I have enabling google admin to share workspace audit log to GCP, then i search workspace audit log with this query :
resource.type=“audited_resource”
resource.labels.service=“admin.googleapis.com” OR
resource.labels.service=“login.googleapis.com”
But I am not found log from google application such as Google Drive, Gmail, Google Calendar Audit log, Anyone know how to get it?