Skip to content

Cloud Logging Query Writer

Turns plain-English requests into correct Google Cloud Logging Query Language (LQL) filters.

Repository
google/skills
Stars
21,782
Licence
Apache-2.0
Files
15 files

What it does

When installed, the agent writes Cloud Logging queries in Google's Logging Query Language from a plain-English request, such as finding errors from a Cloud Run service or audit events for a deleted resource. It follows the skill's rules for correct syntax (double quotes, capitalised AND/OR/NOT, grouped conditions), looks up the right resource type in per-service reference files, and avoids adding filters for details the user did not give. The output is the raw query text, with short comments where needed.

Great for

  • Engineers debugging production issues who want a query quickly without memorising LQL syntax
  • Platform or security staff writing audit log searches for who changed or accessed a resource
  • Teams new to Cloud Logging who need correct resource.type and log_id values

Skip it if

  • Querying SQL or Cloud Spanner databases, which the skill explicitly excludes; the query text is only for Cloud Logging
  • Environments where the agent cannot read the bundled reference files, since its accuracy depends on consulting them; the generated queries are unverified until run against real logs

Try asking

  • “Show me error logs from my Cloud Run service checkout-api in the last hour”
  • “Find audit logs showing who deleted a Compute Engine instance”
  • “Write a query for Cloud SQL slow query or failed connection messages”
  • “Filter Cloud Functions logs with severity ERROR or higher”
Step-by-step guide: how to use Cloud Logging Query WriterInstall, first run, examples, tips and FAQs

Install in 3 steps

  1. 1

    Download the skill

    The ZIP contains the 15 original files, the Apache-2.0 licence and an attribution note.

    cloud-logging-query-generation.zip
  2. 2

    Add it to your agent

    Claude Code (all projects)

    mkdir -p ~/.claude/skills && unzip cloud-logging-query-generation.zip -d ~/.claude/skills/

    Claude Code / Agent SDK (this project only)

    mkdir -p .claude/skills && unzip cloud-logging-query-generation.zip -d .claude/skills/

    Claude apps (web/desktop): Settings → Capabilities → Skills → Upload skill, and choose the ZIP.

  3. 3

    Ask for the task

    No special command needed — the agent reads the skill's description and loads it when your request matches. Try one of the prompts above.

Get better results

  • Name the project, service, and time range you care about so the agent can include the right resource.type and log_id filters.
  • Check the query in the Logs Explorer before relying on it, since placeholders such as <PROJECT_ID> must be filled in.
  • Ask for audit logs explicitly if you want who-did-what events, so the agent reads the audit log reference.

What's inside

  • references/api_reference.md
  • references/attribution.md
  • references/query_app_engine.md
  • references/query_audit_logs.md
  • references/query_bigquery.md
  • references/query_cloud_functions.md
  • references/query_cloud_observability.md
  • references/query_cloud_run.md
  • references/query_cloud_source_repositories.md
  • references/query_cloud_sql.md
  • references/query_cloud_storage.md
  • references/query_cloud_tasks.md
  • references/query_compute_engine.md
  • references/query_dataflow.md
  • SKILL.md

Redistributed unmodified from google/skills under the Apache-2.0 licence. The assessment was drafted with AI from the skill's files on 2026-10-29. Skills can instruct your agent to run code — read SKILL.md and any scripts before installing.