Search pod started up failed
KubeEvents
| where Namespace contains "namespace"
| top 10000 by LastSeen asc
| order by LastSeen desc;
Search running pod
KubePodInventory
| where Namespace contains "namespace"
| where ControllerName contains "pod"
| where PodStatus == "Running"
| top 1000 by PodStartTime desc
| order by PodStartTime desc
Search memory usage
KubePodInventory
| where ClusterName == "clusterName"
| where ServiceName == "serviceName"
| where ObjectName == "K8SContainer" and CounterName == "memoryRssBytes"
| summarize AvgUsedRssMemoryBytes = avg(CounterValue) by bin(TimeGenerated, 5m), InstanceName
| where TimeGenerated between(datetime("2021-01-01 20:00:00") .. datetime("2021-01-01 23:59:00"))
| render timechart
Reference Material
Kubernetes Service