Queries for the KubeEvents table

For information on using these queries in the Azure portal, see Log Analytics tutorial. For the REST API, see Query.

Kubernetes events

Lists all the Kubernetes events.

KubeEvents
| where TimeGenerated > ago(7d) 
| where not(isempty(Namespace))
| top 200 by TimeGenerated desc

Find In KubeEvents

Find in KubeEvents to search for a specific value in the KubeEvents table./nNote that this query requires updating the <SeachValue> parameter to produce results

// This query requires a parameter to run. Enter value in SearchValue to find in table.
let SearchValue =  "<SearchValue>";//Please update term you would like to find in the table.
KubeEvents
| where * contains tostring(SearchValue)
| take 1000