skills.rest
alon3153
alon3153COMMUNITY
Explore all skills by this author →
GitHub

google-cloud-networking-observability

Investigates Google Cloud networking issues using logs, metrics, and Connectivity Tests.

Updated May 11, 2026
Search Tags:#google cloud#bigquery#network troubleshooting#vpc flow logs#firewall logs#cloud nat#connectivity tests
One-click install
npx skills add https://github.com/alon3153/upe-social-publisher --skill google-cloud-networking-observability-alon3153
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: google-cloud-networking-observability
Source: https://github.com/alon3153/upe-social-publisher/tree/main/.agents/skills/google-cloud-networking-observability
Command: npx skills add https://github.com/alon3153/upe-social-publisher --skill google-cloud-networking-observability-alon3153

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve? Diagnosing Google Cloud networking problems requires navigating scattered telemetry sources like VPC Flow Logs, firewall logs, NAT logs, threat logs, and metrics. This Skill guides an AI agent to pick the right data source, run the correct query, and return a definitive answer without wasteful exploratory loops. ## Core Features & Use Cases - Log Analysis: Query VPC Flow Logs, firewall rule logs, Cloud NAT logs, and threat logs via Cloud Logging MCP, BigQuery MCP, or gcloud/bq CLI fallbacks. - Metrics & Latency Analysis: Retrieve RTT, packet loss, throughput, and NAT port exhaustion metrics from Cloud Monitoring with proper distribution alignment. - Connectivity Tests: Run Network Management Connectivity Tests for static path diagnostics between endpoints, with mandatory cleanup. - VPC Flow Logs Cost Estimation: Estimate monthly VPC Flow Logs cost for subnets, VPCs, or entire projects using tiered pricing and a 30-day metrics window. - Use Case: A user asks why a VM cannot reach a database. The Skill checks firewall DENY logs in BigQuery, identifies the blocking rule, and reports the finding immediately. ## Quick Start Ask the agent to investigate why traffic from a specific VM is being blocked, or to estimate VPC Flow Logs cost for your project.

Frequently Asked Questions about google-cloud-networking-observability

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I find which firewall rule is blocking traffic in GCP?▼

Query firewall logs (compute.googleapis.com/firewall) filtered by jsonPayload.rule_details.action="DENY" using Cloud Logging or BigQuery. Aggregating by rule_details.reference in BigQuery shows the top blocking rules by count.

How to analyze VPC Flow Logs with BigQuery?▼

Query the _AllLogs dataset filtering log_name for vpc_flows entries, extracting fields like json_payload.connection.src_ip and bytes_sent with JSON_VALUE. BigQuery aggregation is the preferred source for top-talkers and volume analysis.

How do I estimate VPC Flow Logs cost for a project?▼

The Skill queries the predicted_max_vpc_flow_logs_count metric over 30 days via the Monitoring API, then applies tiered generation pricing plus Cloud Logging storage costs. It supports subnet, VPC, and project scopes but rejects VPN and Interconnect estimation.

Why does my VPC Flow Logs query by VM name return no results?▼

Subnetworks configured with EXCLUDE_ALL_METADATA leave VM names NULL in flow logs. Retry the query using the internal IP address from jsonPayload.connection.src_ip instead of the VM name.

Can Connectivity Tests confirm traffic will flow between two VMs?▼

Connectivity Tests perform static configuration analysis, so a REACHABLE result does not guarantee live traffic. Always verify both source and destination instances are in RUNNING state, and delete the test resource after retrieving results.

When should I use BigQuery instead of Cloud Monitoring for network analysis?▼

Use BigQuery aggregation on _AllLogs for top-N discovery, volume counts, and trend analysis across large datasets. Use Cloud Monitoring for time-series metrics like RTT and packet loss; never query both to cross-verify the same answer.

Related Skills

Explore More Software Engineering Skills→
wangx7wangx7

google-cloud-networking-observability

Analyze Google Cloud VPC Flow Logs, firewall rules, and metrics to diagnose networking issues.

Community
Advanced
AndreKuraitAndreKurait

enabling-lambda-vpc-internet-access

Provision NAT Gateway infrastructure to enable internet access for Lambda functions in VPC private subnets.

Community
Advanced
h4vzzh4vzz
33

cloud-monitoring

Monitor cloud infrastructure with metrics, logs, traces, and alerting.

Community
Advanced
as4584as4584
2

protocol-reverse-engineering

Capture, dissect, and analyze network traffic to reverse engineer protocols.

Community
Advanced