Edge Delta Kubernetes Events Explorer

Overview

The Kubernetes Events page is used to explore Kubernetes events ingested from the cluster when there is a state change in a cluster resource. If there is more than one Edge Delta agent in the cluster, a leader election process selects an agent to collect all the events. Events have the item.type=event attribute. You can also view event type items in Log search by searching for @item.type:event.

Note: To use this page, the Kubernetes Event input node must be connected to the Edge Delta Archive output node.

Kubernetes Events

Click Events - Kubernetes Events.

Search

You can search for particular events using autocomplete.

Filter

You can also filter results using the Filters pane. Selecting all the checkboxes shows results from all the selected options. You can choose one specific filter, such as a event type. If you select none of the filters, no results will be shown.

You can click and drag a time period on the histogram to filter the lookback period on it.

Group by

You can group the graph by any of the facets listed in the Filter Pane using the Group By option. For example, you may want to see a particular event type from all hosts on a single graph.

Add Facet

You can create a custom facet from any event attribute to group by:

1. Click the three dots on a facet group and select Create Facet.
2. Specify the dimension name (event attribute) prefixed with an @ character.

You can now select the facet in the Group By list, and you can filter by the facet in the Filters pane.

Event Details

Click an event in the search results to see more details about it in a side pane.

You can click an attribute to view copy its path, create a search filter or quickly add a facet to the Filters pane.