You configured Cloud VPN with BGP and added a custom route to advertise a network over the VPN, but on‑prem clients cannot reach it. Which Cloud Logging filter shows the appropriate router advertisements over the VPN?

The correct filter is resource.type="gcerouter" because Cloud Routers (which manage BGP sessions for Cloud VPN and Cloud Interconnect) are responsible for advertising routes to your on-premises network. To troubleshoot why on-prem clients cannot reach the advertised network, you need to examine the logs of the Cloud Router to verify if the custom route is being correctly advertised and if there are any BGP-related issues. resource.type="gcenetworkregion" is too broad and doesn't focus on routing specifics. resource.type="vpntunnel" would show tunnel status but not BGP route advertisements. resource.type="vpngateway" logs would show gateway-level events but not the BGP routing advertisements handled by the Cloud Router.