if (data.resource && data.resource.type && data.resource.type === "bigquery_resource" && data.protoPayload && data.protoPayload.serviceData) { for (var event in data.protoPayload.serviceData) { var eventServiceData = data.protoPayload.serviceData[event]; if (eventServiceData.job && eventServiceData.job.jobConfiguration){ eventServiceData.job.jobConfiguration.query = "REDACTED" } } }
TIL that you can redact sensitive SQL query field from BigQuery AuditData data access logs: