Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

AzureMonitor: Add Container Insights Syslog Dashboard #77229

Merged
merged 9 commits into from
Nov 2, 2023

Conversation

JohnJMartins
Copy link
Contributor

What is this feature?

Azure Monitor - Container Insights offers the ability to collect Syslog events from Linux nodes in your Azure Kubernetes Service (AKS) clusters. This includes the ability to collect logs from control plane components like kubelet. Customers can also use Syslog for monitoring security and health events, typically by ingesting syslog into a SIEM system like Microsoft Sentinel.

SS1

Why do we need this feature?

With this Syslog Grafana dashboard from Azure Monitor, users can get a quick snapshot of syslog messages. At a glance, users can see if there's a large number of critical or warning messages. The dashboards also breaks down syslog message counts by host, process, and facility name - making it easier understand where errors might be coming from. Additionally, users can see the 50 most recent Syslog messages and click through to access the full Syslog table in Log Analytics.

Who is this feature for?

Anyone looking for monitoring of container insights syslog metrics

Special notes for your reviewer:

Please check that:

  • It works as expected from a user's perspective.

@JohnJMartins JohnJMartins requested a review from a team as a code owner October 26, 2023 16:21
@JohnJMartins JohnJMartins requested review from asimpson, bossinc, aangelisc and alyssabull and removed request for a team October 26, 2023 16:21
@grafana-pr-automation grafana-pr-automation bot added datasource/Azure Azure Monitor Datasource area/frontend pr/external This PR is from external contributor labels Oct 26, 2023
Copy link
Contributor

@aangelisc aangelisc left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks for the contribution @JohnJMartins. I've requested some changes to make this dashboard more generalised. You'll also need to run prettier on the dashboard file before this can be merged otherwise it'll fail CI 😊

Copy link
Contributor

@aangelisc aangelisc left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This all LGTM now! Thanks @JohnJMartins!

@aangelisc aangelisc added no-backport Skip backport of PR no-changelog Skip including change in changelog/release notes labels Oct 31, 2023
@aangelisc aangelisc added this to the 10.3.x milestone Oct 31, 2023
@aangelisc aangelisc added add to changelog and removed no-changelog Skip including change in changelog/release notes labels Oct 31, 2023
@aangelisc aangelisc changed the title <AzureDashboards> Add Container Insights Syslog Dashboard AzureMonitor: Add Container Insights Syslog Dashboard Oct 31, 2023
@aangelisc
Copy link
Contributor

Hey @JohnJMartins, would you mind merging main into this branch please?

@JohnJMartins
Copy link
Contributor Author

@aangelisc Should be merged now! Let me know if that works.

@aangelisc
Copy link
Contributor

All good @JohnJMartins, thanks again 😊

@aangelisc aangelisc merged commit 03a7c65 into grafana:main Nov 2, 2023
34 checks passed
zserge pushed a commit that referenced this pull request Nov 9, 2023
* add Syslog dashboard

* Revert "add Syslog dashboard"

This reverts commit b30160a.

* add Syslog Dashboard

* make wording more general to grafana users

* remove azure welcome panel

* run prettier on dashboard
@aangelisc aangelisc modified the milestones: 10.3.x, 10.2.3 Dec 21, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
add to changelog area/frontend datasource/Azure Azure Monitor Datasource no-backport Skip backport of PR pr/external This PR is from external contributor
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

2 participants