Logace

microsoft.kubernetes/connectedClusters

11 diagnostic categories routing into 3 Log Analytics tables.

Source: Microsoft Learn

Diagnostic categories

  • cloud-controller-manager

    Kubernetes Cloud Controller Manager

    Cost to export

  • cluster-autoscaler

    Kubernetes Cluster Autoscaler

    Cost to export

  • csi-aksarcdisk-controller

    Cost to export

  • csi-aksarcnfs-controller

    Cost to export

  • csi-aksarcsmb-controller

    Cost to export

  • guard

    Cost to export

  • kube-apiserver

    Kubernetes API Server

    Basic Logs Ingestion-time transform Cost to export
    Routes to
    ArcK8sControlPlane

  • kube-audit

    Kubernetes Audit

    Basic Logs Ingestion-time transform Cost to export PII
    Routes to
    ArcK8sAudit

  • kube-audit-admin

    Kubernetes Audit Admin Logs

    Basic Logs Ingestion-time transform Cost to export PII
    Routes to
    ArcK8sAuditAdmin

  • kube-controller-manager

    Kubernetes Controller Manager

    Cost to export

  • kube-scheduler

    Kubernetes Scheduler

    Cost to export

Destination tables

  • ArcK8sAudit

    PII

    Contains all Kubernetes API Server audit logs including events with the get and list verbs. These events are useful for monitoring all of the interactions with the Kubernetes API. To limit the scope to modifying operations see the ArcK8sAuditAdmin table. Requires Diagnostic Settings to use the Resource Specific destination table.

    24 columns in this table.

  • ArcK8sAuditAdmin

    PII

    Contains Kubernetes API Server audit logs excluding events with the get and list verbs. These events are useful for monitoring resource modification requests made to the Kubernetes API. To see all modifying and non-modifying operations see the ArcK8sAudit table. Requires Diagnostic Settings to use the Resource Specific destination table.

    24 columns in this table.

  • ArcK8sControlPlane

    Contains diagnostic logs for the Kubernetes API Server, Controller Manager, Scheduler, Cluster Autoscaler, Cloud Controller Manager, Guard, and the Azure CSI storage drivers. These diagnostic logs have distinct Category entries corresponding their diagnostic log setting (e.g. kube-apiserver, kube-audit-admin). Requires Diagnostic Settings to use the Resource Specific destination table.

    13 columns in this table.