Grafana dashboard: Kubernetes Event Monitoring
Description: K8s Event Monitoring | AWS US 


{
  "__inputs": [
    {
      "name": "DS_ELASTICSEARCH",
      "label": "Elasticsearch",
      "description": "",
      "type": "datasource",
      "pluginId": "elasticsearch",
      "pluginName": "Elasticsearch"
    }
  ],
  "__elements": {},
  "__requires": [
    {
      "type": "datasource",
      "id": "elasticsearch",
      "name": "Elasticsearch",
      "version": "7.10.x"
    },
    {
      "type": "grafana",
      "id": "grafana",
      "name": "Grafana",
      "version": "7.5.12"
    },
    {
      "type": "panel",
      "id": "graph",
      "name": "Graph (old)",
      "version": ""
    },
    {
      "type": "panel",
      "id": "magnesium-wordcloud-panel",
      "name": "Word cloud",
      "version": "1.2.4"
    },
    {
      "type": "panel",
      "id": "piechart",
      "name": "Pie chart",
      "version": ""
    },
    {
      "type": "panel",
      "id": "table",
      "name": "Table",
      "version": ""
    }
  ],
  "annotations": {
    "list": [
      {
        "builtIn": 1,
        "datasource": {
          "type": "datasource",
          "uid": "grafana"
        },
        "enable": true,
        "hide": true,
        "iconColor": "rgba(0, 211, 255, 1)",
        "limit": 100,
        "name": "Annotations & Alerts",
        "showIn": 0,
        "target": {
          "limit": 100,
          "matchAny": false,
          "tags": [],
          "type": "dashboard"
        },
        "type": "dashboard"
      }
    ]
  },
  "description": "K8s Event Monitoring | AWS US ",
  "editable": true,
  "fiscalYearStartMonth": 0,
  "gnetId": 17980,
  "graphTooltip": 2,
  "id": null,
  "links": [],
  "liveNow": false,
  "panels": [
    {
      "collapsed": false,
      "datasource": {
        "type": "elasticsearch",
        "uid": "000000010"
      },
      "gridPos": {
        "h": 1,
        "w": 24,
        "x": 0,
        "y": 0
      },
      "id": 133,
      "panels": [],
      "targets": [
        {
          "datasource": {
            "type": "elasticsearch",
            "uid": "000000010"
          },
          "refId": "A"
        }
      ],
      "title": "Visualization",
      "type": "row"
    },
    {
      "aliasColors": {
        "Normal": "#17019b",
        "Warning": "#ffc701"
      },
      "bars": true,
      "dashLength": 10,
      "dashes": false,
      "datasource": {
        "type": "elasticsearch",
        "uid": "${DS_ELASTICSEARCH}"
      },
      "fieldConfig": {
        "defaults": {
          "unit": "none"
        },
        "overrides": []
      },
      "fill": 1,
      "fillGradient": 0,
      "gridPos": {
        "h": 8,
        "w": 6,
        "x": 0,
        "y": 1
      },
      "hiddenSeries": false,
      "hideTimeOverride": true,
      "id": 126,
      "legend": {
        "alignAsTable": true,
        "avg": true,
        "current": true,
        "max": true,
        "min": true,
        "show": true,
        "total": true,
        "values": true
      },
      "lines": false,
      "linewidth": 1,
      "links": [],
      "nullPointMode": "null as zero",
      "options": {
        "alertThreshold": true
      },
      "percentage": false,
      "pluginVersion": "7.5.12",
      "pointradius": 2,
      "points": false,
      "renderer": "flot",
      "seriesOverrides": [],
      "spaceLength": 10,
      "stack": true,
      "steppedLine": false,
      "targets": [
        {
          "alias": "",
          "bucketAggs": [
            {
              "field": "kubernetes.event.type",
              "id": "3",
              "settings": {
                "min_doc_count": "0",
                "order": "desc",
                "orderBy": "_term",
                "size": "5"
              },
              "type": "terms"
            },
            {
              "field": "@timestamp",
              "id": "2",
              "settings": {
                "interval": "1m",
                "min_doc_count": 0,
                "trimEdges": "1"
              },
              "type": "date_histogram"
            }
          ],
          "datasource": {
            "type": "elasticsearch",
            "uid": "${DS_ELASTICSEARCH}"
          },
          "metrics": [
            {
              "id": "1",
              "type": "count"
            }
          ],
          "query": "kubernetes.event.type:$type AND kubernetes.event.metadata.namespace:$namespace AND kubernetes.event.source.host:$node AND kubernetes.event.source.component:$component AND event.dataset:kubernetes.event",
          "refId": "A",
          "timeField": "@timestamp"
        }
      ],
      "thresholds": [],
      "timeRegions": [],
      "timeShift": "1m",
      "title": "Kubernetes Events",
      "tooltip": {
        "shared": true,
        "sort": 2,
        "value_type": "individual"
      },
      "transformations": [],
      "type": "graph",
      "xaxis": {
        "mode": "time",
        "show": true,
        "values": []
      },
      "yaxes": [
        {
          "$$hashKey": "object:51",
          "format": "none",
          "logBase": 1,
          "show": true
        },
        {
          "$$hashKey": "object:52",
          "format": "short",
          "logBase": 1,
          "show": true
        }
      ],
      "yaxis": {
        "align": false
      }
    },
    {
      "datasource": {
        "type": "elasticsearch",
        "uid": "${DS_ELASTICSEARCH}"
      },
      "gridPos": {
        "h": 8,
        "w": 6,
        "x": 6,
        "y": 1
      },
      "hideTimeOverride": false,
      "id": 138,
      "links": [],
      "options": {
        "series_index": 0,
        "wordCloudOptions": {
          "deterministic": true,
          "enableTooltip": true,
          "fontFamily": "arial",
          "fontSizes": [
            15,
            30
          ],
          "padding": 1,
          "rotationAngles": [
            0,
            0
          ],
          "rotations": 2,
          "scale": "sqrt",
          "spiral": "archimedean",
          "transitionDuration": 800
        }
      },
      "pluginVersion": "7.5.12",
      "targets": [
        {
          "alias": "",
          "bucketAggs": [
            {
              "field": "kubernetes.event.reason",
              "id": "3",
              "settings": {
                "order": "desc",
                "orderBy": "1",
                "size": "20"
              },
              "type": "terms"
            }
          ],
          "datasource": {
            "type": "elasticsearch",
            "uid": "${DS_ELASTICSEARCH}"
          },
          "metrics": [
            {
              "id": "1",
              "type": "count"
            }
          ],
          "query": "kubernetes.event.type:$type AND kubernetes.event.metadata.namespace:$namespace AND kubernetes.event.source.host:$node AND kubernetes.event.source.component:$component AND event.dataset:kubernetes.event",
          "refId": "A",
          "timeField": "@timestamp"
        }
      ],
      "title": "Event Reason",
      "transformations": [],
      "type": "magnesium-wordcloud-panel"
    },
    {
      "datasource": {
        "type": "elasticsearch",
        "uid": "${DS_ELASTICSEARCH}"
      },
      "fieldConfig": {
        "defaults": {
          "color": {
            "mode": "palette-classic"
          },
          "custom": {
            "hideFrom": {
              "legend": false,
              "tooltip": false,
              "viz": false
            }
          },
          "decimals": 0,
          "mappings": [],
          "unit": "none"
        },
        "overrides": [
          {
            "matcher": {
              "id": "byName",
              "options": "Job"
            },
            "properties": [
              {
                "id": "color",
                "value": {
                  "fixedColor": "#ffc701",
                  "mode": "fixed"
                }
              }
            ]
          },
          {
            "matcher": {
              "id": "byName",
              "options": "Pod"
            },
            "properties": [
              {
                "id": "color",
                "value": {
                  "fixedColor": "#17019b",
                  "mode": "fixed"
                }
              }
            ]
          },
          {
            "matcher": {
              "id": "byName",
              "options": "CronJob"
            },
            "properties": [
              {
                "id": "color",
                "value": {
                  "fixedColor": "#b7a4ff",
                  "mode": "fixed"
                }
              }
            ]
          }
        ]
      },
      "gridPos": {
        "h": 8,
        "w": 6,
        "x": 12,
        "y": 1
      },
      "hideTimeOverride": false,
      "id": 136,
      "links": [],
      "options": {
        "displayLabels": [],
        "legend": {
          "displayMode": "table",
          "placement": "right",
          "values": [
            "value",
            "percent"
          ]
        },
        "pieType": "donut",
        "reduceOptions": {
          "calcs": [
            "sum"
          ],
          "fields": "",
          "values": false
        },
        "text": {},
        "tooltip": {
          "mode": "single",
          "sort": "none"
        }
      },
      "pluginVersion": "7.5.12",
      "targets": [
        {
          "alias": "",
          "bucketAggs": [
            {
              "field": "kubernetes.event.involved_object.kind",
              "id": "3",
              "settings": {
                "order": "desc",
                "orderBy": "1",
                "size": "5"
              },
              "type": "terms"
            },
            {
              "field": "@timestamp",
              "id": "4",
              "settings": {
                "interval": "auto",
                "trimEdges": "0"
              },
              "type": "date_histogram"
            }
          ],
          "datasource": {
            "type": "elasticsearch",
            "uid": "${DS_ELASTICSEARCH}"
          },
          "metrics": [
            {
              "id": "1",
              "type": "count"
            }
          ],
          "query": "kubernetes.event.type:$type AND kubernetes.event.metadata.namespace:$namespace AND kubernetes.event.source.host:$node AND kubernetes.event.source.component:$component AND event.dataset:kubernetes.event",
          "refId": "A",
          "timeField": "@timestamp"
        }
      ],
      "title": "Object Kind",
      "transformations": [],
      "type": "piechart"
    },
    {
      "datasource": {
        "type": "elasticsearch",
        "uid": "${DS_ELASTICSEARCH}"
      },
      "fieldConfig": {
        "defaults": {
          "color": {
            "mode": "palette-classic"
          },
          "custom": {
            "hideFrom": {
              "legend": false,
              "tooltip": false,
              "viz": false
            }
          },
          "decimals": 0,
          "mappings": [],
          "unit": "none"
        },
        "overrides": [
          {
            "matcher": {
              "id": "byName",
              "options": "job-controller"
            },
            "properties": [
              {
                "id": "color",
                "value": {
                  "fixedColor": "#ffc701",
                  "mode": "fixed"
                }
              }
            ]
          },
          {
            "matcher": {
              "id": "byName",
              "options": "kubelet"
            },
            "properties": [
              {
                "id": "color",
                "value": {
                  "fixedColor": "#17019b",
                  "mode": "fixed"
                }
              }
            ]
          },
          {
            "matcher": {
              "id": "byName",
              "options": "cronjob-controller"
            },
            "properties": [
              {
                "id": "color",
                "value": {
                  "fixedColor": "#b7a4ff",
                  "mode": "fixed"
                }
              }
            ]
          }
        ]
      },
      "gridPos": {
        "h": 8,
        "w": 6,
        "x": 18,
        "y": 1
      },
      "hideTimeOverride": false,
      "id": 137,
      "links": [],
      "options": {
        "displayLabels": [],
        "legend": {
          "displayMode": "table",
          "placement": "right",
          "values": [
            "value",
            "percent"
          ]
        },
        "pieType": "donut",
        "reduceOptions": {
          "calcs": [
            "sum"
          ],
          "fields": "",
          "values": false
        },
        "text": {},
        "tooltip": {
          "mode": "single",
          "sort": "none"
        }
      },
      "pluginVersion": "7.5.12",
      "targets": [
        {
          "alias": "",
          "bucketAggs": [
            {
              "field": "kubernetes.event.source.component",
              "id": "3",
              "settings": {
                "order": "desc",
                "orderBy": "1",
                "size": "5"
              },
              "type": "terms"
            },
            {
              "field": "@timestamp",
              "id": "4",
              "settings": {
                "interval": "auto",
                "trimEdges": "0"
              },
              "type": "date_histogram"
            }
          ],
          "datasource": {
            "type": "elasticsearch",
            "uid": "${DS_ELASTICSEARCH}"
          },
          "metrics": [
            {
              "id": "1",
              "type": "count"
            }
          ],
          "query": "kubernetes.event.type:$type AND kubernetes.event.metadata.namespace:$namespace AND kubernetes.event.source.host:$node AND kubernetes.event.source.component:$component AND event.dataset:kubernetes.event",
          "refId": "A",
          "timeField": "@timestamp"
        }
      ],
      "title": "Source Component",
      "transformations": [],
      "type": "piechart"
    },
    {
      "collapsed": false,
      "datasource": {
        "type": "elasticsearch",
        "uid": "000000010"
      },
      "gridPos": {
        "h": 1,
        "w": 24,
        "x": 0,
        "y": 9
      },
      "id": 135,
      "panels": [],
      "targets": [
        {
          "datasource": {
            "type": "elasticsearch",
            "uid": "000000010"
          },
          "refId": "A"
        }
      ],
      "title": "Details",
      "type": "row"
    },
    {
      "datasource": {
        "type": "elasticsearch",
        "uid": "${DS_ELASTICSEARCH}"
      },
      "fieldConfig": {
        "defaults": {
          "color": {
            "mode": "thresholds"
          },
          "custom": {
            "align": "auto",
            "displayMode": "auto",
            "filterable": true,
            "inspect": false
          },
          "mappings": [],
          "thresholds": {
            "mode": "absolute",
            "steps": [
              {
                "color": "#4f32ef",
                "value": null
              },
              {
                "color": "#ff6067",
                "value": ""
              }
            ]
          }
        },
        "overrides": [
          {
            "matcher": {
              "id": "byName",
              "options": "Timestamp"
            },
            "properties": [
              {
                "id": "custom.width",
                "value": 185
              },
              {
                "id": "unit",
                "value": "dateTimeAsLocal"
              }
            ]
          },
          {
            "matcher": {
              "id": "byName",
              "options": "Namespace"
            },
            "properties": [
              {
                "id": "custom.width",
                "value": 150
              }
            ]
          },
          {
            "matcher": {
              "id": "byName",
              "options": "Type"
            },
            "properties": [
              {
                "id": "custom.width",
                "value": 100
              }
            ]
          },
          {
            "matcher": {
              "id": "byName",
              "options": "Reason"
            },
            "properties": [
              {
                "id": "custom.width",
                "value": 150
              }
            ]
          },
          {
            "matcher": {
              "id": "byName",
              "options": "Kind"
            },
            "properties": [
              {
                "id": "custom.width",
                "value": 120
              }
            ]
          },
          {
            "matcher": {
              "id": "byName",
              "options": "Object"
            },
            "properties": [
              {
                "id": "custom.width",
                "value": 200
              }
            ]
          },
          {
            "matcher": {
              "id": "byName",
              "options": "Node"
            },
            "properties": [
              {
                "id": "custom.width",
                "value": 150
              }
            ]
          },
          {
            "matcher": {
              "id": "byName",
              "options": "Component"
            },
            "properties": [
              {
                "id": "custom.width",
                "value": 150
              }
            ]
          },
          {
            "matcher": {
              "id": "byName",
              "options": "Message"
            },
            "properties": [
              {
                "id": "custom.width"
              }
            ]
          },
          {
            "matcher": {
              "id": "byName",
              "options": "Count"
            },
            "properties": [
              {
                "id": "custom.width",
                "value": 70
              }
            ]
          }
        ]
      },
      "gridPos": {
        "h": 23,
        "w": 24,
        "x": 0,
        "y": 10
      },
      "id": 131,
      "options": {
        "footer": {
          "fields": "",
          "reducer": [
            "sum"
          ],
          "show": false
        },
        "showHeader": true,
        "sortBy": []
      },
      "pluginVersion": "7.5.12",
      "targets": [
        {
          "bucketAggs": [],
          "datasource": {
            "type": "elasticsearch",
            "uid": "${DS_ELASTICSEARCH}"
          },
          "metrics": [
            {
              "id": "1",
              "settings": {
                "size": "500"
              },
              "type": "raw_data"
            }
          ],
          "query": "kubernetes.event.type:$type AND kubernetes.event.metadata.namespace:$namespace AND kubernetes.event.source.host:$node AND kubernetes.event.source.component:$component AND event.dataset:kubernetes.event",
          "refId": "A",
          "timeField": "@timestamp"
        }
      ],
      "title": "Kubernetes Event History",
      "transformations": [
        {
          "id": "organize",
          "options": {
            "excludeByName": {
              "@metadata.beat": true,
              "@metadata.type": true,
              "@metadata.version": true,
              "_id": true,
              "_index": true,
              "_type": true,
              "agent.ephemeral_id": true,
              "agent.hostname": true,
              "agent.id": true,
              "agent.name": true,
              "agent.type": true,
              "agent.version": true,
              "alertStatusId": true,
              "continueCount": true,
              "event.dataset": true,
              "event.module": true,
              "expression": true,
              "highlight": true,
              "jmsightId": true,
              "kubernetes.event.involved_object.api_version": true,
              "kubernetes.event.involved_object.kind": false,
              "kubernetes.event.involved_object.name": false,
              "kubernetes.event.involved_object.resource_version": true,
              "kubernetes.event.involved_object.uid": true,
              "kubernetes.event.metadata.annotations.dest-namespace": true,
              "kubernetes.event.metadata.annotations.dest-server": true,
              "kubernetes.event.metadata.generate_name": true,
              "kubernetes.event.metadata.name": true,
              "kubernetes.event.metadata.namespace": false,
              "kubernetes.event.metadata.resource_version": true,
              "kubernetes.event.metadata.self_link": true,
              "kubernetes.event.metadata.timestamp.created": true,
              "kubernetes.event.metadata.uid": true,
              "kubernetes.event.timestamp.first_occurrence": true,
              "kubernetes.event.timestamp.last_occurrence": true,
              "logFileId": true,
              "matchedTargets": true,
              "metricset.name": true,
              "period": true,
              "sort": true,
              "tags": false,
              "value": true,
              "valueField": true
            },
            "indexByName": {
              "@metadata.beat": 16,
              "@metadata.type": 17,
              "@metadata.version": 18,
              "@timestamp": 0,
              "_id": 10,
              "_index": 11,
              "_type": 12,
              "agent.ephemeral_id": 19,
              "agent.hostname": 20,
              "agent.id": 21,
              "agent.name": 22,
              "agent.type": 23,
              "agent.version": 24,
              "event.dataset": 25,
              "event.module": 26,
              "highlight": 13,
              "jmsightId": 14,
              "kubernetes.event.count": 9,
              "kubernetes.event.involved_object.api_version": 27,
              "kubernetes.event.involved_object.kind": 6,
              "kubernetes.event.involved_object.name": 5,
              "kubernetes.event.involved_object.resource_version": 28,
              "kubernetes.event.involved_object.uid": 29,
              "kubernetes.event.message": 4,
              "kubernetes.event.metadata.annotations.dest-namespace": 41,
              "kubernetes.event.metadata.annotations.dest-server": 42,
              "kubernetes.event.metadata.generate_name": 30,
              "kubernetes.event.metadata.name": 31,
              "kubernetes.event.metadata.namespace": 2,
              "kubernetes.event.metadata.resource_version": 32,
              "kubernetes.event.metadata.self_link": 33,
              "kubernetes.event.metadata.timestamp.created": 34,
              "kubernetes.event.metadata.uid": 35,
              "kubernetes.event.reason": 3,
              "kubernetes.event.source.component": 8,
              "kubernetes.event.source.host": 7,
              "kubernetes.event.timestamp.first_occurrence": 36,
              "kubernetes.event.timestamp.last_occurrence": 37,
              "kubernetes.event.type": 1,
              "logFileId": 38,
              "metricset.name": 39,
              "period": 40,
              "sort": 15
            },
            "renameByName": {
              "@timestamp": "Timestamp",
              "_id": "",
              "agent.hostname": "",
              "alertId": "Id",
              "alertLevel": "Alert Level",
              "alertName": "Name",
              "alertStatusId": "",
              "category": "Category",
              "continueCount": "",
              "dashboardUrl": "Dashboard",
              "expression": "",
              "kubernetes.event.count": "Count",
              "kubernetes.event.involved_object.kind": "Kind",
              "kubernetes.event.involved_object.name": "Object",
              "kubernetes.event.message": "Message",
              "kubernetes.event.metadata.namespace": "Namespace",
              "kubernetes.event.metadata.uid": "",
              "kubernetes.event.reason": "Reason",
              "kubernetes.event.source.component": "Component",
              "kubernetes.event.source.host": "Node",
              "kubernetes.event.timestamp.first_occurrence": "",
              "kubernetes.event.type": "Type",
              "logViewerUrl": "Log Viewer",
              "sending": "Sending",
              "sort": "",
              "status": "Status",
              "tags": "Tags",
              "targetName": "Target Name",
              "textMessage": "Message"
            }
          }
        },
        {
          "id": "sortBy",
          "options": {
            "fields": {},
            "sort": [
              {
                "desc": true,
                "field": "Timestamp"
              }
            ]
          }
        }
      ],
      "type": "table"
    }
  ],
  "refresh": false,
  "schemaVersion": 36,
  "style": "dark",
  "tags": [],
  "templating": {
    "list": [
      {
        "allValue": "*",
        "current": {},
        "datasource": {
          "type": "elasticsearch",
          "uid": "${DS_ELASTICSEARCH}"
        },
        "definition": "{\"find\": \"terms\", \"field\": \"kubernetes.event.type\"}",
        "hide": 0,
        "includeAll": true,
        "label": "Type",
        "multi": true,
        "name": "type",
        "options": [],
        "query": "{\"find\": \"terms\", \"field\": \"kubernetes.event.type\"}",
        "refresh": 2,
        "regex": "",
        "skipUrlSync": false,
        "sort": 2,
        "tagValuesQuery": "",
        "tagsQuery": "",
        "type": "query",
        "useTags": false
      },
      {
        "allValue": "*",
        "current": {},
        "datasource": {
          "type": "elasticsearch",
          "uid": "${DS_ELASTICSEARCH}"
        },
        "definition": "{\"find\": \"terms\", \"field\": \"kubernetes.event.metadata.namespace\"}",
        "hide": 0,
        "includeAll": true,
        "label": "Namespace",
        "multi": true,
        "name": "namespace",
        "options": [],
        "query": "{\"find\": \"terms\", \"field\": \"kubernetes.event.metadata.namespace\"}",
        "refresh": 2,
        "regex": "",
        "skipUrlSync": false,
        "sort": 1,
        "tagValuesQuery": "",
        "tagsQuery": "",
        "type": "query",
        "useTags": false
      },
      {
        "allValue": "*",
        "current": {},
        "datasource": {
          "type": "elasticsearch",
          "uid": "${DS_ELASTICSEARCH}"
        },
        "definition": "{\"find\": \"terms\", \"field\": \"kubernetes.event.source.host\"}",
        "hide": 0,
        "includeAll": true,
        "label": "Node",
        "multi": true,
        "name": "node",
        "options": [],
        "query": "{\"find\": \"terms\", \"field\": \"kubernetes.event.source.host\"}",
        "refresh": 1,
        "regex": "",
        "skipUrlSync": false,
        "sort": 0,
        "tagValuesQuery": "",
        "tagsQuery": "",
        "type": "query",
        "useTags": false
      },
      {
        "allValue": "*",
        "current": {},
        "datasource": {
          "type": "elasticsearch",
          "uid": "${DS_ELASTICSEARCH}"
        },
        "definition": "{\"find\": \"terms\", \"field\": \"kubernetes.event.source.component\"}",
        "hide": 0,
        "includeAll": true,
        "label": "Component",
        "multi": true,
        "name": "component",
        "options": [],
        "query": "{\"find\": \"terms\", \"field\": \"kubernetes.event.source.component\"}",
        "refresh": 1,
        "regex": "",
        "skipUrlSync": false,
        "sort": 0,
        "tagValuesQuery": "",
        "tagsQuery": "",
        "type": "query",
        "useTags": false
      }
    ]
  },
  "time": {
    "from": "now-3h",
    "to": "now"
  },
  "timepicker": {
    "hidden": false,
    "nowDelay": "",
    "refresh_intervals": [
      "30s",
      "1m",
      "5m",
      "15m",
      "30m",
      "1h"
    ],
    "time_options": [
      "5m",
      "15m",
      "1h",
      "6h",
      "12h",
      "24h",
      "2d",
      "7d",
      "30d"
    ]
  },
  "timezone": "browser",
  "title": "Kubernetes Event Monitoring",
  "uid": "S3PfEWiVz",
  "version": 2,
  "weekStart": ""
}