From 2a6c61d4e5a0c553631c83e714c0cf5bbdcda298 Mon Sep 17 00:00:00 2001
From: Tom Martensen <tmartens@redhat.com>
Date: Wed, 6 Sep 2023 19:05:09 +0200
Subject: [PATCH] ROX-17443: add hint to find stored logs (#975)

---
 DEPLOYMENT.md | 9 +++++++++
 1 file changed, 9 insertions(+)

diff --git a/DEPLOYMENT.md b/DEPLOYMENT.md
index 335e1b036..3e9b70333 100644
--- a/DEPLOYMENT.md
+++ b/DEPLOYMENT.md
@@ -161,3 +161,12 @@ Download a copy of `infractl` and export your token. Verify API connectivity:
 | --- | --- |
 | Staging | `infractl -e dev.infra.rox.systems:443 whoami` |
 | Production | `infractl whoami` |
+
+## Logging
+
+The infra server logs are captured automatically by GCP.
+
+- [Logs Explorer: Staging](https://cloudlogging.app.goo.gl/uSmEsjAmYR8Uyvyx9)
+- [Logs Explorer: Production](https://cloudlogging.app.goo.gl/KqgSyE2mSq83M5Xs9)
+
+Adding `jsonPayload."log-type"="audit"` to the query will filter for audit logs.