To gather your Cluster/Node logs from Kubernetes, follow the below steps:

1) Create a Template

Navigate to the Fleet > Template page and click Add Template

Screen Shot 2021-01-27 at 11.46.26 AM.png

Select Kubernetes as the Platform, fill in a Template Name and Cluster Name, select the Enable Cluster Events option, and click Create. Note: by default, observIQ will gather Cluster Events across all Namespaces. You may specify a specific Namespace to narrow the scope of event collection.

Screen Shot 2021-01-27 at 4.47.39 PM.png

2) Deploy observIQ Agent with observiq-agent.yaml

On the Template > [Template Name] page, click Add Agents.

Screen Shot 2021-01-27 at 4.51.20 PM.png

On the Install Kubernetes Agents page, copy or download the observiq-agent.yaml, and use the provided kubectl command to deploy to your cluster.

Screen Shot 2021-01-27 at 12.04.01 PM.png

After a few minutes, return to your Template. You'll see the Cluster Agent deployed to your Cluster, (deployed as a standalone Deployment).

Screen Shot 2021-01-27 at 8.07.06 PM.png

3) Explore your logs

Return to the Explore page, you'll now see your Kubernetes Cluster Events flowing into observIQ!

Screen Shot 2021-01-27 at 5.12.13 PM.png

Additionally, because you selected Cluster Events as an Option in your Template, you'll have the [oiq] k8s Cluster Event Collector - Overview Dashboard and corresponding visualizations automatically installed to your account.