Data Collection
  if (data.resource && data.resource.type &&
    data.resource.type === "bigquery_resource" &&
    data.protoPayload && data.protoPayload.serviceData) {   
  for (var event in data.protoPayload.serviceData) {
    var eventServiceData = data.protoPayload.serviceData[event];
    if (eventServiceData.job &&
        eventServiceData.job.jobConfiguration){
      eventServiceData.job.jobConfiguration.query = "REDACTED"
    }
  }
}
TIL that  you can redact sensitive SQL query field from BigQuery AuditData data access logs: