Assistance Needed: Identifying FCM API Access Logs in Google Cloud Console

[madiguzel87]

Hi there,

We are seeking guidance regarding an issue we've encountered while working to enhance the security of push notifications in our mobile applications. Specifically, we aim to introduce IP restrictions on our Server API Keys in the Google Cloud Console.

To identify the IP addresses currently accessing the FCM API, we attempted to review logs through the "Google Cloud Console / Logging / Log Explorer" for the relevant project. However, we have not been able to find any logs related to the FCM API.

We explored various sources and applied different filtering methods but could not locate any relevant log entries. Below are examples of the filters we’ve used so far:

1. resource.type="firebase_project"
2. resource.type="global"

    protoPayload.serviceName="fcm.googleapis.com"

If anyone has successfully tackled a similar challenge or can provide insights into locating FCM API-related logs, we would sincerely appreciate your advice and assistance.

Thank you for your time and support.

[ronnelg]

Hi @madiguzel87, 

Welcome to Google Cloud Community!

Have you tried to use the service name gcmcontextualcampaign-pa.googleapis.com?

protoPayload.serviceName="gcmcontextualcampaign-pa.googleapis.com"

For your reference, have a look at this documentation of audit logging for Firebase Cloud Messaging. 

Was this helpful? If so, please accept this answer as “Solution”. If you need additional assistance, reply here within 2 business days and I’ll be happy to help.