Query: Logs by Project

select
  split_part(log_name, '/', 2) as "Project",
  count(*) as "Logs"
from
  gcp_audit_log
where
  split_part(log_name, '/', 2) is not null
group by
  split_part(log_name, '/', 2)
order by
  count(*) desc
limit 10;