@jogre I was able to get it working by having a single simple policy like the one you mentioned. I then let it run for a couple days and was able to see events with the following query:```protoPayload.serviceName="artifactregistry.googleapis.com"prot...