• k8s
• Azure
• KustoLogs

k8s/Azure/KustoLogs

• Queries in Azure Kusto Query language.

• Find logs for specific pod/namespace

  let _podInventory = ( KubePodInventory | where Namespace contains "namespace-prd" | where ContainerName contains "MyContainerName" );
  ContainerLog
  | where TimeGenerated < ago(7d)
  | join kind=inner _podInventory on $left.ContainerID == $right.ContainerID
  | limit 5000
  | project LogEntry, Name1, Namespace , ContainerName, TimeGenerated, ClusterId, PodRestartCount