KubeEvents
Table that stores Kubernetes events
Table attributes
| Attribute | Value |
|---|---|
| Resource types | microsoft.kubernetes/connectedclusters, microsoft.containerservice/managedclusters, microsoft.hybridcontainerservice/provisionedclusters |
| Categories | Containers |
| Solutions | AzureResources, ContainerInsights |
| Basic log | No |
| Ingestion-time transformation | Yes |
| Sample Queries | Yes |
Columns
| Column | Type | Description |
|---|---|---|
| _BilledSize | real | The record size in bytes |
| ClusterId | string | ID of the kubernetes cluster from which the event was sourced |
| ClusterName | string | ID of the kubernetes cluster from which the event was sourced |
| Computer | string | Computer/node name in the cluster for which the event applies. If not, computer/node name of sourcing computer |
| Count | real | Cumulative count of the number of occurences of a specific event [event.count] . |
| FirstSeen | datetime | |
| _IsBillable | string | Specifies whether ingesting the data is billable. When _IsBillable is false ingestion isn't billed to your Azure account |
| KubeEventType | string | Type of kubernetes event [event.type]. Ex;- 'Normal' |
| LastSeen | datetime | Time event was last observed [event.lastTimestamp] |
| Message | string | Event message [event.message] |
| Name | string | Involved kubernetes object's name [event.InvolvedObject.name]. Ex;- 'autoschedulejob-158393400-gkv4g' |
| Namespace | string | Involved kubernetes object's namespace [event.InvolvedObject.namespace]. Ex;- 'kube-system' |
| ObjectKind | string | Kind of kubernetes object applicable for the event [event.InvolvedObject.kind] . Ex;- pod |
| Reason | string | Reason as seen in kubernetes event [event.reason] |
| _ResourceId | string | A unique identifier for the resource that the record is associated with |
| SourceComponent | string | Source component that generated the event [event.source.component] . Ex;- default-scheduler |
| SourceSystem | string | The type of agent the event was collected by. For example, OpsManager for Windows agent, either direct connect or Operations Manager, Linux for all Linux agents, or Azure for Azure Diagnostics |
| _SubscriptionId | string | A unique identifier for the subscription that the record is associated with |
| TimeGenerated | datetime | Date and time the record was created. |
| Type | string | The name of the table |