To gather your Cluster/Node logs from Kubernetes, follow the below steps:

1) Create a Template

Navigate to the Fleet > Template page and click Add Template

Select Kubernetes as the Platform, fill in a Template Name and Cluster Name, select the Enable Cluster Events option, and click Create. Note: by default, observIQ will gather Cluster Events across all Namespaces. You may specify a specific Namespace to narrow the scope of event collection.

2) Deploy observIQ Agent with observiq-agent.yaml

On the Template > [Template Name] page, click Add Agents.

On the Install Kubernetes Agents page, copy or download the observiq-agent.yaml, and use the provided kubectl command to deploy to your cluster.

After a few minutes, return to your Template. You'll see the Cluster Agent deployed to your Cluster, (deployed as a standalone Deployment).

3) Explore your logs

Return to the Explore page, you'll now see your Kubernetes Cluster Events flowing into observIQ!

Additionally, because you selected Cluster Events as an Option in your Template, you'll have the [oiq] k8s Cluster Event Collector - Overview Dashboard and corresponding visualizations automatically installed to your account.