"gcp.audit.method_name":v*.Compute.Firewalls.Delete OR "gcp.audit.method_name":v*.Compute.Firewalls.Patch OR "gcp.audit.method_name":v*.Compute.Firewalls.Update OR "gcp.audit.method_name":v*.Compute.Firewalls.Insert