--- title: Google Cloud Platform fields description: GCP module Google Cloud Billing metrics Google Cloud Carbon Footprint metrics Google Cloud Compute metrics Google Cloud Dataproc metrics Google Cloud... url: https://www.elastic.co/elastic/docs-builder/docs/3016/reference/beats/metricbeat/exported-fields-gcp products: - Beats - Metricbeat applies_to: - Elastic Cloud Serverless: Generally available - Elastic Stack: Generally available --- # Google Cloud Platform fields GCP module GCP monitoring metrics labels type: object Metrics that returned from Google Cloud API query. type: object ## billing Google Cloud Billing metrics Cost types include regular, tax, adjustment, and rounding_error. type: keyword Billing report month. type: keyword Project ID of the billing report belongs to. type: keyword Total billing amount. type: float The ID of the resource used by the service. type: keyword A description of the resource type used by the service. For example, a resource type for Cloud Storage is Standard Storage US. type: keyword The ID of the service that the usage is associated with. type: keyword The Google Cloud service that reported the Cloud Billing data. type: keyword A collection of key-value pairs that provide additional metadata. type: nested The charged price for usage of the Google Cloud SKUs and SKU tiers. Reflects contract pricing if applicable, otherwise, it's the list price. type: float The start time of the usage period for this billing record. type: date The end time of the usage period for this billing record. type: date The geographic region where the resource was used (e.g., us-central1, europe-west1). type: keyword The specific zone within the region (e.g., us-central1-a). type: keyword The country code for the resource location (e.g., US, GB). type: keyword Resource labels as key-value pairs. Labels are user-defined metadata that can be attached to GCP resources. type: object ## carbon - Elastic Stack: Beta Google Cloud Carbon Footprint metrics Project ID the carbon footprint report belongs to. type: keyword Project name the carbon footprint report belongs to. type: keyword Service ID for the carbon footprint usage. type: keyword Service description for the carbon footprint usage. type: keyword Region for the carbon fooprint usage. type: keyword Scope 1 carbon footprint. type: float Scope 2 carbon footprint using location-based methodology. type: float Scope 2 carbon footprint using market-based methodology. type: float Scope 3 carbon footprint. type: float Total carbon offsets. type: float ## compute Google Cloud Compute metrics Incoming bytes dropped by the firewall type: long Incoming packets dropped by the firewall type: long Number of cores reserved on the host of the instance type: double Usage for all cores in seconds type: double The fraction of the allocated CPU that is currently in use on the instance type: double Count of bytes read from disk type: long Count of disk read IO operations type: long Count of bytes written to disk type: long Count of disk write IO operations type: long The total amount of memory in the VM. This metric is only available for VMs that belong to the e2 family. type: long Memory currently used in the VM. This metric is only available for VMs that belong to the e2 family. type: long The amount of memory read into the guest from its own swap space. This metric is only available for VMs that belong to the e2 family. type: long The amount of memory written from the guest to its own swap space. This metric is only available for VMs that belong to the e2 family. type: long Count of bytes received from the network type: long Count of packets received from the network type: long Count of bytes sent over the network type: long Count of packets sent over the network type: long Number of seconds the VM has been running. type: long Elapsed time since the VM was started, in seconds. Sampled every 60 seconds. After sampling, data is not visible for up to 120 seconds. type: long ## dataproc Google Cloud Dataproc metrics Indicates the number of HDFS DataNodes that are running inside a cluster. type: long Indicates capacity of HDFS system running on cluster in GB. type: double The percentage of HDFS storage currently used. type: double Indicates the number of unhealthy blocks inside the cluster. type: long Indicates the number of jobs that have failed on a cluster. type: long Indicates the number of jobs that are running on a cluster. type: long Indicates the number of jobs that have been submitted to a cluster. type: long Indicates the number of operations that have failed on a cluster. type: long Indicates the number of operations that are running on a cluster. type: long Indicates the number of operations that have been submitted to a cluster. type: long The percentage of YARN memory is allocated. type: double Indicates the number of active YARN applications. type: long Indicates the number of YARN containers. type: long Indicates the YARN memory size in GB. type: double Indicates the number of YARN NodeManagers running inside cluster. type: long The current memory request, in GB, that is pending to be fulfilled by the scheduler. type: double Indicates the number of virtual cores in YARN. type: long The time jobs took to complete from the time the user submits a job to the time Dataproc reports it is completed. type: object The time jobs have spent in a given state. type: object The time operations took to complete from the time the user submits a operation to the time Dataproc reports it is completed. type: object The time operations have spent in a given state. type: object ## firestore Google Cloud Firestore metrics The number of successful document deletes. type: long The number of successful document reads from queries or lookups. type: long The number of successful document writes. type: long ## gke `gke` contains the metrics that we scraped from GCP Stackdriver API containing monitoring metrics for GCP GKE Cumulative CPU usage on all cores used by the container in seconds. Sampled every 60 seconds. type: double CPU cores limit of the container. Sampled every 60 seconds. type: double The fraction of the CPU limit that is currently in use on the instance. This value cannot exceed 1 as usage cannot exceed the limit. Sampled every 60 seconds. After sampling, data is not visible for up to 240 seconds. type: double Number of CPU cores requested by the container. Sampled every 60 seconds. After sampling, data is not visible for up to 120 seconds. type: double The fraction of the requested CPU that is currently in use on the instance. This value can be greater than 1 as usage can exceed the request. Sampled every 60 seconds. After sampling, data is not visible for up to 240 seconds. type: double Local ephemeral storage limit in bytes. Sampled every 60 seconds. type: long Local ephemeral storage request in bytes. Sampled every 60 seconds. type: long Local ephemeral storage usage in bytes. Sampled every 60 seconds. type: long Memory limit of the container in bytes. Sampled every 60 seconds. type: long The fraction of the memory limit that is currently in use on the instance. This value cannot exceed 1 as usage cannot exceed the limit. Sampled every 60 seconds. After sampling, data is not visible for up to 120 seconds. type: double Number of page faults, broken down by type, major and minor. type: long Memory request of the container in bytes. Sampled every 60 seconds. After sampling, data is not visible for up to 120 seconds. type: long The fraction of the requested memory that is currently in use on the instance. This value can be greater than 1 as usage can exceed the request. Sampled every 60 seconds. After sampling, data is not visible for up to 240 seconds. type: double Memory usage in bytes. Sampled every 60 seconds. type: long Number of times the container has restarted. Sampled every 60 seconds. After sampling, data is not visible for up to 120 seconds. type: long Time in seconds that the container has been running. Sampled every 60 seconds. type: double Number of allocatable CPU cores on the node. Sampled every 60 seconds. type: double The fraction of the allocatable CPU that is currently in use on the instance. Sampled every 60 seconds. After sampling, data is not visible for up to 240 seconds. type: double Cumulative CPU usage on all cores used on the node in seconds. Sampled every 60 seconds. type: double Total number of CPU cores on the node. Sampled every 60 seconds. type: double Local ephemeral storage bytes allocatable on the node. Sampled every 60 seconds. type: long Free number of inodes on local ephemeral storage. Sampled every 60 seconds. type: long Total number of inodes on local ephemeral storage. Sampled every 60 seconds. type: long Total ephemeral storage bytes on the node. Sampled every 60 seconds. type: long Local ephemeral storage bytes used by the node. Sampled every 60 seconds. type: long Cumulative memory bytes used by the node. Sampled every 60 seconds. type: long The fraction of the allocatable memory that is currently in use on the instance. This value cannot exceed 1 as usage cannot exceed allocatable memory bytes. Sampled every 60 seconds. After sampling, data is not visible for up to 120 seconds. type: double Number of bytes of memory allocatable on the node. Sampled every 60 seconds. type: long Cumulative memory bytes used by the node. Sampled every 60 seconds. type: long Cumulative number of bytes received by the node over the network. Sampled every 60 seconds. type: long Cumulative number of bytes transmitted by the node over the network. Sampled every 60 seconds. type: long The max PID of OS on the node. Sampled every 60 seconds. type: long The number of running process in the OS on the node. Sampled every 60 seconds. type: long Cumulative CPU usage on all cores used by the node level system daemon in seconds. Sampled every 60 seconds. type: double Memory usage by the system daemon in bytes. Sampled every 60 seconds. type: long Cumulative number of bytes received by the pod over the network. Sampled every 60 seconds. type: long Cumulative number of bytes transmitted by the pod over the network. Sampled every 60 seconds. type: long Total number of disk bytes available to the pod. Sampled every 60 seconds. After sampling, data is not visible for up to 120 seconds. type: long Number of disk bytes used by the pod. Sampled every 60 seconds. type: long The fraction of the volume that is currently being used by the instance. This value cannot be greater than 1 as usage cannot exceed the total available volume space. Sampled every 60 seconds. After sampling, data is not visible for up to 120 seconds. type: double ## loadbalancing Google Cloud Load Balancing metrics The number of bytes sent as requests from HTTP/S load balancer to backends. type: long The number of requests served by backends of HTTP/S load balancer. type: long The number of bytes sent as responses from backends (or cache) to external HTTP(S) load balancer. type: long The number of bytes sent as requests from clients to HTTP/S load balancer. type: long The number of requests served by HTTP/S load balancer. type: long The number of bytes sent as responses from HTTP/S load balancer to clients. type: long The number of bytes sent from external TCP/UDP network load balancer backend to client of the flow. For TCP flows it's counting bytes on application stream only. type: long The number of packets sent from external TCP/UDP network load balancer backend to client of the flow. type: long The number of bytes sent from client to external TCP/UDP network load balancer backend. For TCP flows it's counting bytes on application stream only. type: long The number of packets sent from client to external TCP/UDP network load balancer backend. type: long The number of bytes sent from ILB backend to client (for TCP flows it's counting bytes on application stream only). type: long The number of packets sent from ILB backend to client of the flow. type: long The number of bytes sent from client to ILB backend (for TCP flows it's counting bytes on application stream only). type: long The number of packets sent from client to ILB backend. type: long Number of connections that were terminated over TCP/SSL proxy. type: long Number of bytes sent from VM to client using proxy. type: long Number of bytes sent from client to VM using proxy. type: long Number of connections that were created over TCP/SSL proxy. type: long Current number of outstanding connections through the TCP/SSL proxy. type: long A distribution of the latency calculated from when the request was sent by the proxy to the backend until the proxy received from the backend the last byte of response. type: object A distribution of the latency calculated from when the request was sent by the proxy to the backend until the proxy received from the backend the last byte of response. type: object A distribution of the latency calculated from when the request was received by the proxy until the proxy got ACK from client on last response byte. type: object A distribution of the RTT measured for each connection between client and proxy. type: object A distribution of the latency calculated from when the request was sent by the internal HTTP/S load balancer proxy to the backend until the proxy received from the backend the last byte of response. type: object A distribution of the latency calculated from when the request was received by the internal HTTP/S load balancer proxy until the proxy got ACK from client on last response byte. type: object A distribution of the latency calculated from when the request was received by the external HTTP/S load balancer proxy until the proxy got ACK from client on last response byte. type: object A distribution of the round trip time latency, measured over TCP connections for the external network load balancer. type: object A distribution of RTT measured over TCP connections for internal TCP/UDP load balancer flows. type: object A distribution of the smoothed RTT (in ms) measured by the proxy's TCP stack, each minute application layer bytes pass from proxy to client. type: object ## pubsub Google Cloud PubSub metrics Total byte size of the messages retained in a snapshot. type: long Total byte size of the messages retained in a snapshot, broken down by Cloud region. type: long Cumulative count of configuration changes, grouped by operation type and result. type: long Number of messages retained in a snapshot. type: long Number of messages retained in a snapshot, broken down by Cloud region. type: long Age (in seconds) of the oldest message retained in a snapshot. type: long Age (in seconds) of the oldest message retained in a snapshot, broken down by Cloud region. type: long Cumulative count of messages acknowledged by Acknowledge requests, grouped by delivery type. type: long Total byte size of the unacknowledged messages (a.k.a. backlog messages) in a subscription. type: long Cumulative cost of operations, measured in bytes. This is used to measure quota utilization. type: long Cumulative count of configuration changes for each subscription, grouped by operation type and result. type: long Cumulative count of messages published to dead letter topic, grouped by result. type: long Cumulative count of messages whose deadline was updated by ModifyAckDeadline requests, grouped by delivery type. type: long Cumulative count of ModifyAckDeadline message operations, grouped by result. type: long Cumulative count of ModifyAckDeadline requests, grouped by result. type: long Number of messages delivered to a subscription's push endpoint, but not yet acknowledged. type: long Number of unacknowledged messages (a.k.a. backlog messages) in a subscription. type: long Age (in seconds) of the oldest acknowledged message retained in a subscription. type: long Age (in seconds) of the oldest acknowledged message retained in a subscription, broken down by Cloud region. type: long Age (in seconds) of the oldest unacknowledged message (a.k.a. backlog message) in a subscription. type: long Age (in seconds) of the oldest unacknowledged message in a subscription, broken down by Cloud region. type: long Cumulative count of acknowledge message operations, grouped by result. For a definition of message operations, see Cloud Pub/Sub metric subscription/mod_ack_deadline_message_operation_count. type: long Cumulative count of acknowledge requests, grouped by result. type: long Cumulative count of pull message operations, grouped by result. For a definition of message operations, see Cloud Pub/Sub metric subscription/mod_ack_deadline_message_operation_count. type: long Cumulative count of pull requests, grouped by result. type: long Cumulative count of push attempts, grouped by result. Unlike pulls, the push server implementation does not batch user messages. So each request only contains one user message. The push server retries on errors, so a given user message can appear multiple times. type: long Total byte size of the acknowledged messages retained in a subscription. type: long Total byte size of the acknowledged messages retained in a subscription, broken down by Cloud region. type: long Cumulative count of seek attempts, grouped by result. type: long Cumulative count of messages sent by Cloud Pub/Sub to subscriber clients, grouped by delivery type. type: long Cumulative count of StreamingPull acknowledge message operations, grouped by result. For a definition of message operations, see Cloud Pub/Sub metric subscription/mod_ack_deadline_message_operation_count. type: long Cumulative count of streaming pull requests with non-empty acknowledge ids, grouped by result. type: long Cumulative count of streaming pull message operations, grouped by result. For a definition of message operations, see Cloud Pub/Sub metric

subscription/mod_ack_deadline_message_operation_count
    type: long


  
    Cumulative count of StreamingPull ModifyAckDeadline operations, grouped by result.
    type: long
  
  
    Cumulative count of streaming pull requests with non-empty ModifyAckDeadline fields, grouped by result.
    type: long
  
  
    Cumulative count of streaming pull responses, grouped by result.
    type: long
  
  
    Total byte size of the unacknowledged messages in a subscription, broken down by Cloud region.
    type: long
  
  
    Cost of operations, measured in bytes. This is used to measure utilization for quotas.
    type: long
  
  
    Cumulative count of configuration changes, grouped by operation type and result.
    type: long
  
  
    Distribution of publish message sizes (in bytes)
    type: object
  
  
    Age (in seconds) of the oldest acknowledged message retained in a topic, broken down by Cloud region.
    type: long
  
  
    Age (in seconds) of the oldest unacknowledged message in a topic, broken down by Cloud region.
    type: long
  
  
    Total byte size of the acknowledged messages retained in a topic, broken down by Cloud region.
    type: long
  
  
    Cumulative count of publish message operations, grouped by result. For a definition of message operations, see Cloud Pub/Sub metric subscription/mod_ack_deadline_message_operation_count.
    type: long
  
  
    Cumulative count of publish requests, grouped by result.
    type: long
  
  
    Cumulative count of streaming pull responses, grouped by result.
    type: long
  
  
    Total byte size of the unacknowledged messages in a topic, broken down by Cloud region.
    type: long
  
  
    Distribution of ack latencies in milliseconds. The ack latency is the time between when Cloud Pub/Sub sends a message to a subscriber client and when Cloud Pub/Sub receives an Acknowledge request for that message.
    type: object
  
  
    Distribution of push request latencies (in microseconds), grouped by result.
    type: object




## storage

Google Cloud Storage metrics

  
    Delta count of API calls, grouped by the API method name and response code.
    type: long
  
  
    Delta count of requests that result in an object being granted access solely due to object ACLs.
    type: long
  
  
    Usage of ACL operations broken down by type.
    type: long
  
  
    Delta count of changes made to object specific ACLs.
    type: long
  
  
    Delta count of bytes received over the network, grouped by the API method name and response code.
    type: long
  
  
    Delta count of bytes sent over the network, grouped by the API method name and response code.
    type: long
  
  
    Total number of objects per bucket, grouped by storage class. This value is measured once per day, and the value is repeated at each sampling interval throughout the day.
    type: long
  
  
    Delta count of bytes received over the network, grouped by the API method name and response code.
    type: long
  
  
    Total size of all objects in the bucket, grouped by storage class. This value is measured once per day, and the value is repeated at each sampling interval throughout the day.
    type: long
  



## vertexai_logs


  - Elastic Stack: Beta since 9.2


Google Cloud Vertex AI Prompt Response Logs metrics

  
    The Vertex AI API endpoint URL used for the request.
    type: keyword
  
  
    The ID of the deployed model that processed the request.
    type: keyword
  
  
    Timestamp when the AI interaction was logged.
    type: date
  
  
    Unique identifier for the AI request.
    type: double
  
  
    Array of request payload strings containing user prompts and inputs.
    type: text
  


Field is not indexed.

  
    Array of response payload strings containing AI model outputs.
    type: text
  


Field is not indexed.

  
    Name of the AI model used (e.g., gemini-2.5-pro).
    type: keyword
  
  
    Version of the AI model used.
    type: keyword
  
  
    The API method called (e.g., generateContent, predict).
    type: keyword
  
  
    Complete request object containing all request details in JSON format.
    type: object
  
  
    Complete response object containing all response details in JSON format.
    type: object
  
  
    Additional metadata associated with the AI interaction in JSON format.
    type: object