Trusted Cloud metrics: I through O

This document lists the metric types defined by Trusted Cloud by S3NS services when the service name begins with the letter i through o. For example, this page lists all metric types whose prefix is iam.googleapis.com. For information about other metric types, see Trusted Cloud by S3NS metrics overview.

• For a general explanation of the entries in the tables, including information about values like DELTA and GAUGE, see Metric types.

• For information about the units used in the metric lists, see the unit field in the MetricDescriptor reference.

• For information about statements of the form “Sampled every x seconds” and “After sampling, data is not visible for up to y seconds”, see Additional information: metadata.

• The resource-hierarchy level tells you if the metric is written at the project, organization, or folder level(s). When the level is not specified in the metric descriptor, the metric writes at the project level by default.

• For information about the meaning of launch stages such as GA (General Availability) and BETA (Preview), see Product launch stages.

Trusted Cloud metrics

Metrics from Trusted Cloud by S3NS.

The following list was last generated at 2025-08-08 23:40:45 UTC. For more information about this process, see About the lists.

iam

Metrics from Identity and Access Management. Launch stages of these metrics: BETA GA

The "metric type" strings in this table must be prefixed with iam.googleapis.com/. That prefix has been omitted from the entries in the table. When querying a label, use the metric.labels. prefix; for example, metric.labels.LABEL="VALUE".

Metric type Launch stage (Resource hierarchy levels) Display name
Kind, Type, Unit Monitored resources	Description Labels
service_account/authn_events_count GA  (project) Service account authentication events
DELTA, INT64, 1 iam_service_account	Number of authentication events for a service account. Sampled every 600 seconds. After sampling, data is not visible for up to 10800 seconds.
service_account/key/authn_events_count GA  (project) Service account key authentication events
DELTA, INT64, 1 iam_service_account	Number of authentication events for a service account key. Sampled every 600 seconds. After sampling, data is not visible for up to 10800 seconds. key_id: The key ID associated with the authentication event.
workforce_identity_federation/count BETA  (project) Workforce identity federation count
DELTA, INT64, 1 iam.googleapis.com/WorkforcePoolProvider	Count of token exchanges using workforce identity federation. result: If the request succeeds, the value will be 'success'. Otherwise, the value will match one of the possible OAuth 2.0 error types, for instance, 'invalid_client'.
workload_identity_federation/count BETA  (project) Workload identity federation count
DELTA, INT64, 1 iam.googleapis.com/WorkloadIdentityPoolProvider	Count of token exchanges using workload identity federation. result: If the request succeeds, the value will be 'success'. Otherwise, the value will match one of the possible OAuth 2.0 error types, for instance, 'invalid_client'.
workload_identity_federation/key_usage_count BETA  (project) Workload identity federation key usage count
DELTA, INT64, 1 iam.googleapis.com/WorkloadIdentityPoolProvider	Count of times a key is used as part of workload identity federation. key: The identifier of a public key used during a workload identity federation. use: What the key was used for, one of ['verify' - verify a signature]. Additional values might be added in the future.

logging

Metrics from Cloud Logging. Launch stages of these metrics: BETA GA

The "metric type" strings in this table must be prefixed with logging.googleapis.com/. That prefix has been omitted from the entries in the table. When querying a label, use the metric.labels. prefix; for example, metric.labels.LABEL="VALUE".

Metric type Launch stage (Resource hierarchy levels) Display name
Kind, Type, Unit Monitored resources	Description Labels
billing/bytes_ingested GA  (project) Bytes streamed into log buckets
DELTA, INT64, By global	Number of bytes streamed into log buckets for indexing, querying, and analysis; includes up to 30 days of storage. Sampled every 60 seconds. After sampling, data is not visible for up to 300 seconds. resource_type: Monitored resource type for the log entry.
billing/bytes_stored BETA  (project) Logging Retention
GAUGE, INT64, By global	Volume of logs that are retained past the default 30 days. No data exists when the retention period of a log bucket is never larger than 30 days. This metric might have a value of zero when the retention period of a log bucket is shortened to 30 days. Sampled every 60 seconds. After sampling, data is not visible for up to 300 seconds. data_type: This field indicates that log volume reported here is charged for retention past the default 30 days. The data_type for all reported retention is set to `CHARGED`. log_bucket_location: The location where the log bucket resides. log_bucket_id: The id of the log bucket.
billing/log_bucket_bytes_ingested BETA  (project) Bytes streamed into log buckets
DELTA, INT64, By global	Number of bytes streamed into log buckets for indexing, querying, and analysis; includes up to 30 days of storage. Sampled every 60 seconds. After sampling, data is not visible for up to 300 seconds. log_source: The resource container where the log comes from. resource_type: Monitored resource type for the logs streamed into log buckets. log_bucket_location: The location where the log bucket resides. log_bucket_id: The id of the log bucket.
billing/log_bucket_monthly_bytes_ingested BETA  (project) Bytes streamed into log buckets monthly
GAUGE, INT64, By global	Number of bytes streamed into log buckets for indexing, querying, and analysis for this month-to-date; include up to 30 days of storage. Sampled every 1800 seconds. After sampling, data is not visible for up to 6000 seconds. log_source: The resource container where the log comes from. resource_type: Monitored resource type for the logs streamed into log buckets. log_bucket_location: The location where the log bucket resides. log_bucket_id: The id of the log bucket.
billing/monthly_bytes_ingested GA  (project) Monthly bytes streamed into log buckets
GAUGE, INT64, By global	Month-to-date number of bytes streamed into log buckets for indexing, querying, and analysis; includes up to 30 days of storage. Sampled every 1800 seconds. After sampling, data is not visible for up to 6000 seconds. resource_type: Monitored resource type for the log entry.
byte_count GA  (project) Log bytes
DELTA, INT64, By	Total bytes of log entries, either written directly or routed to this project via project-sink, that are stored in at least one log bucket. Sampled every 60 seconds. log: Name of the log. severity: Severity of the log entry.
dropped_log_entry_count DEPRECATED  (project) Logs-based metric errors (Deprecated)
DELTA, INT64, 1	Use "logging.googleapis.com/logs_based_metrics_error_count" instead. Sampled every 60 seconds. log: Name of the log.
exports/byte_count GA  (project) Exported log bytes
DELTA, INT64, By logging_sink	Number of bytes in log entries that were exported. Sampled every 60 seconds. After sampling, data is not visible for up to 420 seconds.
exports/error_count GA  (project) Exported log entries failures
DELTA, INT64, 1 logging_sink	Number of log entries that failed to be exported. Sampled every 60 seconds. After sampling, data is not visible for up to 420 seconds.
exports/log_entry_count GA  (project) Exported log entries
DELTA, INT64, 1 logging_sink	Number of log entries that were exported. Sampled every 60 seconds. After sampling, data is not visible for up to 420 seconds.
log_entry_count GA  (project) Log entries
DELTA, INT64, 1	Number of log entries, either written directly or routed to this project via project-sink, that are stored in at least one log bucket. By default, log entries are stored for 30 days. Excluded logs are not counted. Sampled every 60 seconds. log: Name of the log. severity: Severity of the log entry.
logs_based_metrics_error_count GA  (project) Logs-based metric errors
DELTA, INT64, 1	Number of log entries, either written directly or routed to this project via project-sink, and are stored in a log bucket but excluded from any system or user-defined logs-based metrics. This condition can occur if the timestamp of a log entry is more than 24 hours older, or 10 minutes newer, than the actual receive time. Sampled every 60 seconds. log: Name of the log.
metric_label_cardinality BETA  (project) Logs-based metric active cardinality count by label
GAUGE, INT64, 1 metric	Cardinality estimate for each metric label of a logs-based metric. The estimate is computed over approximately 25 hours. Sampled every 60 seconds. After sampling, data is not visible for up to 270 seconds. label: Name of the metric label.
metric_label_throttled BETA  (project) Logs-based metric label throttled status
GAUGE, BOOL,  metric	Indicates if metric labels are being dropped for logs-based metrics due to exceeding cardinality limits. Sampled every 60 seconds. After sampling, data is not visible for up to 270 seconds. label: Name of the metric label.
metric_throttled GA  (project) Logs-based metric throttled status
GAUGE, BOOL,  metric	Indicates if labels or points are being dropped for logs-based metrics due to exceeding active time series (cardinality) limits. Sampled every 60 seconds. After sampling, data is not visible for up to 270 seconds.
time_series_count BETA  (project) Logs-based metric active time series (cardinality) count
GAUGE, INT64, 1 metric	Active time series (cardinality) estimates for logs-based metrics. Only metric labels are counted and the estimate is computed over approximately 25 hours. Sampled every 60 seconds. After sampling, data is not visible for up to 270 seconds.

monitoring

Metrics from Cloud Monitoring. Launch stages of these metrics: ALPHA BETA GA

The "metric type" strings in this table must be prefixed with monitoring.googleapis.com/. That prefix has been omitted from the entries in the table. When querying a label, use the metric.labels. prefix; for example, metric.labels.LABEL="VALUE".

Metric type Launch stage (Resource hierarchy levels) Display name
Kind, Type, Unit Monitored resources	Description Labels
billing/bytes_ingested GA  (project) Metric bytes ingested
DELTA, INT64, By global	Chargeable number of bytes of metric data ingested. Sampled every 60 seconds. After sampling, data is not visible for up to 1020 seconds. metric_domain: Domain name prefix from the metric type. metric_type: Metric type for the ingested data. resource_type: Monitored resource type for the ingested data.
billing/bytes_ingested_hourly ALPHA  (project) Metric bytes ingested hourly
DELTA, INT64, By global	Chargeable number of bytes of metric data ingested, aggregated hourly. Sampled every 3600 seconds. After sampling, data is not visible for up to 8220 seconds. metric_domain: Domain name prefix from the metric type. metric_type: Metric type for the ingested data. resource_type: Monitored resource type for the ingested data.
billing/non_chargeable_samples_ingested ALPHA  (project) Non-chargeable metric samples ingested
DELTA, INT64, 1 global	Number of samples of non-chargeable metric data ingested. Sampled every 60 seconds. After sampling, data is not visible for up to 300 seconds. metric_domain: Domain name prefix from the metric type. metric_type: Metric type for the ingested data. resource_type: Monitored resource type for the ingested data. exception_type: The reason why these samples were not charged.
billing/samples_ingested GA  (project) Metric samples ingested
DELTA, INT64, 1 global	Chargeable number of samples of metric data ingested. Chargeable usage reported as samples ingested is never reported as bytes ingested, and vice versa. Sampled every 60 seconds. After sampling, data is not visible for up to 300 seconds. metric_domain: Domain name prefix from the metric type. metric_type: Metric type for the ingested data. resource_type: Monitored resource type for the ingested data.
billing/samples_ingested_hourly ALPHA  (project) Metric samples ingested hourly
DELTA, INT64, 1 global	Chargeable number of samples of metric data ingested, aggregated hourly. Chargeable usage reported as samples ingested is never reported as bytes ingested, and vice versa. Sampled every 3600 seconds. After sampling, data is not visible for up to 7500 seconds. metric_domain: Domain name prefix from the metric type. metric_type: Metric type for the ingested data. resource_type: Monitored resource type for the ingested data.
billing/time_series_billed_for_queries_count BETA  (project) Count of time series billed for queries
DELTA, INT64, 1 global	The number of time series billed for queries. Sampled every 60 seconds. After sampling, data is not visible for up to 300 seconds. api_method: The fully qualified name of the API method which billed the time series.
collection/attribution/write_sample_count BETA  (project) Samples written by attribution id
DELTA, INT64, 1 monitoring.googleapis.com/MetricIngestionAttribution	The number of chargeable metric samples written that are tagged with a reporting attribution dimension. metric_domain: The metric domain. metric_type: The metric type. resource_type: The monitored resource type.
collection/write_request_point_count DEPRECATED  (project) (DEPRECATED) Metric write requests
DELTA, INT64, 1 monitoring.googleapis.com/MetricStatistics	The number of metric points written. One request may contain multiple points, which are counted separately. This metric is deprecated. Please refer to https://cloud.google.com/monitoring/docs/metrics-management#diagnostics and https://cloud.google.com/monitoring/docs/metrics-management#view-summary for how monitor the ingestion of metrics. resource_type: The monitored resource type. status: The status code for the write attempt, for example, "OK" or "INVALID_ARGUMENT".
stats/filtered_byte_count ALPHA  (project) Filtered byte count
DELTA, INT64, 1 global	Number of bytes of metric data filtered through Metric Exclusion rules. Sampled every 60 seconds. After sampling, data is not visible for up to 300 seconds. metric_domain: Domain name prefix from the metric type. metric_type: Metric type that was filtered. resource_type: Monitored resource type for the filtered metric. filter_id: The Metric Exclusion rule ID which caused this metric to be filtered.
stats/filtered_sample_count ALPHA  (project) Filtered sample count
DELTA, INT64, 1 global	Number of samples of metric data filtered through Metric Exclusion rules. Sampled every 60 seconds. After sampling, data is not visible for up to 300 seconds. metric_domain: Domain name prefix from the metric type. metric_type: Metric type that was filtered. resource_type: Monitored resource type for the filtered metric. filter_id: The Metric Exclusion rule ID which caused this metric to be filtered.
stats/metrics_queried_hourly_count ALPHA  (project) Metrics queried hourly count
DELTA, INT64, 1 global	Number of API queries by metric type and origin. Only recorded for user metrics. Sampled every 3600 seconds. After sampling, data is not visible for up to 7380 seconds. api_method: The fully qualified name of the API method through which the metric was queried. origin: The origin of the query, one of [console, other]. metric_type: Metric type for the queried data.
stats/num_time_series GA  (project) Time series count
GAUGE, INT64, 1 global	Number of active time series for user-defined metrics under custom.googleapis.com and logging.googleapis.com/user. An active time series is one that has received data in the previous 24 hours. Sampled every 60 seconds. After sampling, data is not visible for up to 60 seconds. prefix: Metric type name prefix for the encompassed data, one of [custom.googleapis.com, logging.googleapis.com/user].
uptime_check/check_passed GA  (project) Check passed
GAUGE, BOOL,  aws_ec2_instance cloud_run_revision gae_app gce_instance k8s_service servicedirectory_service uptime_url	True if the resource passed the check. After sampling, data is not visible for up to 35 seconds. check_id: The Uptime check for which the request was made. checker_location: For external checks, the Uptime Monitoring location making the request. checker_project_id: For internal checks, the checker project. checker_network: For internal checks, the checker network. checker_zone: For internal checks, the checker zone. checked_resource_id: ID of the resource being checked. Format depends on resource type.
uptime_check/content_mismatch GA  (project) Content mismatch
GAUGE, BOOL,  aws_ec2_instance cloud_run_revision gae_app gce_instance k8s_service servicedirectory_service uptime_url	True if the response failed to match the check's specification of required content. After sampling, data is not visible for up to 35 seconds. check_id: The Uptime check for which the request was made. checker_location: For external checks, the Uptime Monitoring location making the request. checker_project_id: For internal checks, the checker project. checker_network: For internal checks, the checker network. checker_zone: For internal checks, the checker zone. checked_resource_id: ID of the resource being checked. Format depends on resource type.
uptime_check/error_code GA  (project) Error code
GAUGE, STRING,  aws_ec2_instance cloud_run_revision gae_app gce_instance k8s_service servicedirectory_service uptime_url	Error, if any, that prevented contact with the resource. After sampling, data is not visible for up to 35 seconds. check_id: The Uptime check for which the request was made. checker_location: For external checks, the Uptime Monitoring location making the request. checker_project_id: For internal checks, the checker project. checker_network: For internal checks, the checker network. checker_zone: For internal checks, the checker zone. checked_resource_id: ID of the resource being checked. Format depends on resource type.
uptime_check/http_status GA  (project) HTTP status
GAUGE, STRING,  aws_ec2_instance cloud_run_revision gae_app gce_instance k8s_service servicedirectory_service uptime_url	HTTP response code returned by the resource. After sampling, data is not visible for up to 35 seconds. check_id: The Uptime check for which the request was made. checker_location: For external checks, the Uptime Monitoring location making the request. checker_project_id: For internal checks, the checker project. checker_network: For internal checks, the checker network. checker_zone: For internal checks, the checker zone. checked_resource_id: ID of the resource being checked. Format depends on resource type.
uptime_check/request_latency GA  (project) Request latency
GAUGE, DOUBLE, ms aws_ec2_instance cloud_run_revision gae_app gce_instance k8s_service servicedirectory_service uptime_url	The request latency in milliseconds measured by Uptime Monitoring when executing the request. After sampling, data is not visible for up to 35 seconds. check_id: The Uptime check for which the request was made. checker_location: For external checks, the Uptime Monitoring location making the request. checker_project_id: For internal checks, the checker project. checker_network: For internal checks, the checker network. checker_zone: For internal checks, the checker zone. checked_resource_id: ID of the resource being checked. Format depends on resource type.
uptime_check/time_until_ssl_cert_expires GA  (project) Time until SSL certificate expires
GAUGE, DOUBLE, d aws_ec2_instance cloud_run_revision gae_app gce_instance k8s_service servicedirectory_service uptime_url	The number of days until the SSL certificate on the resource expires. After sampling, data is not visible for up to 35 seconds. check_id: The Uptime check for which the request was made. checker_location: For external checks, the Uptime Monitoring location making the request. checker_project_id: For internal checks, the checker project. checker_network: For internal checks, the checker network. checker_zone: For internal checks, the checker zone. checked_resource_id: ID of the resource being checked. Format depends on resource type.

networksecurity

Metrics from Google Cloud Armor. Launch stages of these metrics: BETA GA

The "metric type" strings in this table must be prefixed with networksecurity.googleapis.com/. That prefix has been omitted from the entries in the table. When querying a label, use the metric.labels. prefix; for example, metric.labels.LABEL="VALUE".

Metric type Launch stage (Resource hierarchy levels) Display name
Kind, Type, Unit Monitored resources	Description Labels
dos/ingress_bytes_count BETA  (project) Ingress bytes
DELTA, INT64, By networksecurity.googleapis.com/ProtectedEndpoint	The total number of bytes received, broken down by drop status (allowed or dropped). Sampled every 60 seconds. After sampling, data is not visible for up to 180 seconds. drop_status: Indicates whether the bytes were dropped or allowed by the network infrastructure.
dos/ingress_packets_count BETA  (project) Ingress packets
DELTA, INT64, {packets} networksecurity.googleapis.com/ProtectedEndpoint	The total number of packets received, broken down by drop status (allowed or dropped). Sampled every 60 seconds. After sampling, data is not visible for up to 180 seconds. drop_status: Indicates whether the packets were dropped or allowed by the network infrastructure.
firewall_endpoint/health BETA  (project) Firewall Endpoint Health
GAUGE, BOOL, 1 networksecurity.googleapis.com/FirewallEndpoint	Indicates whether the Firewall Endpoint is healthy or not. Sampled every 60 seconds. After sampling, data is not visible for up to 60 seconds.
firewall_endpoint/received_bytes_count BETA  (project) Received bytes
DELTA, INT64, By networksecurity.googleapis.com/FirewallEndpoint	Total Firewall Endpoint received bytes. security_profile_group_name: The name of the security profile group. inspected_network_name: The name of the Network that was inspected. inspected_project_id: The ID of the GCP project associated with the network.
firewall_endpoint/received_packets_count BETA  (project) Received packets
DELTA, INT64, 1 networksecurity.googleapis.com/FirewallEndpoint	Total Firewall Endpoint received packets. security_profile_group_name: The name of the security profile group. inspected_network_name: The name of the Network that was inspected. inspected_project_id: The ID of the GCP project associated with the network.
firewall_endpoint/sent_bytes_count BETA  (project) Sent bytes
DELTA, INT64, By networksecurity.googleapis.com/FirewallEndpoint	Total Firewall Endpoint sent bytes. security_profile_group_name: The name of the security profile group. inspected_network_name: The name of the Network that was inspected. inspected_project_id: The ID of the GCP project associated with the network.
firewall_endpoint/sent_packets_count BETA  (project) Sent packets
DELTA, INT64, 1 networksecurity.googleapis.com/FirewallEndpoint	Total Firewall Endpoint sent packets. security_profile_group_name: The name of the security profile group. inspected_network_name: The name of the Network that was inspected. inspected_project_id: The ID of the GCP project associated with the network.
firewall_endpoint/threats_count BETA  (project) Threats count
DELTA, INT64, 1 networksecurity.googleapis.com/FirewallEndpoint	Total Firewall Endpoint detected threats. Sampled every 60 seconds. After sampling, data is not visible for up to 120 seconds. security_profile_group_name: The name of the security profile group. inspected_network_name: The name of the Network that was inspected. inspected_project_id: The ID of the GCP project associated with the network. action: The action that was taken, either the default action or the override action specified in the security profile.
https/previewed_request_count GA  (project) Previewed request count
DELTA, INT64, 1 network_security_policy	Queries that would be affected by rules currently in the 'preview' mode, if those rules were to be made non-preview. Sampled every 60 seconds. After sampling, data is not visible for up to 210 seconds. blocked: (BOOL) Policy application result. backend_target_name: HTTP(S) Backend Service Name.
https/request_count GA  (project) Request count
DELTA, INT64, 1 network_security_policy	Actual result of policy enforcement on queries. Sampled every 60 seconds. After sampling, data is not visible for up to 210 seconds. blocked: (BOOL) Policy application result. backend_target_name: HTTP(S) Backend Service Name.
l3/external/packet_count BETA  (project) Packet count
DELTA, INT64, 1 networksecurity.googleapis.com/RegionalNetworkSecurityPolicy	Estimated number of packets by matching rule and enforcement action (sampled). rule_number: (INT64) Rule number in RegionalSecurityPolicy. blocked: (BOOL) Rule application result.
l3/external/preview_packet_count BETA  (project) Preview packet count
DELTA, INT64, 1 networksecurity.googleapis.com/RegionalNetworkSecurityPolicy	Estimated number of packets that would be affected by rule currently in preview mode, if that rule were to be made non-preview (sampled). rule_number: (INT64) Rule number in RegionalSecurityPolicy. blocked: (BOOL) Rule application result.
partner_sse_gateway/established_bgp_sessions BETA  (project) Established BGP sessions
GAUGE, INT64, 1 networksecurity.googleapis.com/PartnerSSEGateway	Number of external BGP sessions established by the Partner SSE Gateway. Sampled every 60 seconds. After sampling, data is not visible for up to 120 seconds.
partner_sse_gateway/sse_received_bytes_count BETA  (project) Bytes received from partner
DELTA, INT64, By networksecurity.googleapis.com/PartnerSSEGateway	Count of bytes received by the Partner SSE Gateway from the partner. zone: The zone in which the gateway received and processed packets.
partner_sse_gateway/sse_received_packets_count BETA  (project) Packets received from partner
DELTA, INT64, 1 networksecurity.googleapis.com/PartnerSSEGateway	Count of packets received by the Partner SSE Gateway from the partner. zone: The zone in which the gateway received and processed packets.
partner_sse_gateway/sse_sent_bytes_count BETA  (project) Bytes sent to partner
DELTA, INT64, By networksecurity.googleapis.com/PartnerSSEGateway	Count of bytes sent by the Partner SSE Gateway to the partner. zone: The zone from which the gateway sent packets.
partner_sse_gateway/sse_sent_packets_count BETA  (project) Packets sent to partner
DELTA, INT64, 1 networksecurity.googleapis.com/PartnerSSEGateway	Count of packets sent by the Partner SSE Gateway to the partner. zone: The zone from which the gateway sent packets.
sse_gateway/sse_received_bytes_count BETA  (project) Bytes received from partner
DELTA, INT64, By networksecurity.googleapis.com/SSEGateway	Count of bytes received by the SSE Gateway from the partner endpoint.
sse_gateway/sse_received_packets_count BETA  (project) Packets received from partner
DELTA, INT64, 1 networksecurity.googleapis.com/SSEGateway	Count of packets received by the SSE Gateway from the partner endpoint.
sse_gateway/sse_sent_bytes_count BETA  (project) Bytes sent to partner
DELTA, INT64, By networksecurity.googleapis.com/SSEGateway	Count of bytes sent by the SSE Gateway to the partner endpoint.
sse_gateway/sse_sent_packets_count BETA  (project) Packets sent to partner
DELTA, INT64, 1 networksecurity.googleapis.com/SSEGateway	Count of packets sent by the SSE Gateway to the partner endpoint.
sse_gateway/trusted_network_received_bytes_count BETA  (project) Bytes received from trusted network
DELTA, INT64, By networksecurity.googleapis.com/SSEGateway	Count of bytes received by the SSE Gateway from a trusted application network.
sse_gateway/trusted_network_received_packets_count BETA  (project) Packets received from trusted network
DELTA, INT64, 1 networksecurity.googleapis.com/SSEGateway	Count of packets received by the SSE Gateway from a trusted application network.
sse_gateway/trusted_network_sent_bytes_count BETA  (project) Bytes sent to trusted network
DELTA, INT64, By networksecurity.googleapis.com/SSEGateway	Count of bytes sent by the SSE Gateway to a trusted application network.
sse_gateway/trusted_network_sent_packets_count BETA  (project) Packets sent to trusted network
DELTA, INT64, 1 networksecurity.googleapis.com/SSEGateway	Count of packets sent by the SSE Gateway to a trusted application network.
sse_gateway/untrusted_network_received_bytes_count BETA  (project) Bytes received from untrusted network
DELTA, INT64, By networksecurity.googleapis.com/SSEGateway	Count of bytes received by the SSE Gateway from an untrusted user network.
sse_gateway/untrusted_network_received_packets_count BETA  (project) Packets received from untrusted network
DELTA, INT64, 1 networksecurity.googleapis.com/SSEGateway	Count of packets received by the SSE Gateway from an untrusted user network.
sse_gateway/untrusted_network_sent_bytes_count BETA  (project) Bytes sent to untrusted network
DELTA, INT64, By networksecurity.googleapis.com/SSEGateway	Count of bytes sent by the SSE Gateway to an untrusted user network.
sse_gateway/untrusted_network_sent_packets_count BETA  (project) Packets sent to untrusted network
DELTA, INT64, 1 networksecurity.googleapis.com/SSEGateway	Count of packets sent by the SSE Gateway to an untrusted user network.
tcp_ssl_proxy/new_connection_count GA  (project) New connection count
DELTA, INT64, 1 network_security_policy	Actual result of policy enforcement on new connections. Sampled every 60 seconds. After sampling, data is not visible for up to 210 seconds. blocked: (BOOL) Policy application result. backend_target_name: TCP/SSL Backend Service Name.
tcp_ssl_proxy/previewed_new_connection_count GA  (project) Previewed new connection count
DELTA, INT64, 1 network_security_policy	New connections that would be affected by rules currently in the 'preview' mode, if those rules were to be made non-preview. Sampled every 60 seconds. After sampling, data is not visible for up to 210 seconds. blocked: (BOOL) Policy application result. backend_target_name: TCP/SSL Backend Service Name.

Generated at 2025-08-08 23:40:45 UTC.