This page describes how to use Cloud Monitoring to view and graph metricsdata about your Sensitive Data Protection usage.

Sensitive Data Protection sends detailed telemetry about your Sensitive Data Protectionusage to Monitoring. This can be useful to monitor forunexpected findings, amount of data scanned or transformed, errors injob triggers or jobs, andexpenses.

View Sensitive Data Protection metrics in Monitoring

UsingMetrics Explorer inCloud Monitoring, you can dig into available metrics data to give youinsight into your Sensitive Data Protection usage. Monitoringsupports a wide variety of metrics, which you can combine with filters andaggregations for new and insightful views.

To view the metrics for a monitored resource by using theMetrics Explorer, do the following:

1. In the Google Cloud console, go to theleaderboard Metrics explorer page:

   Go toMetrics explorer

   If you use the search bar to find this page, then select the result whose subheading isMonitoring.

2. In theMetric element, expand theSelect a metric menu, and then select a resource type and metric type. For example, to chart the CPU utilization of a virtual machine, do the following:
   1. (Optional) To reduce the menu's options, enter part of the metric name in theFilter bar. For this example, enterutilization.
   2. In theActive resources menu, selectVM instance.
   3. In theActive metric categories menu, selectInstance.
   4. In theActive metrics menu, selectCPU utilization and then clickApply.

3. To filter which time series are displayed, use theFilter element.

4. To combine time series, use the menus on theAggregation element. For example, to display the CPU utilization for your VMs, based on their zone, set the first menu toMean and the second menu tozone.

   All time series are displayed when the first menu of theAggregation element is set toUnaggregated. The default settings for theAggregation element are determined by the metric type you selected.

To see Sensitive Data Protection-specific metrics in Metrics Explorer, search withdlp.googleapis.com to refine your search results.

To see API metrics in Metrics Explorer, selectConsumed API as the resourcetype, and then use the filter and aggregation options to refine your data.

After you've found the metrics you want, you can use Monitoringto create custom dashboards and alerts that will help you continue to monitorand maintain a robust application.

Graph the metrics

You can graph metrics by aggregating them usingAdvanced Aggregation. Use the following settings:

• Aligner: SUM
• Alignment Period: 1440

You get a chart showing the results per day.

Cloud Monitoring supports alerting on all metrics. Using theSensitive Data Protection metrics, you can alert on use cases that include:

• Monitorcontent_bytes_inspected_count orcontent_bytes_transformed_count to alert when spend has exceeded budget for a day.
• Alert when the number of total findings or findings for a specific infoType exceed a threshold. For example, you can build an alert ifCREDIT_CARD_NUMBER findings exceed 0 in a given project where no PII should exist.

Available metrics

The following metric type names must be prefixed withdlp.googleapis.com/. That prefix has been omitted from the entries in thetable.