Differences between revisions 3 and 4

k8s/Azure/KustoLogs

Queries in Azure Kusto Query language.

Find logs for specific pod/namespace

let _podInventory = ( KubePodInventory 
       | where Namespace has "MyNamespace-prd" 
       | where ContainerName has_any ('container1', 'container2' , 'container3' )
);
ContainerLog
//| where TimeGenerated < ago(4d)
| where TimeGenerated between( datetime("2020-06-18 02:00:00 ") .. now())
| join kind=inner _podInventory on $left.ContainerID == $right.ContainerID
| project LogEntry, Name1, Namespace , ContainerName, TimeGenerated, ClusterId, PodRestartCount

CategoryLogging

-  ⇤ ← Revision 3 as of 2020-06-14 20:35:24 → 
  Size: 562
  Editor: PieterSmit
  Comment:
+   ← Revision 4 as of 2020-06-21 07:00:03 → ⇥
  Size: 625
  Editor: PieterSmit
  Comment:
-Deletions are marked like this.
+Additions are marked like this.
 Line 12:
-| where TimeGenerated < ago(4d)
+//| where TimeGenerated < ago(4d)
| where TimeGenerated between( datetime("2020-06-18 02:00:00 ") .. now())
-Line 14:
+Line 15:
-| limit 5000