Events Filters

You can apply filters to events in all interfaces:

Events use these filter categories:

Events filters
Events Filters
  1. level

    Filters on the state of the events: info, warning, or error.

  2. source

    Filters on the source of the event, such as aws, kubernetes, container, System, and so on.

  3. Labels

    Filters based on the observed system type, such as Cloud, kubernetes, and Additional.

  4. Facets

    Filters based on identified system-wide facets, such as priority, host, id, event type, aggregation key, and message.

Let’s look at them more closely.

Level

In situations where you want to more closely examine one of the available levels in your Event stream, such as error conditions, follow these steps:

  1. Hover your pointer over the level filter, and de-select the other level categories.

    In this case, de-select the info and warning options.

    deselect level opions
  2. The chart displays only the currently selected level options.

    In this case, the chart displays the error events.

    show error events only

Continue your investigations to filter your data set by other attributes, examine through the various analytical views, and so on.

Source

To more closely examine one of the available sources in your Event stream, such as only System events, follow these steps:

  1. Hover your pointer over the source filter, and de-select the other source categories.

    In this case, de-select the kubernetes, aws, containerd, and elasticsearch.

    deselect source opions
  2. The chart displays only the currently selected source options.

    In this case, the chart displays the System events.

    show system events only

Continue your investigations to filter your data set by other attributes, examine through the various analytical views, and so on.

Labels

Use the Labels in Kloudfuse to track and manage event data.

There are three primary Label groupings: Cloud, Kubernetes, and Additional.

Cloud

Includes availability zone, awsRegion, aws_account, host, instance id, instance type, project, region, and so on.

To more closely examine cloud-based Events, follow these steps:

  1. Click the caret right (caret) icon to open the Cloud filter menu.

  2. Chose a labels you plan to filter on, and click the caret right (caret) icon to open the options.

    In this example, we chose the availability_zone label.

  3. Hover your pointer over the options you don’t want to include in the search, and de-select them.

    In this case, de-select the us-west1-a option.

    deselect availability zones of no interest
  4. The chart displays only the currently selected options.

    In this case, the chart displays the Cloud events where the availability zone is us-west-2c.

    show only availability zone us-west-2c events

Continue your investigations to filter your data set by other attributes, examine through the various analytical views, and so on.

Kubernetes

To more closely examine Kubernetes-based Events, follow these steps:

  1. Click the caret right (caret) icon to open the Kubernetes filter menu.

  2. Chose a label you plan to filter on, and click the caret right (caret) icon to open the options.

    In this example, we chose the kube_cluster-name label.

  3. Hover your pointer over the options you don’t want to include in the search, and de-select them.

    In this case, de-select the dev-gcp, demo-2-target, and iris options.

    deselect kube_clustr_names of no interest
  4. The chart displays only the currently selected options.

    In this case, the chart displays the Kubernetes events where the kube cluster name is shared.

    show only kube cluster name shared

Continue your investigations to filter your data set by other attributes, examine through the various analytical views, and so on.

Additional

Includes filters based on custom labels and tags.

To more closely examine Events, that can be filtered through these labels, follow these steps:

  1. Click the caret right (caret) icon to open the Additional filter menu.

  2. Chose a label you plan to filter on, and click the caret right (caret) icon to open the options.

    In this example, we chose the Origin label.

  3. Hover your pointer over the options you don’t want to include in the search, and de-select them.

    In this case, de-select the EC2 option.

    deselect origin EC2
  4. The chart displays only the currently selected options.

    In this case, the chart displays the Additional events where the origin is AutoScalingGroup.

    show only AutoScalingGroup origin
  5. When there is a large number of optional values for a label, Kloudfuse automatically provides a search function.

    Simply start typing in the text box, and Kloudfuse shortens the list of options to match your entry.

    Search for option values

Continue your investigations to filter your data set by other attributes, examine through the various analytical views, and so on.

Facets