Monitor traffic through Agent Gateway

Private Preview — Agent Gateway

This feature is subject to the "Pre-GA Offerings Terms" in the General Service Terms section of the Service Specific Terms. Pre-GA features are available "as is" and might have limited support. For more information, see the launch stage descriptions.

Use this page to learn how to view logs and monitor requests and access control decisions for traffic routed through your Agent Gateway deployment.

Logging

Agent Gateway logs are generated using the networkservices.googleapis.com/Gateway monitored resource.

You can use these logs to monitor access requests to the gateway. This includes the logs created when Agent Gateway is deployed in dry-run mode.

View logs for a specific gateway

To view the logs for a specific gateway, complete the following steps.

Console query

1. In the Google Cloud console, go to the Logs Explorer page.

   Go to Logs Explorer

2. Click the Show query toggle.

3. Paste the following into the query field.

   resource.type="networkservices.googleapis.com/Gateway"
   resource.labels.location="REGION"
   resource.labels.gateway_name="AGENT_GATEWAY_NAME"
   

   Replace the following:

   • REGION: The region of your gateway.
   • AGENT_GATEWAY_NAME: The name of your gateway.

4. Click Run query.

What is logged

Agent Gateway log entries contain information useful for monitoring and debugging traffic to and from your gateway.

Field	Field format	Field type: Required or Optional	Description
				severity insertID timestamp receiveTimestamp trace traceSampled logName	LogEntry	Required	The general fields as described in a log entry.
httpRequest	HttpRequest	Required	A common protocol for logging HTTP requests.
resource	MonitoredResource	Required	The MonitoredResource is the resource type associated with a log entry. The resource type for Agent Gateway is networkservices.googleapis.com/Gateway.
jsonPayload	object (Struct format)	Required	The log entry payload that is expressed as a JSON object. The JSON object contains the following Agent Gateway fields: agentGatewayInfo: Includes information about Agent Gateway requests. mcpInfo: Includes information about the MCP method of the request (for example, "tools/list" or "tools/call") and the primary parameter associated with the method, if any. For example, in the case of the "tools/call" method the parameter is the tool name. agentRegistryResource: The Agent Registry resource name of the MCP server, agent, or endpoint that was matched to the request.

Monitoring

Agent Gateway exports some Service Extensions metrics to Cloud Monitoring. If you're delegating authorization to Service Extensions, you can use these metrics to monitor traffic to and from your extension. For details, see Logging and monitoring for Cloud Load Balancing callouts.