tencent cloud

Log Field Data Parsing
Download PDF
Last updated: 2025-04-11 15:59:32
Log Field Data Parsing
Last updated: 2025-04-11 15:59:32
Download PDF

Container Bash Logs

Name
Type
Meaning
image_id
string
Image ID
container_id
string
Container ID
image_name
string
Image Name
container_name
string
Container Name
cmd
string
Command line parameter
{
  "cmd": "exit",
  "container_id": "fcdbbfae",
  "container_name": "/reverseshell",
  "image_id": "sha256:eeb6ee3f",
  "image_name": "centos:7"
}

Container Startup Audit Log

Name
Type
Meaning
image_id
string
Image ID
container_id
string
Container ID
image_name
string
Image Name
container_name
string
Container Name
status
string
Container Status
id
string
Container ID
from
string
Basic image name
Type
string
Event type
Action
string
Operation
scope
string
Deployment Methods
{
  "Action": "exec_start",
  "container_id": "a197708a59b2809",
  "container_name": "-",
  "from": "registry.xxx.com/service/mysql@sha256:xxx",
  "id": "a197708a59b2809",
  "image_id": "-",
  "image_name": "-",
  "scope": "local",
  "status": "exec_start",
  "Type": "container"
}

Kubernetes API Audit Logs

Name
Type
Meaning
image_id
string
Image ID
container_id
string
Container ID
image_name
string
Image Name
container_name
string
Container Name
clusterId
string
The cluster ID.
kind
string
API Event Type
apiVersion
string
API version
level
string
Log Level
auditID
string
Unique Log Index ID
stage
string
K8s API Request Status
requestURI
string
K8s API Request URI
verb
string
Operation Type
sourceIPs
string
Requesting User IP
userAgent
string
Requesting user container/user corresponding client
requestReceivedTimestamp
string
Timestamp of request arrival at Apiserver
stageTimestamp
string
Timestamp for processing requests at the current stage
{
  "apiVersion": "audit.k8s.io/v1",
  "auditID": "xxx-xxx-xxx-9d69-xxx",
  "clusterId": "-",
  "container_id": "-",
  "container_name": "-",
  "image_id": "-",
  "image_name": "-",
  "kind": "Event",
  "level": "Request",
  "requestReceivedTimestamp": "2024-01-01T13:20:48.899288Z",
  "requestURI": "/apis/batch/v1beta1/cronjobs?limit=500",
  "sourceIPs": "127.0.0.0",
  "stage": "ResponseComplete",
  "stageTimestamp": "2024-01-01T13:20:48.900236Z",
  "userAgent": "kube-controller-manager/v1.18.0 (linux/amd64) kubernetes",
  "verb": "list"
}

Was this page helpful?
You can also Contact Sales or Submit a Ticket for help.
Yes
No

Feedback