Introducing comprehensive audit logs for Gemini Notebook

Introducing comprehensive audit logs for Gemini Notebook in the Workspace Admin console

Google Workspace administrators can now access comprehensive audit logs for Gemini Notebook in the Admin console, providing greater insights into how the application is used across their organizations. This update introduces full visibility into Gemini Notebook actions, allowing administrators to review usage and audit data access in the security investigation tool and audit and investigation tool.

Gemini Notebook log events in the ‘Audit and Investigation’ tool in the Admin console.

Additional details

Administrators can track a wide range of user actions across multiple categories, including notebook visibility, user identity, IP address, and resource context. These audit logs can be exported and reviewed using BigQuery or accessed directly within the Admin console using the security investigation tool. These monitoring capabilities help administrators meet regulatory compliance requirements, understand collaboration patterns, and protect company data within their digital environments.

Note: While audit log storage itself follows standard Workspace regional routing policies, Gemini Notebook user data—such as notebooks, sources, and chat histories—is stored globally and does not currently support data regionalization.

Getting started

Admins: Gemini Notebook audit logs will be available by default in the Workspace Admin console, but exporting audit logs to BigQuery will be disabled until turned on. Visit the Help Center to learn more about Gemini Notebook log events, schema in BigQuery and setting up service log exports to BigQuery.
End users: There is no end user setting for this feature.

Rollout pace

Rapid Release and Scheduled Release domains: Gradual rollout (up to 15 days for feature visibility) started on September 3, 2026

Availability

Available to all Google Workspace customers that have access to the security investigation tool and audit and investigation tool

Resources

Google Workspace Admin Help: Gemini Notebook log events

Introducing comprehensive audit logs for Gemini Notebook in the Workspace Admin console

Google Workspace administrators can now access comprehensive audit logs for Gemini Notebook directly within the Workspace Admin console. This update gives organizations much deeper visibility into how the application is being used, helping them track collaboration patterns, safeguard sensitive corporate data, and meet regulatory compliance requirements. [1, 2]

Key Capabilities of the New Logs

The update offers complete tracking across the Security Investigation and Audit and Investigation tools in the Admin console: [1, 2]

Detailed Granular Tracking: Admins can review a wide range of user actions, including notebook visibility settings, user identities, connecting IP addresses, and specific resource contexts. [1]
BigQuery Integration: While logs are viewable natively in the console, admins can also export this data into Google BigQuery for advanced long-term analytics and custom security dashboards. [1]
Data Storage Note: While standard Workspace regional routing applies to the storage of the audit logs themselves, user content within Gemini Notebook (like notebooks, uploaded sources, and conversational history) remains globally stored and does not support data regionalization yet. [1]

How to Access the Logs

To review Gemini Notebook events, administrators can follow these steps:

Open the Google Workspace Admin Console.
Navigate to Menu > Reporting > Audit and investigation > Gemini for Workspace log events.
Use the filter tools to drill down by specific attributes, such as Date or Event type. [3]

Note: Accessing these logs requires the Audit & Investigation administrator privilege, and exporting capabilities to BigQuery are turned off by default until an admin enables them. There are no adjustments or settings required for end users. [1, 3]

Introducing comprehensive