Anthos distinguishes between the system and application observability data. System observability data includes metrics and monitoring of the Anthos system components. System observability data is sent to the corresponding customer owned google cloud project. The application observability data must be sent to the nearest Google Cloud region.

Consider the following options before deciding to send an application observability to Google Cloud.

• You can send the logging and monitoring data to a third-party logging solution.
• You can send the logging data to a local logging store which might offer a familiar path to meeting compliance requirements. However, Cloud Logging supports several features for meeting compliance requirements. These features include encrypted logs storage with Customer Managed Encryption Keys (CMEK), External Key Managers 17, Access Transparency, and Access Approval.
• Preconfigured logging dashboards 18 and 19 are available for Anthos on Google Cloud.
•  Prometheus compatibility for Cloud Monitoring.
•  There is a cost for observability data that is ingested and stored in Google Cloud 20.

Application developers and application or platform operators can view logging and monitoring data in Google Cloud. The on-premises clusters and applications send this logging and monitoring data back to Google Cloud for analysis and review.

In this approach, different personas are granted access to only the environments they need as shown in the following figure. Applications that run in on-premises clusters direct logging and monitoring data back into Google Cloud for analysis and review.

 Figure 6.   Sample Google cloud configuration