs provide insights of the storage consumption details in a backup vault.\n\nPermissions and roles\n---------------------\n\nYou need the IAM permission `roles/logging.viewer` to view the\nbackup vault consumption logs. The `Logs Viewer` role gives you read-only\naccess to view backup vault consumption logs of all resources protected\nby backup plan in your backup vault project. For more information\nabout the IAM permissions and roles that apply to\nbackup vault consumption logs data, see [Access control with IAM](/logging/docs/access-control).\n\nView backup vault consumption logs\n----------------------------------\n\nYou can view backup vault consumption logs in Cloud Logging by using the\nGoogle Cloud console and the Google Cloud CLI. \n\n### Console\n\nIn the Google Cloud console, you can use the **Logs Explorer** to retrieve the\nbackup vault consumption logs entries for your vaulted backups:\n\n1. In the Google Cloud console, go to the **Logging** \\\u003e **Logs Explorer**.\n2. Select an existing Cloud project.\n3. In the **Query builder** pane, select **bdr_backup_vault_details** from the **Select Log name** drop-down.\n\n### gcloud\n\nThe Google Cloud CLI provides a command-line interface to the logging API.\nTo read your backup vault consumption logs entries, run the following\ncommand: \n\n gcloud logging read \"logName: bdr_backup_vault_details\" --project=\u003cvar translate=\"no\"\u003ePROJECT_ID\u003c/var\u003e\n\nReplace the following:\n\n- \u003cvar translate=\"no\"\u003ePROJECT_ID\u003c/var\u003e: the name of the project where the backup vault is created.\n\nBackup vault consumption log format\n-----------------------------------\n\nBackup vault consumption log entries include the following fields:\n\nThe following sample is an example log entry logged on a backup vault `test-vault`. \n\n {\n \"insertId\": \"6736263559768786491\",\n \"jsonPayload\": {\n \"backupVaultName\": \"projects/Backupvault_project_ID/locations/asia-east1/backupVaults/test-vault\",\n \"sourceResourceName\": \"projects/Source_project_ID/zones/asia-east1-c/instances/instance-20240826-175641\",\n \"minimumEnforcedRetentionDays\": 1,\n \"currentBackupPlanName\": \"projects/Backupvault_project_ID/locations/asia-east1/backupPlans/bp-asia-east1\",\n \"firstAvailableRestorePoint\": \"2024-10-08T01:10:08Z\",\n \"resourceType\": \"Compute Engine\",\n \"storedBytesGib\": 0.73,\n \"lastAvailableRestorePoint\": \"2024-10-08T01:10:08Z\",\n \"@type\": \"type.googleapis.com/google.cloud.backupdr.logging.v1.BDRBackupVaultDetailsLog\"\n },\n \"resource\": {\n \"type\": \"backupdr.googleapis.com/BackupVault\",\n \"labels\": {\n \"backup_vault_id\": \"projects/Backupvault_project_ID/locations/asia-east1/backupVaults/test-vault\",\n \"location\": \"asia-east1\",\n \"resource_container\": \"236738525349\"\n }\n },\n \"timestamp\": \"2024-10-08T08:01:53Z\",\n \"severity\": \"INFO\",\n \"logName\": \"projects/project_ID/logs/backupdr.googleapis.com%2Fbdr_backup_vault_details\",\n \"receiveTimestamp\": \"2024-10-08T08:12:08.404596022Z\"\n }\n\nSample queries\n--------------\n\nTo view selected logs, you can write custom queries in the query section.\n\nUse the following query to view consumption details in a backup vault. \n\n logName:\"bdr_backup_vault_details\" jsonPayload.backupVaultName:\"backupVaults/\u003cvar translate=\"no\"\u003eBACKUPVAULT_NAME\u003c/var\u003e\"\n\nUse the following query to view consumption details using a backup plan. \n\n logName:\"bdr_backup_vault_details\" jsonPayload.currentBackupPlanName:\"backupPlans/\u003cvar translate=\"no\"\u003eBACKUPPLAN_NAME\u003c/var\u003e\"\n\nUse the following query to view consumption details for a Compute Engine resource. \n\n logName:\"bdr_backup_vault_details\" jsonPayload.sourceResourceName:\"instances/\u003cvar translate=\"no\"\u003eSOURCE_RESOURCE_NAME\u003c/var\u003e\"\n\nWhat's next\n-----------\n\n- To configure log-based alerts for Backup and DR Service, create a log query, using the [filter job logs](#log), and then [Configure log-based alerts](/backup-disaster-recovery/docs/configure-alerts)."]]
