Cluster logging 6.0.7 on OCP 4.15 with lokistack CSV and Pods: ``` [root@rdr-man-log-415-bastion-0 ~]# oc get csv -n openshift-logging NAME DISPLAY VERSION REPLACES PHASE cluster-logging.v6.0.7 Red Hat OpenShift Logging 6.0.7 cluster-logging.v6.0.6 Succeeded loki-operator.v6.0.7 Loki Operator 6.0.7 loki-operator.v6.0.6 Succeeded [root@rdr-man-log-415-bastion-0 ~]# oc get pods -n openshift-logging NAME READY STATUS RESTARTS AGE cluster-logging-operator-d66b6757b-dp6xx 1/1 Running 0 55m lokistack-almqn-compactor-0 1/1 Running 0 54m lokistack-almqn-distributor-599d5dfc4c-d9pwz 1/1 Running 0 54m lokistack-almqn-gateway-6f4976c89c-64nx9 2/2 Running 1 (54m ago) 54m lokistack-almqn-gateway-6f4976c89c-x8jr8 2/2 Running 1 (54m ago) 54m lokistack-almqn-index-gateway-0 1/1 Running 0 54m lokistack-almqn-ingester-0 1/1 Running 0 54m lokistack-almqn-querier-6945647454-nwptn 1/1 Running 0 54m lokistack-almqn-query-frontend-5d8477fc9b-qzgr5 1/1 Running 0 54m lokistack-almqn-ruler-0 1/1 Running 0 54m [root@rdr-man-log-415-bastion-0 ~]# ``` Lokistack: Infrastructure logs: ``` "{\"@timestamp\":\"2025-04-16T09:14:13.879170407Z\",\"hostname\":\"master-0\",\"kubernetes\":{\"annotations\":{\"openshift.io/required-scc\":\"hostaccess\",\"openshift.io/scc\":\"hostaccess\"},\"container_id\":\"cri-o://f2e09a22cb7e63e16b18ebb27fb20e6edb9df69e6e6f8a9a5df21d91ca38fa11\",\"container_image\":\"quay.io/openshift-release-dev/ocp-release@sha256:ec57410a29273bae8ba9b0024b6214c8ecb5140b032a361f49f1c3c19857affa\",\"container_image_id\":\"quay.io/openshift-release-dev/ocp-release@sha256:ec57410a29273bae8ba9b0024b6214c8ecb5140b032a361f49f1c3c19857affa\",\"container_name\":\"cluster-version-operator\",\"labels\":{\"k8s-app\":\"cluster-version-operator\",\"pod-template-hash\":\"8568448d6d\"},\"namespace_id\":\"184ee41f-d214-4b7e-afd4-8d0cc16006bf\",\"namespace_labels\":{\"kubernetes_io_metadata_name\":\"openshift-cluster-version\",\"name\":\"openshift-cluster-version\",\"olm_operatorgroup_uid_2a1082ff-0097-4440-a25e-b107a7a3319d\":\"\",\"openshift_io_cluster-monitoring\":\"true\",\"openshift_io_run-level\":\"\",\"pod-security_kubernetes_io_audit\":\"privileged\",\"pod-security_kubernetes_io_enforce\":\"privileged\",\"pod-security_kubernetes_io_warn\":\"privileged\"},\"namespace_name\":\"openshift-cluster-version\",\"pod_id\":\"a9c7c915-b70d-4625-b247-e610c8f6968b\",\"pod_ip\":\"10.20.177.139\",\"pod_name\":\"cluster-version-operator-8568448d6d-2stsl\",\"pod_owner\":\"ReplicaSet/cluster-version-operator-8568448d6d\"},\"level\":\"info\",\"log_source\":\"container\",\"log_type\":\"infrastructure\",\"message\":\"I0416 09:14:13.879107 1 metrics.go:531] skipping metrics for etcd ClusterOperator condition EvaluationConditionsDetected=Unknown (neither True nor False)\",\"openshift\":{\"cluster_id\":\"f3ed82e8-831f-45fe-a973-d869e9d46576\",\"labels\":{\"label\":\"6.0_415-infrastructure\"},\"sequence\":1744794854393689403}}"],["1744794854394616645","{\"@timestamp\":\"2025-04-16T09:14:13.879100994Z\",\"hostname\":\"master-0\",\"kubernetes\":{\"annotations\":{\"openshift.io/required-scc\":\"hostaccess\",\"openshift.io/scc\":\"hostaccess\"},\"container_id\":\"cri-o://f2e09a22cb7e63e16b18ebb27fb20e6edb9df69e6e6f8a9a5df21d91ca38fa11\",\"container_image\":\"quay.io/openshift-release-dev/ocp-release@sha256:ec57410a29273bae8ba9b0024b6214c8ecb5140b032a361f49f1c3c19857affa\",\"container_image_id\":\"quay.io/openshift-release-dev/ocp-release@sha256:ec57410a29273bae8ba9b0024b6214c8ecb5140b032a361f49f1c3c19857affa\",\"container_name\":\"cluster-version-operator\",\"labels\":{\"k8s-app\":\"cluster-version-operator\",\"pod-template-hash\":\"8568448d6d\"},\"namespace_id\":\"184ee41f-d214-4b7e-afd4-8d0cc16006bf\",\"namespace_labels\":{\"kubernetes_io_metadata_name\":\"openshift-cluster-version\",\"name\":\"openshift-cluster-version\",\"olm_operatorgroup_uid_2a1082ff-0097-4440-a25e-b107a7a3319d\":\"\",\"openshift_io_cluster-monitoring\":\"true\",\"openshift_io_run-level\":\"\",\"pod-security_kubernetes_io_audit\":\"privileged\",\"pod-security_kubernetes_io_enforce\":\"privileged\",\"pod-security_kubernetes_io_warn\":\"privileged\"},\"namespace_name\":\"openshift-cluster-version\",\"pod_id\":\"a9c7c915-b70d-4625-b247-e610c8f6968b\",\"pod_ip\":\"10.20.177.139\",\"pod_name\":\"cluster-version-operator-8568448d6d-2stsl\",\"pod_owner\":\"ReplicaSet/cluster-version-operator-8568448d6d\"},\"level\":\"info\",\"log_source\":\"container\",\"log_type\":\"infrastructure\",\"message\":\"I0416 09:14:13.879028 1 metrics.go:531] skipping metrics for kube-controller-manager ClusterOperator condition EvaluationConditionsDetected=Unknown (neither True nor False)\",\"openshift\":{\"cluster_id\":\"f3ed82e8-831f-45fe-a973-d869e9d46576\",\"labels\":{\"label\":\"6.0_415-infrastructure\"},\"sequence\":1744794854393663555}}"]]},{"stream":{"k8s_container_name":"cluster-autoscaler-operator","k8s_namespace_name":"openshift-machine-api","k8s_node_name":"master-0","k8s_pod_name":"cluster-autoscaler-operator-6756594495-bkgsc","kubernetes_container_name":"cluster-autoscaler-operator","kubernetes_host":"master-0","kubernetes_namespace_name":"openshift-machine-api","kubernetes_pod_name":"cluster-autoscaler-operator-6756594495-bkgsc","log_type":"infrastructure","openshift_log_type":"infrastructure"},"values":[["1744794863132266200","{\"@timestamp\":\"2025-04-16T09:14:16.855959171Z\",\"hostname\":\"master-0\",\"kubernetes\":{\"annotations\":{\"k8s.ovn.org/pod-networks\":\"{\\\"default\\\":{\\\"ip_addresses\\\":[\\\"10.129.1.90/23\\\"],\\\"mac_address\\\":\\\"0a:58:0a:81:01:5a\\\",\\\"gateway_ips\\\":[\\\"10.129.0.1\\\"],\\\"routes\\\":[{\\\"dest\\\":\\\"10.128.0.0/14\\\",\\\"nextHop\\\":\\\"10.129.0.1\\\"},{\\\"dest\\\":\\\"172.30.0.0/16\\\",\\\"nextHop\\\":\\\"10.129.0.1\\\"},{\\\"dest\\\":\\\"169.254.169.5/32\\\",\\\"nextHop\\\":\\\"10.129.0.1\\\"},{\\\"dest\\\":\\\"100.64.0.0/16\\\",\\\"nextHop\\\":\\\"10.129.0.1\\\"}],\\\"ip_address\\\":\\\"10.129.1.90/23\\\",\\\"gateway_ip\\\":\\\"10.129.0.1\\\"}}\",\"k8s.v1.cni.cncf.io/network-status\":\"[{\\n \\\"name\\\": \\\"ovn-kubernetes\\\",\\n \\\"interface\\\": \\\"eth0\\\",\\n \\\"ips\\\": [\\n \\\"10.129.1.90\\\"\\n ],\\n \\\"mac\\\": \\\"0a:58:0a:81:01:5a\\\",\\n \\\"default\\\": true,\\n \\\"dns\\\": {}\\n}]\",\"kubectl.kubernetes.io/default-container\":\"cluster-autoscaler-operator\",\"openshift.io/required-scc\":\"restricted-v2\",\"openshift.io/scc\":\"restricted-v2\",\"seccomp.security.alpha.kubernetes.io/pod\":\"runtime/default\"},\"container_id\":\"cri-o://4126e2e58caa386e8affd2853ecbfbb3bf0ec5e73808695788ede57f3cfac172\",\"container_image\":\"quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:fbd617561969e7132a56b16376685862fd6fd297cf17a35ec41a48e04ba16fec\",\"container_image_id\":\"quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:fbd617561969e7132a56b16376685862fd6fd297cf17a35ec41a48e04ba16fec\",\"container_name\":\"cluster-autoscaler-operator\",\"labels\":{\"k8s-app\":\"cluster-autoscaler-operator\",\"pod-template-hash\":\"6756594495\"},\"namespace_id\":\"a674de8d-a3d8-476b-962f-58d294fd9013\",\"namespace_labels\":{\"kubernetes_io_metadata_name\":\"openshift-machine-api\",\"name\":\"openshift-machine-api\",\"olm_operatorgroup_uid_2a1082ff-0097-4440-a25e-b107a7a3319d\":\"\",\"openshift_io_cluster-monitoring\":\"true\",\"openshift_io_run-level\":\"\",\"pod-security_kubernetes_io_audit\":\"privileged\",\"pod-security_kubernetes_io_enforce\":\"privileged\",\"pod-security_kubernetes_io_warn\":\"privileged\"},\"namespace_name\":\"openshift-machine-api\",\"pod_id\":\"0af08af0-c80d-4f0d-9694-e0e0b3a27569\",\"pod_ip\":\"10.129.1.90\",\"pod_name\":\"cluster-autoscaler-operator-6756594495-bkgsc\",\"pod_owner\":\"ReplicaSet/cluster-autoscaler-operator-6756594495\"},\"level\":\"info\",\"log_source\":\"container\",\"log_type\":\"infrastructure\",\"message\":\"I0416 09:14:16.855928 1 status.go:244] Operator status available: at version 4.15.49\",\"openshift\":{\"cluster_id\":\"f3ed82e8-831f-45fe-a973-d869e9d46576\",\"labels\":{\"label\":\"6.0_415-infrastructure\"},\"sequence\":1744794863131477126}}"],["1744794863132173071","{\"@timestamp\":\"2025-04-16T09:14:16.855959171Z\",\"hostname\":\"master-0\",\"kubernetes\":{\"annotations\":{\"k8s.ovn.org/pod-networks\":\"{\\\"default\\\":{\\\"ip_addresses\\\":[\\\"10.129.1.90/23\\\"],\\\"mac_address\\\":\\\"0a:58:0a:81:01:5a\\\",\\\"gateway_ips\\\":[\\\"10.129.0.1\\\"],\\\"routes\\\":[{\\\"dest\\\":\\\"10.128.0.0/14\\\",\\\"nextHop\\\":\\\"10.129.0.1\\\"},{\\\"dest\\\":\\\"172.30.0.0/16\\\",\\\"nextHop\\\":\\\"10.129.0.1\\\"},{\\\"dest\\\":\\\"169.254.169.5/32\\\",\\\"nextHop\\\":\\\"10.129.0.1\\\"},{\\\"dest\\\":\\\"100.64.0.0/16\\\",\\\"nextHop\\\":\\\"10.129.0.1\\\"}],\\\"ip_address\\\":\\\"10.129.1.90/23\\\",\\\"gateway_ip\\\":\\\"10.129.0.1\\\"}}\",\"k8s.v1.cni.cncf.io/network-status\":\"[{\\n \\\"name\\\": \\\"ovn-kubernetes\\\",\\n \\\"interface\\\": \\\"eth0\\\",\\n \\\"ips\\\": [\\n \\\"10.129.1.90\\\"\\n ],\\n \\\"mac\\\": \\\"0a:58:0a:81:01:5a\\\",\\n \\\"default\\\": true,\\n \\\"dns\\\": {}\\n}]\",\"kubectl.kubernetes.io/default-container\":\"cluster-autoscaler-operator\",\"openshift.io/required-scc\":\"restricted-v2\",\"openshift.io/scc\":\"restricted-v2\",\"seccomp.security.alpha.kubernetes.io/pod\":\"runtime/default\"},\"container_id\":\"cri-o://4126e2e58caa386e8affd2853ecbfbb3bf0ec5e73808695788ede57f3cfac172\",\"container_image\":\"quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:fbd617561969e7132a56b16376685862fd6fd297cf17a35ec41a48e04ba16fec\",\"container_image_id\":\"quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:fbd617561969e7132a56b16376685862fd6fd297cf17a35ec41a48e04ba16fec\",\"container_name\":\"cluster-autoscaler-operator\",\"labels\":{\"k8s-app\":\"cluster-autoscaler-operator\",\"pod-template-hash\":\"6756594495\"},\"namespace_id\":\"a674de8d-a3d8-476b-962f-58d294fd9013\",\"namespace_labels\":{\"kubernetes_io_metadata_name\":\"openshift-machine-api\",\"name\":\"openshift-machine-api\",\"olm_operatorgroup_uid_2a1082ff-0097-4440-a25e-b107a7a3319d\":\"\",\"openshift_io_cluster-monitoring\":\"true\",\"openshift_io_run-level\":\"\",\"pod-security_kubernetes_io_audit\":\"privileged\",\"pod-security_kubernetes_io_enforce\":\"privileged\",\"pod-security_kubernetes_io_warn\":\"privileged\"},\"namespace_name\":\"openshift-machine-api\",\"pod_id\":\"0af08af0-c80d-4f0d-9694-e0e0b3a27569\",\"pod_ip\":\"10.129.1.90\",\"pod_name\":\"cluster-autoscaler-operator-6756594495-bkgsc\",\"pod_owner\":\"ReplicaSet/cluster-autoscaler-operator-6756594495\"},\"level\":\"info\",\"log_source\":\"container\",\"log_type\":\"infrastructure\",\"message\":\"I0416 09:14:16.855907 1 status.go:450] No ClusterAutoscaler. Reporting available.\",\"openshift\":{\"cluster_id\":\"f3ed82e8-831f-45fe-a973-d869e9d46576\",\"labels\":{\"label\":\"6.0_415-infrastructure\"},\"sequence\":1744794863131452454}}"]]},{"stream":{"k8s_container_name":"approver","k8s_namespace_name":"openshift-network-node-identity","k8s_node_name":"master-1","k8s_pod_name":"network-node-identity-lxvmj","kubernetes_container_name":"approver","kubernetes_host":"master-1","kubernetes_namespace_name":"openshift-network-node-identity","kubernetes_pod_name":"network-node-identity-lxvmj","log_type":"infrastructure","openshift_log_type":"infrastructure"},"values":[["1744794863859189471","{\"@timestamp\":\"2025-04-16T09:14:19.367879709Z\",\"hostname\":\"master-1\",\"kubernetes\":{\"annotations\":{\"openshift.io/scc\":\"hostnetwork-v2\",\"seccomp.security.alpha.kubernetes.io/pod\":\"runtime/default\"},\"container_id\":\"cri-o://5eea38bf645fd2be9d74984aa0a25f2754b54e397a160890bd4cb924da0608e0\",\"container_image\":\"quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:352c5cc7523e132747463b9f597f7a0d29eccae9fc7be53f5df65557f26b8716\",\"container_image_id\":\"quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:352c5cc7523e132747463b9f597f7a0d29eccae9fc7be53f5df65557f26b8716\",\"container_name\":\"approver\",\"labels\":{\"app\":\"network-node-identity\",\"component\":\"network\",\"controller-revision-hash\":\"6b6b47bb47\",\"kubernetes_io_os\":\"linux\",\"openshift_io_component\":\"network\",\"pod-template-generation\":\"1\",\"type\":\"infra\"},\"namespace_id\":\"67e235c5-c419-4b97-ade2-0a2262d6a113\",\"namespace_labels\":{\"kubernetes_io_metadata_name\":\"openshift-network-node-identity\",\"olm_operatorgroup_uid_2a1082ff-0097-4440-a25e-b107a7a3319d\":\"\",\"openshift_io_cluster-monitoring\":\"true\",\"pod-security_kubernetes_io_audit\":\"privileged\",\"pod-security_kubernetes_io_enforce\":\"privileged\",\"pod-security_kubernetes_io_warn\":\"privileged\"},\"namespace_name\":\"openshift-network-node-identity\",\"pod_id\":\"30bed54f-cffe-469f-af29-f1902eb4d549\",\"pod_ip\":\"10.20.177.61\",\"pod_name\":\"network-node-identity-lxvmj\",\"pod_owner\":\"DaemonSet/network-node-identity\"},\"level\":\"info\",\"log_source\":\"container\",\"log_type\":\"infrastructure\",\"message\":\"I0416 09:14:19.367839 1 leaderelection.go:255] failed to acquire lease openshift-network-node-identity/ovnkube-identity\",\"openshift\":{\"cluster_id\":\"f3ed82e8-831f-45fe-a973-d869e9d46576\",\"labels\":{\"label\":\"6.0_415-infrastructure\"},\"sequence\":1744794863857885037}}"],["1744794863859132866","{\"@timestamp\":\"2025-04-16T09:14:19.367879709Z\",\"hostname\":\"master-1\",\"kubernetes\":{\"annotations\":{\"openshift.io/scc\":\"hostnetwork-v2\",\"seccomp.security.alpha.kubernetes.io/pod\":\"runtime/default\"},\"container_id\":\"cri-o://5eea38bf645fd2be9d74984aa0a25f2754b54e397a160890bd4cb924da0608e0\",\"container_image\":\"quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:352c5cc7523e132747463b9f597f7a0d29eccae9fc7be53f5df65557f26b8716\",\"container_image_id\":\"quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:352c5cc7523e132747463b9f597f7a0d29eccae9fc7be53f5df65557f26b8716\",\"container_name\":\"approver\",\"labels\":{\"app\":\"network-node-identity\",\"component\":\"network\",\"controller-revision-hash\":\"6b6b47bb47\",\"kubernetes_io_os\":\"linux\",\"openshift_io_component\":\"network\",\"pod-template-generation\":\"1\",\"type\":\"infra\"},\"namespace_id\":\"67e235c5-c419-4b97-ade2-0a2262d6a113\",\"namespace_labels\":{\"kubernetes_io_metadata_name\":\"openshift-network-node-identity\",\"olm_operatorgroup_uid_2a1082ff-0097-4440-a25e-b107a7a3319d\":\"\",\"openshift_io_cluster-monitoring\":\"true\",\"pod-security_kubernetes_io_audit\":\"privileged\",\"pod-security_kubernetes_io_enforce\":\"privileged\",\"pod-security_kubernetes_io_warn\":\"privileged\"},\"namespace_name\":\"openshift-network-node-identity\",\"pod_id\":\"30bed54f-cffe-469f-af29-f1902eb4d549\",\"pod_ip\":\"10.20.177.61\",\"pod_name\":\"network-node-identity-lxvmj\",\"pod_owner\":\"DaemonSet/network-node-identity\"},\"level\":\"info\",\"log_source\":\"container\",\"log_type\":\"infrastructure\",\"message\":\"I0416 09:14:19.367808 1 leaderelection.go:354] lock is held by master-2_e64c5a80-e5b7-4e56-a290-981a591c0d51 and has not yet expired\",\"openshift\":{\"cluster_id\":\"f3ed82e8-831f-45fe-a973-d869e9d46576\",\"labels\":{\"label\":\"6.0_415-infrastructure\"},\"sequence\":1744794863857860836}}"]]},{"stream":{"k8s_container_name":"approver","k8s_namespace_name":"openshift-network-node-identity","k8s_node_name":"master-0","k8s_pod_name":"network-node-identity-v8s44","kubernetes_container_name":"approver","kubernetes_host":"master-0","kubernetes_namespace_name":"openshift-network-node-identity","kubernetes_pod_name":"network-node-identity-v8s44","log_type":"infrastructure","openshift_log_type":"infrastructure"},"values":[["1744794854913071806","{\"@timestamp\":\"2025-04-16T09:14:10.850631814Z\",\"hostname\":\"master-0\",\"kubernetes\":{\"annotations\":{\"openshift.io/scc\":\"hostnetwork-v2\",\"seccomp.security.alpha.kubernetes.io/pod\":\"runtime/default\"},\"container_id\":\"cri-o://22d5a7d419c0975ca1690707912c2b05200ba47b2104165ca1577657bbdac48b\",\"container_image\":\"quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:352c5cc7523e132747463b9f597f7a0d29eccae9fc7be53f5df65557f26b8716\",\"container_image_id\":\"quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:352c5cc7523e132747463b9f597f7a0d29eccae9fc7be53f5df65557f26b8716\",\"container_name\":\"approver\",\"labels\":{\"app\":\"network-node-identity\",\"component\":\"network\",\"controller-revision-hash\":\"6b6b47bb47\",\"kubernetes_io_os\":\"linux\",\"openshift_io_component\":\"network\",\"pod-template-generation\":\"1\",\"type\":\"infra\"},\"namespace_id\":\"67e235c5-c419-4b97-ade2-0a2262d6a113\",\"namespace_labels\":{\"kubernetes_io_metadata_name\":\"openshift-network-node-identity\",\"olm_operatorgroup_uid_2a1082ff-0097-4440-a25e-b107a7a3319d\":\"\",\"openshift_io_cluster-monitoring\":\"true\",\"pod-security_kubernetes_io_audit\":\"privileged\",\"pod-security_kubernetes_io_enforce\":\"privileged\",\"pod-security_kubernetes_io_warn\":\"privileged\"},\"namespace_name\":\"openshift-network-node-identity\",\"pod_id\":\"5c8b97c6-4b47-499a-b765-81acdfaa8e53\",\"pod_ip\":\"10.20.177.139\",\"pod_name\":\"network-node-identity-v8s44\",\"pod_owner\":\"DaemonSet/network-node-identity\"},\"level\":\"info\",\"log_source\":\"container\",\"log_type\":\"infrastructure\",\"message\":\"I0416 09:14:10.850600 1 leaderelection.go:255] failed to acquire lease openshift-network-node-identity/ovnkube-identity\",\"openshift\":{\"cluster_id\":\"f3ed82e8-831f-45fe-a973-d869e9d46576\",\"labels\":{\"label\":\"6.0_415-infrastructure\"},\"sequence\":1744794854911894996}}"],["1744794854913002788","{\"@timestamp\":\"2025-04-16T09:14:10.850631814Z\",\"hostname\":\"master-0\",\"kubernetes\":{\"annotations\":{\"openshift.io/scc\":\"hostnetwork-v2\",\"seccomp.security.alpha.kubernetes.io/pod\":\"runtime/default\"},\"container_id\":\"cri-o://22d5a7d419c0975ca1690707912c2b05200ba47b2104165ca1577657bbdac48b\",\"container_image\":\"quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:352c5cc7523e132747463b9f597f7a0d29eccae9fc7be53f5df65557f26b8716\",\"container_image_id\":\"quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:352c5cc7523e132747463b9f597f7a0d29eccae9fc7be53f5df65557f26b8716\",\"container_name\":\"approver\",\"labels\":{\"app\":\"network-node-identity\",\"component\":\"network\",\"controller-revision-hash\":\"6b6b47bb47\",\"kubernetes_io_os\":\"linux\",\"openshift_io_component\":\"network\",\"pod-template-generation\":\"1\",\"type\":\"infra\"},\"namespace_id\":\"67e235c5-c419-4b97-ade2-0a2262d6a113\",\"namespace_labels\":{\"kubernetes_io_metadata_name\":\"openshift-network-node-identity\",\"olm_operatorgroup_uid_2a1082ff-0097-4440-a25e-b107a7a3319d\":\"\",\"openshift_io_cluster-monitoring\":\"true\",\"pod-security_kubernetes_io_audit\":\"privileged\",\"pod-security_kubernetes_io_enforce\":\"privileged\",\"pod-security_kubernetes_io_warn\":\"privileged\"},\"namespace_name\":\"openshift-network-node-identity\",\"pod_id\":\"5c8b97c6-4b47-499a-b765-81acdfaa8e53\",\"pod_ip\":\"10.20.177.139\",\"pod_name\":\"network-node-identity-v8s44\",\"pod_owner\":\"DaemonSet/network-node-identity\"},\"level\":\"info\",\"log_source\":\"container\",\"log_type\":\"infrastructure\",\"message\":\"I0416 09:14:10.850578 1 leaderelection.go:354] lock is held by master-2_e64c5a80-e5b7-4e56-a290-981a591c0d51 and has not yet expired\",\"openshift\":{\"cluster_id\":\"f3ed82e8-831f-45fe-a973-d869e9d46576\",\"labels\":{\"label\":\"6.0_415-infrastructure\"},\"sequence\":1744794854911855402}}"]]}],"stats":{"summary":{"bytesProcessedPerSecond":260272,"linesProcessedPerSecond":128,"totalBytesProcessed":8376888,"totalLinesProcessed":4147,"execTime":32.185079,"queueTime":0,"subqueries":0,"totalEntriesReturned":100,"splits":4,"shards":4,"totalPostFilterLines":4147,"totalStructuredMetadataBytesProcessed":41470},"querier":{"store":{"totalChunksRef":222,"totalChunksDownloaded":50,"chunksDownloadTime":2183760076,"queryReferencedStructuredMetadata":false,"chunk":{"headChunkBytes":0,"headChunkLines":0,"decompressedBytes":8376888,"decompressedLines":4147,"compressedBytes":821079,"totalDuplicates":0,"postFilterLines":4147,"headChunkStructuredMetadataBytes":0,"decompressedStructuredMetadataBytes":41470},"chunkRefsFetchTime":16122287184,"congestionControlLatency":0,"pipelineWrapperFilteredLines":0}},"ingester":{"totalReached":4,"totalChunksMatched":0,"totalBatches":4,"totalLinesSent":0,"store":{"totalChunksRef":0,"totalChunksDownloaded":0,"chunksDownloadTime":0,"queryReferencedStructuredMetadata":false,"chunk":{"headChunkBytes":0,"headChunkLines":0,"decompressedBytes":0,"decompressedLines":0,"compressedBytes":0,"totalDuplicates":0,"postFilterLines":0,"headChunkStructuredMetadataBytes":0,"decompressedStructuredMetadataBytes":0},"chunkRefsFetchTime":0,"congestionControlLatency":0,"pipelineWrapperFilteredLines":0}},"cache":{"chunk":{"entriesFound":0,"entriesRequested":100,"entriesStored":100,"bytesReceived":0,"bytesSent":8103569,"requests":3,"downloadTime":66177,"queryLengthServed":0},"index":{"entriesFound":0,"entriesRequested":0,"entriesStored":0,"bytesReceived":0,"bytesSent":0,"requests":0,"downloadTime":0,"queryLengthServed":0},"result":{"entriesFound":0,"entriesRequested":0,"entriesStored":0,"bytesReceived":0,"bytesSent":0,"requests":0,"downloadTime":0,"queryLengthServed":0},"statsResult":{"entriesFound":1,"entriesRequested":2,"entriesStored":2,"bytesReceived":200,"bytesSent":0,"requests":4,"downloadTime":47169,"queryLengthServed":30000000000},"volumeResult":{"entriesFound":0,"entriesRequested":0,"entriesStored":0,"bytesReceived":0,"bytesSent":0,"requests":0,"downloadTime":0,"queryLengthServed":0},"seriesResult":{"entriesFound":0,"entriesRequested":0,"entriesStored":0,"bytesReceived":0,"bytesSent":0,"requests":0,"downloadTime":0,"queryLengthServed":0},"labelResult":{"entriesFound":0,"entriesRequested":0,"entriesStored":0,"bytesReceived":0,"bytesSent":0,"requests":0,"downloadTime":0,"queryLengthServed":0},"instantMetricResult":{"entriesFound":0,"entriesRequested":0,"entriesStored":0,"bytesReceived":0,"bytesSent":0,"requests":0,"downloadTime":0,"queryLengthServed":0}},"index":{"totalChunks":0,"postFilterChunks":0,"shardsDuration":0,"usedBloomFilters":false}}}} ``` Application logs: ``` {\\\"dest\\\":\\\"169.254.169.5/32\\\",\\\"nextHop\\\":\\\"10.131.0.1\\\"},{\\\"dest\\\":\\\"100.64.0.0/16\\\",\\\"nextHop\\\":\\\"10.131.0.1\\\"}],\\\"ip_address\\\":\\\"10.131.0.143/23\\\",\\\"gateway_ip\\\":\\\"10.131.0.1\\\"}}\",\"k8s.v1.cni.cncf.io/network-status\":\"[{\\n \\\"name\\\": \\\"ovn-kubernetes\\\",\\n \\\"interface\\\": \\\"eth0\\\",\\n \\\"ips\\\": [\\n \\\"10.131.0.143\\\"\\n ],\\n \\\"mac\\\": \\\"0a:58:0a:83:00:8f\\\",\\n \\\"default\\\": true,\\n \\\"dns\\\": {}\\n}]\",\"openshift.io/scc\":\"restricted-v2\",\"seccomp.security.alpha.kubernetes.io/pod\":\"runtime/default\"},\"container_id\":\"cri-o://1432e6f7f911cefc690e46c302089bf6416fc9972cab0effeb2909f2ef2ed492\",\"container_image\":\"quay.io/pravin_dsilva/centos:logtest\",\"container_image_id\":\"quay.io/pravin_dsilva/centos@sha256:38b54ceb7e1963086aa531fb5462b271939c2bb7a3868bfe67a9a0721a910912\",\"container_name\":\"centos-logtest\",\"labels\":{\"run\":\"centos-logtest\",\"test\":\"centos-logtest\"},\"namespace_id\":\"43d4ffb8-71b1-4110-96e6-100376c989e8\",\"namespace_labels\":{\"kubernetes_io_metadata_name\":\"test-logging\",\"pod-security_kubernetes_io_audit\":\"restricted\",\"pod-security_kubernetes_io_audit-version\":\"v1.24\",\"pod-security_kubernetes_io_warn\":\"restricted\",\"pod-security_kubernetes_io_warn-version\":\"v1.24\"},\"namespace_name\":\"test-logging\",\"pod_id\":\"b94ff1c1-5294-4ca4-a2ff-a1403368c9e7\",\"pod_ip\":\"10.131.0.143\",\"pod_name\":\"centos-logtest-9dvww\",\"pod_owner\":\"ReplicationController/centos-logtest\"},\"level\":\"default\",\"log_source\":\"container\",\"log_type\":\"application\",\"message\":\"{\\\"message\\\": \\\"MERGE_JSON_LOG=true\\\", \\\"level\\\": \\\"debug\\\",\\\"Layer1\\\": \\\"layer1 0\\\", \\\"layer2\\\": {\\\"name\\\":\\\"Layer2 1\\\", \\\"tips\\\":\\\"Decide by PRESERVE_JSON_LOG\\\"}, \\\"StringNumber\\\":\\\"10\\\", \\\"Number\\\": 10,\\\"foo.bar\\\":\\\"Dot Item\\\",\\\"{foobar}\\\":\\\"Brace Item\\\",\\\"[foobar]\\\":\\\"Bracket Item\\\", \\\"foo:bar\\\":\\\"Colon Item\\\",\\\"foo bar\\\":\\\"Space Item\\\" }\",\"openshift\":{\"cluster_id\":\"f3ed82e8-831f-45fe-a973-d869e9d46576\",\"labels\":{\"label\":\"6.0_415-application\"},\"sequence\":1744794778968189120}}"],["1744794777936604241","{\"@timestamp\":\"2025-04-16T09:12:57.912410249Z\",\"hostname\":\"worker-1\",\"kubernetes\":{\"annotations\":{\"k8s.ovn.org/pod-networks\":\"{\\\"default\\\":{\\\"ip_addresses\\\":[\\\"10.131.0.143/23\\\"],\\\"mac_address\\\":\\\"0a:58:0a:83:00:8f\\\",\\\"gateway_ips\\\":[\\\"10.131.0.1\\\"],\\\"routes\\\":[{\\\"dest\\\":\\\"10.128.0.0/14\\\",\\\"nextHop\\\":\\\"10.131.0.1\\\"},{\\\"dest\\\":\\\"172.30.0.0/16\\\",\\\"nextHop\\\":\\\"10.131.0.1\\\"},{\\\"dest\\\":\\\"169.254.169.5/32\\\",\\\"nextHop\\\":\\\"10.131.0.1\\\"},{\\\"dest\\\":\\\"100.64.0.0/16\\\",\\\"nextHop\\\":\\\"10.131.0.1\\\"}],\\\"ip_address\\\":\\\"10.131.0.143/23\\\",\\\"gateway_ip\\\":\\\"10.131.0.1\\\"}}\",\"k8s.v1.cni.cncf.io/network-status\":\"[{\\n \\\"name\\\": \\\"ovn-kubernetes\\\",\\n \\\"interface\\\": \\\"eth0\\\",\\n \\\"ips\\\": [\\n \\\"10.131.0.143\\\"\\n ],\\n \\\"mac\\\": \\\"0a:58:0a:83:00:8f\\\",\\n \\\"default\\\": true,\\n \\\"dns\\\": {}\\n}]\",\"openshift.io/scc\":\"restricted-v2\",\"seccomp.security.alpha.kubernetes.io/pod\":\"runtime/default\"},\"container_id\":\"cri-o://1432e6f7f911cefc690e46c302089bf6416fc9972cab0effeb2909f2ef2ed492\",\"container_image\":\"quay.io/pravin_dsilva/centos:logtest\",\"container_image_id\":\"quay.io/pravin_dsilva/centos@sha256:38b54ceb7e1963086aa531fb5462b271939c2bb7a3868bfe67a9a0721a910912\",\"container_name\":\"centos-logtest\",\"labels\":{\"run\":\"centos-logtest\",\"test\":\"centos-logtest\"},\"namespace_id\":\"43d4ffb8-71b1-4110-96e6-100376c989e8\",\"namespace_labels\":{\"kubernetes_io_metadata_name\":\"test-logging\",\"pod-security_kubernetes_io_audit\":\"restricted\",\"pod-security_kubernetes_io_audit-version\":\"v1.24\",\"pod-security_kubernetes_io_warn\":\"restricted\",\"pod-security_kubernetes_io_warn-version\":\"v1.24\"},\"namespace_name\":\"test-logging\",\"pod_id\":\"b94ff1c1-5294-4ca4-a2ff-a1403368c9e7\",\"pod_ip\":\"10.131.0.143\",\"pod_name\":\"centos-logtest-9dvww\",\"pod_owner\":\"ReplicationController/centos-logtest\"},\"level\":\"default\",\"log_source\":\"container\",\"log_type\":\"application\",\"message\":\"{\\\"message\\\": \\\"MERGE_JSON_LOG=true\\\", \\\"level\\\": \\\"debug\\\",\\\"Layer1\\\": \\\"layer1 0\\\", \\\"layer2\\\": {\\\"name\\\":\\\"Layer2 1\\\", \\\"tips\\\":\\\"Decide by PRESERVE_JSON_LOG\\\"}, \\\"StringNumber\\\":\\\"10\\\", \\\"Number\\\": 10,\\\"foo.bar\\\":\\\"Dot Item\\\",\\\"{foobar}\\\":\\\"Brace Item\\\",\\\"[foobar]\\\":\\\"Bracket Item\\\", \\\"foo:bar\\\":\\\"Colon Item\\\",\\\"foo bar\\\":\\\"Space Item\\\" }\",\"openshift\":{\"cluster_id\":\"f3ed82e8-831f-45fe-a973-d869e9d46576\",\"labels\":{\"label\":\"6.0_415-application\"},\"sequence\":1744794777935447536}}"],["1744794777417491375","{\"@timestamp\":\"2025-04-16T09:12:56.910706934Z\",\"hostname\":\"worker-1\",\"kubernetes\":{\"annotations\":{\"k8s.ovn.org/pod-networks\":\"{\\\"default\\\":{\\\"ip_addresses\\\":[\\\"10.131.0.143/23\\\"],\\\"mac_address\\\":\\\"0a:58:0a:83:00:8f\\\",\\\"gateway_ips\\\":[\\\"10.131.0.1\\\"],\\\"routes\\\":[{\\\"dest\\\":\\\"10.128.0.0/14\\\",\\\"nextHop\\\":\\\"10.131.0.1\\\"},{\\\"dest\\\":\\\"172.30.0.0/16\\\",\\\"nextHop\\\":\\\"10.131.0.1\\\"},{\\\"dest\\\":\\\"169.254.169.5/32\\\",\\\"nextHop\\\":\\\"10.131.0.1\\\"},{\\\"dest\\\":\\\"100.64.0.0/16\\\",\\\"nextHop\\\":\\\"10.131.0.1\\\"}],\\\"ip_address\\\":\\\"10.131.0.143/23\\\",\\\"gateway_ip\\\":\\\"10.131.0.1\\\"}}\",\"k8s.v1.cni.cncf.io/network-status\":\"[{\\n \\\"name\\\": \\\"ovn-kubernetes\\\",\\n \\\"interface\\\": \\\"eth0\\\",\\n \\\"ips\\\": [\\n \\\"10.131.0.143\\\"\\n ],\\n \\\"mac\\\": \\\"0a:58:0a:83:00:8f\\\",\\n \\\"default\\\": true,\\n \\\"dns\\\": {}\\n}]\",\"openshift.io/scc\":\"restricted-v2\",\"seccomp.security.alpha.kubernetes.io/pod\":\"runtime/default\"},\"container_id\":\"cri-o://1432e6f7f911cefc690e46c302089bf6416fc9972cab0effeb2909f2ef2ed492\",\"container_image\":\"quay.io/pravin_dsilva/centos:logtest\",\"container_image_id\":\"quay.io/pravin_dsilva/centos@sha256:38b54ceb7e1963086aa531fb5462b271939c2bb7a3868bfe67a9a0721a910912\",\"container_name\":\"centos-logtest\",\"labels\":{\"run\":\"centos-logtest\",\"test\":\"centos-logtest\"},\"namespace_id\":\"43d4ffb8-71b1-4110-96e6-100376c989e8\",\"namespace_labels\":{\"kubernetes_io_metadata_name\":\"test-logging\",\"pod-security_kubernetes_io_audit\":\"restricted\",\"pod-security_kubernetes_io_audit-version\":\"v1.24\",\"pod-security_kubernetes_io_warn\":\"restricted\",\"pod-security_kubernetes_io_warn-version\":\"v1.24\"},\"namespace_name\":\"test-logging\",\"pod_id\":\"b94ff1c1-5294-4ca4-a2ff-a1403368c9e7\",\"pod_ip\":\"10.131.0.143\",\"pod_name\":\"centos-logtest-9dvww\",\"pod_owner\":\"ReplicationController/centos-logtest\"},\"level\":\"default\",\"log_source\":\"container\",\"log_type\":\"application\",\"message\":\"{\\\"message\\\": \\\"MERGE_JSON_LOG=true\\\", \\\"level\\\": \\\"debug\\\",\\\"Layer1\\\": \\\"layer1 0\\\", \\\"layer2\\\": {\\\"name\\\":\\\"Layer2 1\\\", \\\"tips\\\":\\\"Decide by PRESERVE_JSON_LOG\\\"}, \\\"StringNumber\\\":\\\"10\\\", \\\"Number\\\": 10,\\\"foo.bar\\\":\\\"Dot Item\\\",\\\"{foobar}\\\":\\\"Brace Item\\\",\\\"[foobar]\\\":\\\"Bracket Item\\\", \\\"foo:bar\\\":\\\"Colon Item\\\",\\\"foo bar\\\":\\\"Space Item\\\" }\",\"openshift\":{\"cluster_id\":\"f3ed82e8-831f-45fe-a973-d869e9d46576\",\"labels\":{\"label\":\"6.0_415-application\"},\"sequence\":1744794777416320758}}"],["1744794776382873453","{\"@timestamp\":\"2025-04-16T09:12:55.909077557Z\",\"hostname\":\"worker-1\",\"kubernetes\":{\"annotations\":{\"k8s.ovn.org/pod-networks\":\"{\\\"default\\\":{\\\"ip_addresses\\\":[\\\"10.131.0.143/23\\\"],\\\"mac_address\\\":\\\"0a:58:0a:83:00:8f\\\",\\\"gateway_ips\\\":[\\\"10.131.0.1\\\"],\\\"routes\\\":[{\\\"dest\\\":\\\"10.128.0.0/14\\\",\\\"nextHop\\\":\\\"10.131.0.1\\\"},{\\\"dest\\\":\\\"172.30.0.0/16\\\",\\\"nextHop\\\":\\\"10.131.0.1\\\"},{\\\"dest\\\":\\\"169.254.169.5/32\\\",\\\"nextHop\\\":\\\"10.131.0.1\\\"},{\\\"dest\\\":\\\"100.64.0.0/16\\\",\\\"nextHop\\\":\\\"10.131.0.1\\\"}],\\\"ip_address\\\":\\\"10.131.0.143/23\\\",\\\"gateway_ip\\\":\\\"10.131.0.1\\\"}}\",\"k8s.v1.cni.cncf.io/network-status\":\"[{\\n \\\"name\\\": \\\"ovn-kubernetes\\\",\\n \\\"interface\\\": \\\"eth0\\\",\\n \\\"ips\\\": [\\n \\\"10.131.0.143\\\"\\n ],\\n \\\"mac\\\": \\\"0a:58:0a:83:00:8f\\\",\\n \\\"default\\\": true,\\n \\\"dns\\\": {}\\n}]\",\"openshift.io/scc\":\"restricted-v2\",\"seccomp.security.alpha.kubernetes.io/pod\":\"runtime/default\"},\"container_id\":\"cri-o://1432e6f7f911cefc690e46c302089bf6416fc9972cab0effeb2909f2ef2ed492\",\"container_image\":\"quay.io/pravin_dsilva/centos:logtest\",\"container_image_id\":\"quay.io/pravin_dsilva/centos@sha256:38b54ceb7e1963086aa531fb5462b271939c2bb7a3868bfe67a9a0721a910912\",\"container_name\":\"centos-logtest\",\"labels\":{\"run\":\"centos-logtest\",\"test\":\"centos-logtest\"},\"namespace_id\":\"43d4ffb8-71b1-4110-96e6-100376c989e8\",\"namespace_labels\":{\"kubernetes_io_metadata_name\":\"test-logging\",\"pod-security_kubernetes_io_audit\":\"restricted\",\"pod-security_kubernetes_io_audit-version\":\"v1.24\",\"pod-security_kubernetes_io_warn\":\"restricted\",\"pod-security_kubernetes_io_warn-version\":\"v1.24\"},\"namespace_name\":\"test-logging\",\"pod_id\":\"b94ff1c1-5294-4ca4-a2ff-a1403368c9e7\",\"pod_ip\":\"10.131.0.143\",\"pod_name\":\"centos-logtest-9dvww\",\"pod_owner\":\"ReplicationController/centos-logtest\"},\"level\":\"default\",\"log_source\":\"container\",\"log_type\":\"application\",\"message\":\"{\\\"message\\\": \\\"MERGE_JSON_LOG=true\\\", \\\"level\\\": \\\"debug\\\",\\\"Layer1\\\": \\\"layer1 0\\\", \\\"layer2\\\": {\\\"name\\\":\\\"Layer2 1\\\", \\\"tips\\\":\\\"Decide by PRESERVE_JSON_LOG\\\"}, \\\"StringNumber\\\":\\\"10\\\", \\\"Number\\\": 10,\\\"foo.bar\\\":\\\"Dot Item\\\",\\\"{foobar}\\\":\\\"Brace Item\\\",\\\"[foobar]\\\":\\\"Bracket Item\\\", \\\"foo:bar\\\":\\\"Colon Item\\\",\\\"foo bar\\\":\\\"Space Item\\\" }\",\"openshift\":{\"cluster_id\":\"f3ed82e8-831f-45fe-a973-d869e9d46576\",\"labels\":{\"label\":\"6.0_415-application\"},\"sequence\":1744794776381964871}}"],["1744794775352356478","{\"@timestamp\":\"2025-04-16T09:12:54.907538054Z\",\"hostname\":\"worker-1\",\"kubernetes\":{\"annotations\":{\"k8s.ovn.org/pod-networks\":\"{\\\"default\\\":{\\\"ip_addresses\\\":[\\\"10.131.0.143/23\\\"],\\\"mac_address\\\":\\\"0a:58:0a:83:00:8f\\\",\\\"gateway_ips\\\":[\\\"10.131.0.1\\\"],\\\"routes\\\":[{\\\"dest\\\":\\\"10.128.0.0/14\\\",\\\"nextHop\\\":\\\"10.131.0.1\\\"},{\\\"dest\\\":\\\"172.30.0.0/16\\\",\\\"nextHop\\\":\\\"10.131.0.1\\\"},{\\\"dest\\\":\\\"169.254.169.5/32\\\",\\\"nextHop\\\":\\\"10.131.0.1\\\"},{\\\"dest\\\":\\\"100.64.0.0/16\\\",\\\"nextHop\\\":\\\"10.131.0.1\\\"}],\\\"ip_address\\\":\\\"10.131.0.143/23\\\",\\\"gateway_ip\\\":\\\"10.131.0.1\\\"}}\",\"k8s.v1.cni.cncf.io/network-status\":\"[{\\n \\\"name\\\": \\\"ovn-kubernetes\\\",\\n \\\"interface\\\": \\\"eth0\\\",\\n \\\"ips\\\": [\\n \\\"10.131.0.143\\\"\\n ],\\n \\\"mac\\\": \\\"0a:58:0a:83:00:8f\\\",\\n \\\"default\\\": true,\\n \\\"dns\\\": {}\\n}]\",\"openshift.io/scc\":\"restricted-v2\",\"seccomp.security.alpha.kubernetes.io/pod\":\"runtime/default\"},\"container_id\":\"cri-o://1432e6f7f911cefc690e46c302089bf6416fc9972cab0effeb2909f2ef2ed492\",\"container_image\":\"quay.io/pravin_dsilva/centos:logtest\",\"container_image_id\":\"quay.io/pravin_dsilva/centos@sha256:38b54ceb7e1963086aa531fb5462b271939c2bb7a3868bfe67a9a0721a910912\",\"container_name\":\"centos-logtest\",\"labels\":{\"run\":\"centos-logtest\",\"test\":\"centos-logtest\"},\"namespace_id\":\"43d4ffb8-71b1-4110-96e6-100376c989e8\",\"namespace_labels\":{\"kubernetes_io_metadata_name\":\"test-logging\",\"pod-security_kubernetes_io_audit\":\"restricted\",\"pod-security_kubernetes_io_audit-version\":\"v1.24\",\"pod-security_kubernetes_io_warn\":\"restricted\",\"pod-security_kubernetes_io_warn-version\":\"v1.24\"},\"namespace_name\":\"test-logging\",\"pod_id\":\"b94ff1c1-5294-4ca4-a2ff-a1403368c9e7\",\"pod_ip\":\"10.131.0.143\",\"pod_name\":\"centos-logtest-9dvww\",\"pod_owner\":\"ReplicationController/centos-logtest\"},\"level\":\"default\",\"log_source\":\"container\",\"log_type\":\"application\",\"message\":\"{\\\"message\\\": \\\"MERGE_JSON_LOG=true\\\", \\\"level\\\": \\\"debug\\\",\\\"Layer1\\\": \\\"layer1 0\\\", \\\"layer2\\\": {\\\"name\\\":\\\"Layer2 1\\\", \\\"tips\\\":\\\"Decide by PRESERVE_JSON_LOG\\\"}, \\\"StringNumber\\\":\\\"10\\\", \\\"Number\\\": 10,\\\"foo.bar\\\":\\\"Dot Item\\\",\\\"{foobar}\\\":\\\"Brace Item\\\",\\\"[foobar]\\\":\\\"Bracket Item\\\", \\\"foo:bar\\\":\\\"Colon Item\\\",\\\"foo bar\\\":\\\"Space Item\\\" }\",\"openshift\":{\"cluster_id\":\"f3ed82e8-831f-45fe-a973-d869e9d46576\",\"labels\":{\"label\":\"6.0_415-application\"},\"sequence\":1744794775351315840}}"],["1744794774318259116","{\"@timestamp\":\"2025-04-16T09:12:53.905992010Z\",\"hostname\":\"worker-1\",\"kubernetes\":{\"annotations\":{\"k8s.ovn.org/pod-networks\":\"{\\\"default\\\":{\\\"ip_addresses\\\":[\\\"10.131.0.143/23\\\"],\\\"mac_address\\\":\\\"0a:58:0a:83:00:8f\\\",\\\"gateway_ips\\\":[\\\"10.131.0.1\\\"],\\\"routes\\\":[{\\\"dest\\\":\\\"10.128.0.0/14\\\",\\\"nextHop\\\":\\\"10.131.0.1\\\"},{\\\"dest\\\":\\\"172.30.0.0/16\\\",\\\"nextHop\\\":\\\"10.131.0.1\\\"},{\\\"dest\\\":\\\"169.254.169.5/32\\\",\\\"nextHop\\\":\\\"10.131.0.1\\\"},{\\\"dest\\\":\\\"100.64.0.0/16\\\",\\\"nextHop\\\":\\\"10.131.0.1\\\"}],\\\"ip_address\\\":\\\"10.131.0.143/23\\\",\\\"gateway_ip\\\":\\\"10.131.0.1\\\"}}\",\"k8s.v1.cni.cncf.io/network-status\":\"[{\\n \\\"name\\\": \\\"ovn-kubernetes\\\",\\n \\\"interface\\\": \\\"eth0\\\",\\n \\\"ips\\\": [\\n \\\"10.131.0.143\\\"\\n ],\\n \\\"mac\\\": \\\"0a:58:0a:83:00:8f\\\",\\n \\\"default\\\": true,\\n \\\"dns\\\": {}\\n}]\",\"openshift.io/scc\":\"restricted-v2\",\"seccomp.security.alpha.kubernetes.io/pod\":\"runtime/default\"},\"container_id\":\"cri-o://1432e6f7f911cefc690e46c302089bf6416fc9972cab0effeb2909f2ef2ed492\",\"container_image\":\"quay.io/pravin_dsilva/centos:logtest\",\"container_image_id\":\"quay.io/pravin_dsilva/centos@sha256:38b54ceb7e1963086aa531fb5462b271939c2bb7a3868bfe67a9a0721a910912\",\"container_name\":\"centos-logtest\",\"labels\":{\"run\":\"centos-logtest\",\"test\":\"centos-logtest\"},\"namespace_id\":\"43d4ffb8-71b1-4110-96e6-100376c989e8\",\"namespace_labels\":{\"kubernetes_io_metadata_name\":\"test-logging\",\"pod-security_kubernetes_io_audit\":\"restricted\",\"pod-security_kubernetes_io_audit-version\":\"v1.24\",\"pod-security_kubernetes_io_warn\":\"restricted\",\"pod-security_kubernetes_io_warn-version\":\"v1.24\"},\"namespace_name\":\"test-logging\",\"pod_id\":\"b94ff1c1-5294-4ca4-a2ff-a1403368c9e7\",\"pod_ip\":\"10.131.0.143\",\"pod_name\":\"centos-logtest-9dvww\",\"pod_owner\":\"ReplicationController/centos-logtest\"},\"level\":\"default\",\"log_source\":\"container\",\"log_type\":\"application\",\"message\":\"{\\\"message\\\": \\\"MERGE_JSON_LOG=true\\\", \\\"level\\\": \\\"debug\\\",\\\"Layer1\\\": \\\"layer1 0\\\", \\\"layer2\\\": {\\\"name\\\":\\\"Layer2 1\\\", \\\"tips\\\":\\\"Decide by PRESERVE_JSON_LOG\\\"}, \\\"StringNumber\\\":\\\"10\\\", \\\"Number\\\": 10,\\\"foo.bar\\\":\\\"Dot Item\\\",\\\"{foobar}\\\":\\\"Brace Item\\\",\\\"[foobar]\\\":\\\"Bracket Item\\\", \\\"foo:bar\\\":\\\"Colon Item\\\",\\\"foo bar\\\":\\\"Space Item\\\" }\",\"openshift\":{\"cluster_id\":\"f3ed82e8-831f-45fe-a973-d869e9d46576\",\"labels\":{\"label\":\"6.0_415-application\"},\"sequence\":1744794774317514334}}"],["1744794773286170176","{\"@timestamp\":\"2025-04-16T09:12:52.904439886Z\",\"hostname\":\"worker-1\",\"kubernetes\":{\"annotations\":{\"k8s.ovn.org/pod-networks\":\"{\\\"default\\\":{\\\"ip_addresses\\\":[\\\"10.131.0.143/23\\\"],\\\"mac_address\\\":\\\"0a:58:0a:83:00:8f\\\",\\\"gateway_ips\\\":[\\\"10.131.0.1\\\"],\\\"routes\\\":[{\\\"dest\\\":\\\"10.128.0.0/14\\\",\\\"nextHop\\\":\\\"10.131.0.1\\\"},{\\\"dest\\\":\\\"172.30.0.0/16\\\",\\\"nextHop\\\":\\\"10.131.0.1\\\"},{\\\"dest\\\":\\\"169.254.169.5/32\\\",\\\"nextHop\\\":\\\"10.131.0.1\\\"},{\\\"dest\\\":\\\"100.64.0.0/16\\\",\\\"nextHop\\\":\\\"10.131.0.1\\\"}],\\\"ip_address\\\":\\\"10.131.0.143/23\\\",\\\"gateway_ip\\\":\\\"10.131.0.1\\\"}}\",\"k8s.v1.cni.cncf.io/network-status\":\"[{\\n \\\"name\\\": \\\"ovn-kubernetes\\\",\\n \\\"interface\\\": \\\"eth0\\\",\\n \\\"ips\\\": [\\n \\\"10.131.0.143\\\"\\n ],\\n \\\"mac\\\": \\\"0a:58:0a:83:00:8f\\\",\\n \\\"default\\\": true,\\n \\\"dns\\\": {}\\n}]\",\"openshift.io/scc\":\"restricted-v2\",\"seccomp.security.alpha.kubernetes.io/pod\":\"runtime/default\"},\"container_id\":\"cri-o://1432e6f7f911cefc690e46c302089bf6416fc9972cab0effeb2909f2ef2ed492\",\"container_image\":\"quay.io/pravin_dsilva/centos:logtest\",\"container_image_id\":\"quay.io/pravin_dsilva/centos@sha256:38b54ceb7e1963086aa531fb5462b271939c2bb7a3868bfe67a9a0721a910912\",\"container_name\":\"centos-logtest\",\"labels\":{\"run\":\"centos-logtest\",\"test\":\"centos-logtest\"},\"namespace_id\":\"43d4ffb8-71b1-4110-96e6-100376c989e8\",\"namespace_labels\":{\"kubernetes_io_metadata_name\":\"test-logging\",\"pod-security_kubernetes_io_audit\":\"restricted\",\"pod-security_kubernetes_io_audit-version\":\"v1.24\",\"pod-security_kubernetes_io_warn\":\"restricted\",\"pod-security_kubernetes_io_warn-version\":\"v1.24\"},\"namespace_name\":\"test-logging\",\"pod_id\":\"b94ff1c1-5294-4ca4-a2ff-a1403368c9e7\",\"pod_ip\":\"10.131.0.143\",\"pod_name\":\"centos-logtest-9dvww\",\"pod_owner\":\"ReplicationController/centos-logtest\"},\"level\":\"default\",\"log_source\":\"container\",\"log_type\":\"application\",\"message\":\"{\\\"message\\\": \\\"MERGE_JSON_LOG=true\\\", \\\"level\\\": \\\"debug\\\",\\\"Layer1\\\": \\\"layer1 0\\\", \\\"layer2\\\": {\\\"name\\\":\\\"Layer2 1\\\", \\\"tips\\\":\\\"Decide by PRESERVE_JSON_LOG\\\"}, \\\"StringNumber\\\":\\\"10\\\", \\\"Number\\\": 10,\\\"foo.bar\\\":\\\"Dot Item\\\",\\\"{foobar}\\\":\\\"Brace Item\\\",\\\"[foobar]\\\":\\\"Bracket Item\\\", \\\"foo:bar\\\":\\\"Colon Item\\\",\\\"foo bar\\\":\\\"Space Item\\\" }\",\"openshift\":{\"cluster_id\":\"f3ed82e8-831f-45fe-a973-d869e9d46576\",\"labels\":{\"label\":\"6.0_415-application\"},\"sequence\":1744794773284910403}}"],["1744794772253380542","{\"@timestamp\":\"2025-04-16T09:12:51.902700710Z\",\"hostname\":\"worker-1\",\"kubernetes\":{\"annotations\":{\"k8s.ovn.org/pod-networks\":\"{\\\"default\\\":{\\\"ip_addresses\\\":[\\\"10.131.0.143/23\\\"],\\\"mac_address\\\":\\\"0a:58:0a:83:00:8f\\\",\\\"gateway_ips\\\":[\\\"10.131.0.1\\\"],\\\"routes\\\":[{\\\"dest\\\":\\\"10.128.0.0/14\\\",\\\"nextHop\\\":\\\"10.131.0.1\\\"},{\\\"dest\\\":\\\"172.30.0.0/16\\\",\\\"nextHop\\\":\\\"10.131.0.1\\\"},{\\\"dest\\\":\\\"169.254.169.5/32\\\",\\\"nextHop\\\":\\\"10.131.0.1\\\"},{\\\"dest\\\":\\\"100.64.0.0/16\\\",\\\"nextHop\\\":\\\"10.131.0.1\\\"}],\\\"ip_address\\\":\\\"10.131.0.143/23\\\",\\\"gateway_ip\\\":\\\"10.131.0.1\\\"}}\",\"k8s.v1.cni.cncf.io/network-status\":\"[{\\n \\\"name\\\": \\\"ovn-kubernetes\\\",\\n \\\"interface\\\": \\\"eth0\\\",\\n \\\"ips\\\": [\\n \\\"10.131.0.143\\\"\\n ],\\n \\\"mac\\\": \\\"0a:58:0a:83:00:8f\\\",\\n \\\"default\\\": true,\\n \\\"dns\\\": {}\\n}]\",\"openshift.io/scc\":\"restricted-v2\",\"seccomp.security.alpha.kubernetes.io/pod\":\"runtime/default\"},\"container_id\":\"cri-o://1432e6f7f911cefc690e46c302089bf6416fc9972cab0effeb2909f2ef2ed492\",\"container_image\":\"quay.io/pravin_dsilva/centos:logtest\",\"container_image_id\":\"quay.io/pravin_dsilva/centos@sha256:38b54ceb7e1963086aa531fb5462b271939c2bb7a3868bfe67a9a0721a910912\",\"container_name\":\"centos-logtest\",\"labels\":{\"run\":\"centos-logtest\",\"test\":\"centos-logtest\"},\"namespace_id\":\"43d4ffb8-71b1-4110-96e6-100376c989e8\",\"namespace_labels\":{\"kubernetes_io_metadata_name\":\"test-logging\",\"pod-security_kubernetes_io_audit\":\"restricted\",\"pod-security_kubernetes_io_audit-version\":\"v1.24\",\"pod-security_kubernetes_io_warn\":\"restricted\",\"pod-security_kubernetes_io_warn-version\":\"v1.24\"},\"namespace_name\":\"test-logging\",\"pod_id\":\"b94ff1c1-5294-4ca4-a2ff-a1403368c9e7\",\"pod_ip\":\"10.131.0.143\",\"pod_name\":\"centos-logtest-9dvww\",\"pod_owner\":\"ReplicationController/centos-logtest\"},\"level\":\"default\",\"log_source\":\"container\",\"log_type\":\"application\",\"message\":\"{\\\"message\\\": \\\"MERGE_JSON_LOG=true\\\", \\\"level\\\": \\\"debug\\\",\\\"Layer1\\\": \\\"layer1 0\\\", \\\"layer2\\\": {\\\"name\\\":\\\"Layer2 1\\\", \\\"tips\\\":\\\"Decide by PRESERVE_JSON_LOG\\\"}, \\\"StringNumber\\\":\\\"10\\\", \\\"Number\\\": 10,\\\"foo.bar\\\":\\\"Dot Item\\\",\\\"{foobar}\\\":\\\"Brace Item\\\",\\\"[foobar]\\\":\\\"Bracket Item\\\", \\\"foo:bar\\\":\\\"Colon Item\\\",\\\"foo bar\\\":\\\"Space Item\\\" }\",\"openshift\":{\"cluster_id\":\"f3ed82e8-831f-45fe-a973-d869e9d46576\",\"labels\":{\"label\":\"6.0_415-application\"},\"sequence\":1744794772252511870}}"],["1744794771216278158","{\"@timestamp\":\"2025-04-16T09:12:50.900967223Z\",\"hostname\":\"worker-1\",\"kubernetes\":{\"annotations\":{\"k8s.ovn.org/pod-networks\":\"{\\\"default\\\":{\\\"ip_addresses\\\":[\\\"10.131.0.143/23\\\"],\\\"mac_address\\\":\\\"0a:58:0a:83:00:8f\\\",\\\"gateway_ips\\\":[\\\"10.131.0.1\\\"],\\\"routes\\\":[{\\\"dest\\\":\\\"10.128.0.0/14\\\",\\\"nextHop\\\":\\\"10.131.0.1\\\"},{\\\"dest\\\":\\\"172.30.0.0/16\\\",\\\"nextHop\\\":\\\"10.131.0.1\\\"},{\\\"dest\\\":\\\"169.254.169.5/32\\\",\\\"nextHop\\\":\\\"10.131.0.1\\\"},{\\\"dest\\\":\\\"100.64.0.0/16\\\",\\\"nextHop\\\":\\\"10.131.0.1\\\"}],\\\"ip_address\\\":\\\"10.131.0.143/23\\\",\\\"gateway_ip\\\":\\\"10.131.0.1\\\"}}\",\"k8s.v1.cni.cncf.io/network-status\":\"[{\\n \\\"name\\\": \\\"ovn-kubernetes\\\",\\n \\\"interface\\\": \\\"eth0\\\",\\n \\\"ips\\\": [\\n \\\"10.131.0.143\\\"\\n ],\\n \\\"mac\\\": \\\"0a:58:0a:83:00:8f\\\",\\n \\\"default\\\": true,\\n \\\"dns\\\": {}\\n}]\",\"openshift.io/scc\":\"restricted-v2\",\"seccomp.security.alpha.kubernetes.io/pod\":\"runtime/default\"},\"container_id\":\"cri-o://1432e6f7f911cefc690e46c302089bf6416fc9972cab0effeb2909f2ef2ed492\",\"container_image\":\"quay.io/pravin_dsilva/centos:logtest\",\"container_image_id\":\"quay.io/pravin_dsilva/centos@sha256:38b54ceb7e1963086aa531fb5462b271939c2bb7a3868bfe67a9a0721a910912\",\"container_name\":\"centos-logtest\",\"labels\":{\"run\":\"centos-logtest\",\"test\":\"centos-logtest\"},\"namespace_id\":\"43d4ffb8-71b1-4110-96e6-100376c989e8\",\"namespace_labels\":{\"kubernetes_io_metadata_name\":\"test-logging\",\"pod-security_kubernetes_io_audit\":\"restricted\",\"pod-security_kubernetes_io_audit-version\":\"v1.24\",\"pod-security_kubernetes_io_warn\":\"restricted\",\"pod-security_kubernetes_io_warn-version\":\"v1.24\"},\"namespace_name\":\"test-logging\",\"pod_id\":\"b94ff1c1-5294-4ca4-a2ff-a1403368c9e7\",\"pod_ip\":\"10.131.0.143\",\"pod_name\":\"centos-logtest-9dvww\",\"pod_owner\":\"ReplicationController/centos-logtest\"},\"level\":\"default\",\"log_source\":\"container\",\"log_type\":\"application\",\"message\":\"{\\\"message\\\": \\\"MERGE_JSON_LOG=true\\\", \\\"level\\\": \\\"debug\\\",\\\"Layer1\\\": \\\"layer1 0\\\", \\\"layer2\\\": {\\\"name\\\":\\\"Layer2 1\\\", \\\"tips\\\":\\\"Decide by PRESERVE_JSON_LOG\\\"}, \\\"StringNumber\\\":\\\"10\\\", \\\"Number\\\": 10,\\\"foo.bar\\\":\\\"Dot Item\\\",\\\"{foobar}\\\":\\\"Brace Item\\\",\\\"[foobar]\\\":\\\"Bracket Item\\\", \\\"foo:bar\\\":\\\"Colon Item\\\",\\\"foo bar\\\":\\\"Space Item\\\" }\",\"openshift\":{\"cluster_id\":\"f3ed82e8-831f-45fe-a973-d869e9d46576\",\"labels\":{\"label\":\"6.0_415-application\"},\"sequence\":1744794771215335688}}"]]}],"stats":{"summary":{"bytesProcessedPerSecond":26873,"linesProcessedPerSecond":11,"totalBytesProcessed":821397,"totalLinesProcessed":361,"execTime":30.565375,"queueTime":0,"subqueries":0,"totalEntriesReturned":100,"splits":4,"shards":4,"totalPostFilterLines":361,"totalStructuredMetadataBytesProcessed":3610},"querier":{"store":{"totalChunksRef":10,"totalChunksDownloaded":10,"chunksDownloadTime":1440772000,"queryReferencedStructuredMetadata":false,"chunk":{"headChunkBytes":0,"headChunkLines":0,"decompressedBytes":821397,"decompressedLines":361,"compressedBytes":240363,"totalDuplicates":0,"postFilterLines":361,"headChunkStructuredMetadataBytes":0,"decompressedStructuredMetadataBytes":3610},"chunkRefsFetchTime":11672865288,"congestionControlLatency":0,"pipelineWrapperFilteredLines":0}},"ingester":{"totalReached":4,"totalChunksMatched":0,"totalBatches":4,"totalLinesSent":0,"store":{"totalChunksRef":0,"totalChunksDownloaded":0,"chunksDownloadTime":0,"queryReferencedStructuredMetadata":false,"chunk":{"headChunkBytes":0,"headChunkLines":0,"decompressedBytes":0,"decompressedLines":0,"compressedBytes":0,"totalDuplicates":0,"postFilterLines":0,"headChunkStructuredMetadataBytes":0,"decompressedStructuredMetadataBytes":0},"chunkRefsFetchTime":0,"congestionControlLatency":0,"pipelineWrapperFilteredLines":0}},"cache":{"chunk":{"entriesFound":0,"entriesRequested":10,"entriesStored":20,"bytesReceived":0,"bytesSent":241388,"requests":2,"downloadTime":24976,"queryLengthServed":0},"index":{"entriesFound":0,"entriesRequested":0,"entriesStored":0,"bytesReceived":0,"bytesSent":0,"requests":0,"downloadTime":0,"queryLengthServed":0},"result":{"entriesFound":0,"entriesRequested":0,"entriesStored":0,"bytesReceived":0,"bytesSent":0,"requests":0,"downloadTime":0,"queryLengthServed":0},"statsResult":{"entriesFound":1,"entriesRequested":2,"entriesStored":2,"bytesReceived":194,"bytesSent":0,"requests":4,"downloadTime":33204,"queryLengthServed":30000000000},"volumeResult":{"entriesFound":0,"entriesRequested":0,"entriesStored":0,"bytesReceived":0,"bytesSent":0,"requests":0,"downloadTime":0,"queryLengthServed":0},"seriesResult":{"entriesFound":0,"entriesRequested":0,"entriesStored":0,"bytesReceived":0,"bytesSent":0,"requests":0,"downloadTime":0,"queryLengthServed":0},"labelResult":{"entriesFound":0,"entriesRequested":0,"entriesStored":0,"bytesReceived":0,"bytesSent":0,"requests":0,"downloadTime":0,"queryLengthServed":0},"instantMetricResult":{"entriesFound":0,"entriesRequested":0,"entriesStored":0,"bytesReceived":0,"bytesSent":0,"requests":0,"downloadTime":0,"queryLengthServed":0}},"index":{"totalChunks":0,"postFilterChunks":0,"shardsDuration":0,"usedBloomFilters":false}}}} ``` Audit logs: ``` "{\"@timestamp\":\"2025-04-16T09:14:30.784440476Z\",\"annotations\":{\"authorization.k8s.io/decision\":\"allow\",\"authorization.k8s.io/reason\":\"RBAC: allowed by RoleBinding \\\"prometheus-k8s/openshift-controller-manager-operator\\\" of Role \\\"prometheus-k8s\\\" to ServiceAccount \\\"prometheus-k8s/openshift-monitoring\\\"\"},\"apiVersion\":\"audit.k8s.io/v1\",\"auditID\":\"978e0a37-ec3f-40ae-af60-9526d76e387f\",\"hostname\":\"master-0\",\"k8s_audit_level\":\"Metadata\",\"kind\":\"Event\",\"kubernetes\":{\"container_name\":\"\",\"namespace_name\":\"\",\"pod_name\":\"\"},\"level\":\"Metadata\",\"log_source\":\"kubeAPI\",\"log_type\":\"audit\",\"objectRef\":{\"apiVersion\":\"v1\",\"namespace\":\"openshift-controller-manager-operator\",\"resource\":\"services\"},\"openshift\":{\"cluster_id\":\"f3ed82e8-831f-45fe-a973-d869e9d46576\",\"labels\":{\"label\":\"6.0_415-audit\"},\"sequence\":1744794870785291378},\"requestReceivedTimestamp\":\"2025-04-16T09:08:58.673087Z\",\"requestURI\":\"/api/v1/namespaces/openshift-controller-manager-operator/services?allowWatchBookmarks=true\u0026resourceVersion=2253345\u0026timeout=5m32s\u0026timeoutSeconds=332\u0026watch=true\",\"responseStatus\":{\"code\":200,\"metadata\":{}},\"sourceIPs\":[\"10.20.177.136\"],\"stage\":\"ResponseComplete\",\"stageTimestamp\":\"2025-04-16T09:14:30.674793Z\",\"user\":{\"extra\":{\"authentication.kubernetes.io/pod-name\":[\"prometheus-k8s-1\"],\"authentication.kubernetes.io/pod-uid\":[\"a69f03b3-643d-4e8d-81d1-f7b74f4ea8db\"]},\"groups\":[\"system:serviceaccounts\",\"system:serviceaccounts:openshift-monitoring\",\"system:authenticated\"],\"uid\":\"811ac741-fb3f-40fa-bd94-e20bf79acc50\",\"username\":\"system:serviceaccount:openshift-monitoring:prometheus-k8s\"},\"userAgent\":\"Prometheus/2.48.0\",\"verb\":\"watch\"}"],["1744794870533842829","{\"@timestamp\":\"2025-04-16T09:14:30.533014278Z\",\"annotations\":{\"authorization.k8s.io/decision\":\"allow\",\"authorization.k8s.io/reason\":\"RBAC: allowed by ClusterRoleBinding \\\"prometheus-k8s\\\" of ClusterRole \\\"prometheus-k8s\\\" to ServiceAccount \\\"prometheus-k8s/openshift-monitoring\\\"\"},\"apiVersion\":\"audit.k8s.io/v1\",\"auditID\":\"77e58146-bf96-47e0-b3e5-0903d5334831\",\"hostname\":\"master-0\",\"kind\":\"Event\",\"kubernetes\":{\"container_name\":\"\",\"namespace_name\":\"\",\"pod_name\":\"\"},\"level\":\"Metadata\",\"log_source\":\"openshiftAPI\",\"log_type\":\"audit\",\"openshift\":{\"cluster_id\":\"f3ed82e8-831f-45fe-a973-d869e9d46576\",\"labels\":{\"label\":\"6.0_415-audit\"},\"sequence\":1744794870533362369},\"openshift_audit_level\":\"Metadata\",\"requestReceivedTimestamp\":\"2025-04-16T09:14:29.873091Z\",\"requestURI\":\"/metrics\",\"responseStatus\":{\"code\":200,\"metadata\":{}},\"sourceIPs\":[\"10.128.3.78\"],\"stage\":\"ResponseComplete\",\"stageTimestamp\":\"2025-04-16T09:14:29.926726Z\",\"user\":{\"groups\":[\"system:authenticated\"],\"username\":\"system:serviceaccount:openshift-monitoring:prometheus-k8s\"},\"userAgent\":\"Prometheus/2.48.0\",\"verb\":\"get\"}"],["1744794870533783355","{\"@timestamp\":\"2025-04-16T09:14:30.532979288Z\",\"annotations\":{\"authorization.k8s.io/decision\":\"allow\",\"authorization.k8s.io/reason\":\"RBAC: allowed by ClusterRoleBinding \\\"prometheus-k8s\\\" of ClusterRole \\\"prometheus-k8s\\\" to ServiceAccount \\\"prometheus-k8s/openshift-monitoring\\\"\"},\"apiVersion\":\"audit.k8s.io/v1\",\"auditID\":\"10f1652d-cd31-4ff9-911f-5c3e7615b47a\",\"hostname\":\"master-0\",\"kind\":\"Event\",\"kubernetes\":{\"container_name\":\"\",\"namespace_name\":\"\",\"pod_name\":\"\"},\"level\":\"Metadata\",\"log_source\":\"openshiftAPI\",\"log_type\":\"audit\",\"openshift\":{\"cluster_id\":\"f3ed82e8-831f-45fe-a973-d869e9d46576\",\"labels\":{\"label\":\"6.0_415-audit\"},\"sequence\":1744794870533313084},\"openshift_audit_level\":\"Metadata\",\"requestReceivedTimestamp\":\"2025-04-16T09:14:28.621859Z\",\"requestURI\":\"/metrics\",\"responseStatus\":{\"code\":200,\"metadata\":{}},\"sourceIPs\":[\"10.131.0.138\"],\"stage\":\"ResponseComplete\",\"stageTimestamp\":\"2025-04-16T09:14:28.699882Z\",\"user\":{\"groups\":[\"system:authenticated\"],\"username\":\"system:serviceaccount:openshift-monitoring:prometheus-k8s\"},\"userAgent\":\"Prometheus/2.48.0\",\"verb\":\"get\"}"],["1744794870527064369","{\"@timestamp\":\"2025-04-16T09:14:30.524010542Z\",\"annotations\":{\"authorization.k8s.io/decision\":\"allow\",\"authorization.k8s.io/reason\":\"RBAC: allowed by ClusterRoleBinding \\\"system:openshift:openshift-apiserver\\\" of ClusterRole \\\"cluster-admin\\\" to ServiceAccount \\\"openshift-apiserver-sa/openshift-apiserver\\\"\"},\"apiVersion\":\"audit.k8s.io/v1\",\"auditID\":\"c0697dac-72c6-43ed-89d3-60224c056f8e\",\"hostname\":\"master-0\",\"k8s_audit_level\":\"Metadata\",\"kind\":\"Event\",\"kubernetes\":{\"container_name\":\"\",\"namespace_name\":\"\",\"pod_name\":\"\"},\"level\":\"Metadata\",\"log_source\":\"kubeAPI\",\"log_type\":\"audit\",\"objectRef\":{\"apiGroup\":\"authorization.k8s.io\",\"apiVersion\":\"v1\",\"resource\":\"subjectaccessreviews\"},\"openshift\":{\"cluster_id\":\"f3ed82e8-831f-45fe-a973-d869e9d46576\",\"labels\":{\"label\":\"6.0_415-audit\"},\"sequence\":1744794870525149317},\"requestReceivedTimestamp\":\"2025-04-16T09:14:30.504129Z\",\"requestURI\":\"/apis/authorization.k8s.io/v1/subjectaccessreviews?timeout=10s\",\"responseStatus\":{\"code\":201,\"metadata\":{}},\"sourceIPs\":[\"10.20.177.61\"],\"stage\":\"ResponseComplete\",\"stageTimestamp\":\"2025-04-16T09:14:30.506277Z\",\"user\":{\"extra\":{\"authentication.kubernetes.io/pod-name\":[\"apiserver-697cd4dc74-vz4sk\"],\"authentication.kubernetes.io/pod-uid\":[\"37665c21-cd83-4d21-aa34-9134b0312654\"]},\"groups\":[\"system:serviceaccounts\",\"system:serviceaccounts:openshift-apiserver\",\"system:authenticated\"],\"uid\":\"8e9db7dc-aa11-44ee-9da1-6431f99033a4\",\"username\":\"system:serviceaccount:openshift-apiserver:openshift-apiserver-sa\"},\"userAgent\":\"openshift-apiserver/v0.0.0 (linux/ppc64le) kubernetes/$Format\",\"verb\":\"create\"}"],["1744794870527024703","{\"@timestamp\":\"2025-04-16T09:14:30.523996866Z\",\"annotations\":{\"authorization.k8s.io/decision\":\"allow\",\"authorization.k8s.io/reason\":\"RBAC: allowed by ClusterRoleBinding \\\"system:openshift:openshift-apiserver\\\" of ClusterRole \\\"cluster-admin\\\" to ServiceAccount \\\"openshift-apiserver-sa/openshift-apiserver\\\"\"},\"apiVersion\":\"audit.k8s.io/v1\",\"auditID\":\"ec2b2707-b6c5-4486-8844-5cf6b2eb5277\",\"hostname\":\"master-0\",\"k8s_audit_level\":\"Metadata\",\"kind\":\"Event\",\"kubernetes\":{\"container_name\":\"\",\"namespace_name\":\"\",\"pod_name\":\"\"},\"level\":\"Metadata\",\"log_source\":\"kubeAPI\",\"log_type\":\"audit\",\"objectRef\":{\"apiGroup\":\"authorization.k8s.io\",\"apiVersion\":\"v1\",\"resource\":\"subjectaccessreviews\"},\"openshift\":{\"cluster_id\":\"f3ed82e8-831f-45fe-a973-d869e9d46576\",\"labels\":{\"label\":\"6.0_415-audit\"},\"sequence\":1744794870525101612},\"requestReceivedTimestamp\":\"2025-04-16T09:14:30.504176Z\",\"requestURI\":\"/apis/authorization.k8s.io/v1/subjectaccessreviews?timeout=10s\",\"responseStatus\":{\"code\":201,\"metadata\":{}},\"sourceIPs\":[\"10.20.177.61\"],\"stage\":\"ResponseComplete\",\"stageTimestamp\":\"2025-04-16T09:14:30.506217Z\",\"user\":{\"extra\":{\"authentication.kubernetes.io/pod-name\":[\"apiserver-697cd4dc74-vz4sk\"],\"authentication.kubernetes.io/pod-uid\":[\"37665c21-cd83-4d21-aa34-9134b0312654\"]},\"groups\":[\"system:serviceaccounts\",\"system:serviceaccounts:openshift-apiserver\",\"system:authenticated\"],\"uid\":\"8e9db7dc-aa11-44ee-9da1-6431f99033a4\",\"username\":\"system:serviceaccount:openshift-apiserver:openshift-apiserver-sa\"},\"userAgent\":\"openshift-apiserver/v0.0.0 (linux/ppc64le) kubernetes/$Format\",\"verb\":\"create\"}"],["1744794870526986549","{\"@timestamp\":\"2025-04-16T09:14:30.523984966Z\",\"annotations\":{\"authorization.k8s.io/decision\":\"allow\",\"authorization.k8s.io/reason\":\"RBAC: allowed by ClusterRoleBinding \\\"system:openshift:openshift-apiserver\\\" of ClusterRole \\\"cluster-admin\\\" to ServiceAccount \\\"openshift-apiserver-sa/openshift-apiserver\\\"\"},\"apiVersion\":\"audit.k8s.io/v1\",\"auditID\":\"2c70c936-a968-4031-9b6a-67c811df63c5\",\"hostname\":\"master-0\",\"k8s_audit_level\":\"Metadata\",\"kind\":\"Event\",\"kubernetes\":{\"container_name\":\"\",\"namespace_name\":\"\",\"pod_name\":\"\"},\"level\":\"Metadata\",\"log_source\":\"kubeAPI\",\"log_type\":\"audit\",\"objectRef\":{\"apiGroup\":\"authorization.k8s.io\",\"apiVersion\":\"v1\",\"resource\":\"subjectaccessreviews\"},\"openshift\":{\"cluster_id\":\"f3ed82e8-831f-45fe-a973-d869e9d46576\",\"labels\":{\"label\":\"6.0_415-audit\"},\"sequence\":1744794870525062034},\"requestReceivedTimestamp\":\"2025-04-16T09:14:30.475002Z\",\"requestURI\":\"/apis/authorization.k8s.io/v1/subjectaccessreviews?timeout=10s\",\"responseStatus\":{\"code\":201,\"metadata\":{}},\"sourceIPs\":[\"10.20.177.61\"],\"stage\":\"ResponseComplete\",\"stageTimestamp\":\"2025-04-16T09:14:30.476993Z\",\"user\":{\"extra\":{\"authentication.kubernetes.io/pod-name\":[\"apiserver-697cd4dc74-vz4sk\"],\"authentication.kubernetes.io/pod-uid\":[\"37665c21-cd83-4d21-aa34-9134b0312654\"]},\"groups\":[\"system:serviceaccounts\",\"system:serviceaccounts:openshift-apiserver\",\"system:authenticated\"],\"uid\":\"8e9db7dc-aa11-44ee-9da1-6431f99033a4\",\"username\":\"system:serviceaccount:openshift-apiserver:openshift-apiserver-sa\"},\"userAgent\":\"openshift-apiserver/v0.0.0 (linux/ppc64le) kubernetes/$Format\",\"verb\":\"create\"}"],["1744794870526950377","{\"@timestamp\":\"2025-04-16T09:14:30.523976247Z\",\"annotations\":{\"authorization.k8s.io/decision\":\"allow\",\"authorization.k8s.io/reason\":\"RBAC: allowed by ClusterRoleBinding \\\"system:openshift:openshift-apiserver\\\" of ClusterRole \\\"cluster-admin\\\" to ServiceAccount \\\"openshift-apiserver-sa/openshift-apiserver\\\"\"},\"apiVersion\":\"audit.k8s.io/v1\",\"auditID\":\"fa3f385a-1a57-4ec8-9849-0536067cf297\",\"hostname\":\"master-0\",\"k8s_audit_level\":\"Metadata\",\"kind\":\"Event\",\"kubernetes\":{\"container_name\":\"\",\"namespace_name\":\"\",\"pod_name\":\"\"},\"level\":\"Metadata\",\"log_source\":\"kubeAPI\",\"log_type\":\"audit\",\"objectRef\":{\"apiGroup\":\"authorization.k8s.io\",\"apiVersion\":\"v1\",\"resource\":\"subjectaccessreviews\"},\"openshift\":{\"cluster_id\":\"f3ed82e8-831f-45fe-a973-d869e9d46576\",\"labels\":{\"label\":\"6.0_415-audit\"},\"sequence\":1744794870525024872},\"requestReceivedTimestamp\":\"2025-04-16T09:14:30.474839Z\",\"requestURI\":\"/apis/authorization.k8s.io/v1/subjectaccessreviews?timeout=10s\",\"responseStatus\":{\"code\":201,\"metadata\":{}},\"sourceIPs\":[\"10.20.177.61\"],\"stage\":\"ResponseComplete\",\"stageTimestamp\":\"2025-04-16T09:14:30.476918Z\",\"user\":{\"extra\":{\"authentication.kubernetes.io/pod-name\":[\"apiserver-697cd4dc74-vz4sk\"],\"authentication.kubernetes.io/pod-uid\":[\"37665c21-cd83-4d21-aa34-9134b0312654\"]},\"groups\":[\"system:serviceaccounts\",\"system:serviceaccounts:openshift-apiserver\",\"system:authenticated\"],\"uid\":\"8e9db7dc-aa11-44ee-9da1-6431f99033a4\",\"username\":\"system:serviceaccount:openshift-apiserver:openshift-apiserver-sa\"},\"userAgent\":\"openshift-apiserver/v0.0.0 (linux/ppc64le) kubernetes/$Format\",\"verb\":\"create\"}"],["1744794870526917116","{\"@timestamp\":\"2025-04-16T09:14:30.523967167Z\",\"annotations\":{\"authorization.k8s.io/decision\":\"allow\",\"authorization.k8s.io/reason\":\"RBAC: allowed by ClusterRoleBinding \\\"machine-config-daemon\\\" of ClusterRole \\\"machine-config-daemon\\\" to ServiceAccount \\\"machine-config-daemon/openshift-machine-config-operator\\\"\"},\"apiVersion\":\"audit.k8s.io/v1\",\"auditID\":\"b3d92f35-ea61-4107-926b-9be984c58fe7\",\"hostname\":\"master-0\",\"k8s_audit_level\":\"Metadata\",\"kind\":\"Event\",\"kubernetes\":{\"container_name\":\"\",\"namespace_name\":\"\",\"pod_name\":\"\"},\"level\":\"Metadata\",\"log_source\":\"kubeAPI\",\"log_type\":\"audit\",\"objectRef\":{\"apiGroup\":\"authentication.k8s.io\",\"apiVersion\":\"v1\",\"resource\":\"tokenreviews\"},\"openshift\":{\"cluster_id\":\"f3ed82e8-831f-45fe-a973-d869e9d46576\",\"labels\":{\"label\":\"6.0_415-audit\"},\"sequence\":1744794870524986112},\"requestReceivedTimestamp\":\"2025-04-16T09:14:30.463271Z\",\"requestURI\":\"/apis/authentication.k8s.io/v1/tokenreviews\",\"responseStatus\":{\"code\":201,\"metadata\":{}},\"sourceIPs\":[\"10.20.177.61\"],\"stage\":\"ResponseComplete\",\"stageTimestamp\":\"2025-04-16T09:14:30.469026Z\",\"user\":{\"extra\":{\"authentication.kubernetes.io/pod-name\":[\"machine-config-daemon-kpvf7\"],\"authentication.kubernetes.io/pod-uid\":[\"509434d9-53cd-4b9e-ae96-85da998e7a55\"]},\"groups\":[\"system:serviceaccounts\",\"system:serviceaccounts:openshift-machine-config-operator\",\"system:authenticated\"],\"uid\":\"6b1ff8c9-3595-4ea6-b0d0-d8d9ec3067ca\",\"username\":\"system:serviceaccount:openshift-machine-config-operator:machine-config-daemon\"},\"userAgent\":\"kube-rbac-proxy/v0.0.0 (linux/ppc64le) kubernetes/$Format\",\"verb\":\"create\"}"],["1744794870526884192","{\"@timestamp\":\"2025-04-16T09:14:30.523956552Z\",\"annotations\":{\"authorization.k8s.io/decision\":\"allow\",\"authorization.k8s.io/reason\":\"RBAC: allowed by ClusterRoleBinding \\\"system:openshift:openshift-apiserver\\\" of ClusterRole \\\"cluster-admin\\\" to ServiceAccount \\\"openshift-apiserver-sa/openshift-apiserver\\\"\"},\"apiVersion\":\"audit.k8s.io/v1\",\"auditID\":\"cbb09051-3273-4b41-a6b2-74237ec19b6d\",\"hostname\":\"master-0\",\"k8s_audit_level\":\"Metadata\",\"kind\":\"Event\",\"kubernetes\":{\"container_name\":\"\",\"namespace_name\":\"\",\"pod_name\":\"\"},\"level\":\"Metadata\",\"log_source\":\"kubeAPI\",\"log_type\":\"audit\",\"objectRef\":{\"apiGroup\":\"authorization.k8s.io\",\"apiVersion\":\"v1\",\"resource\":\"subjectaccessreviews\"},\"openshift\":{\"cluster_id\":\"f3ed82e8-831f-45fe-a973-d869e9d46576\",\"labels\":{\"label\":\"6.0_415-audit\"},\"sequence\":1744794870524950614},\"requestReceivedTimestamp\":\"2025-04-16T09:14:30.464528Z\",\"requestURI\":\"/apis/authorization.k8s.io/v1/subjectaccessreviews?timeout=10s\",\"responseStatus\":{\"code\":201,\"metadata\":{}},\"sourceIPs\":[\"10.20.177.61\"],\"stage\":\"ResponseComplete\",\"stageTimestamp\":\"2025-04-16T09:14:30.466411Z\",\"user\":{\"extra\":{\"authentication.kubernetes.io/pod-name\":[\"apiserver-697cd4dc74-vz4sk\"],\"authentication.kubernetes.io/pod-uid\":[\"37665c21-cd83-4d21-aa34-9134b0312654\"]},\"groups\":[\"system:serviceaccounts\",\"system:serviceaccounts:openshift-apiserver\",\"system:authenticated\"],\"uid\":\"8e9db7dc-aa11-44ee-9da1-6431f99033a4\",\"username\":\"system:serviceaccount:openshift-apiserver:openshift-apiserver-sa\"},\"userAgent\":\"openshift-apiserver/v0.0.0 (linux/ppc64le) kubernetes/$Format\",\"verb\":\"create\"}"],["1744794870526852864","{\"@timestamp\":\"2025-04-16T09:14:30.523946429Z\",\"annotations\":{\"authorization.k8s.io/decision\":\"allow\",\"authorization.k8s.io/reason\":\"RBAC: allowed by ClusterRoleBinding \\\"system:openshift:openshift-apiserver\\\" of ClusterRole \\\"cluster-admin\\\" to ServiceAccount \\\"openshift-apiserver-sa/openshift-apiserver\\\"\"},\"apiVersion\":\"audit.k8s.io/v1\",\"auditID\":\"11e73d5a-8285-4a33-8644-ede44e7e7dc6\",\"hostname\":\"master-0\",\"k8s_audit_level\":\"Metadata\",\"kind\":\"Event\",\"kubernetes\":{\"container_name\":\"\",\"namespace_name\":\"\",\"pod_name\":\"\"},\"level\":\"Metadata\",\"log_source\":\"kubeAPI\",\"log_type\":\"audit\",\"objectRef\":{\"apiGroup\":\"authorization.k8s.io\",\"apiVersion\":\"v1\",\"resource\":\"subjectaccessreviews\"},\"openshift\":{\"cluster_id\":\"f3ed82e8-831f-45fe-a973-d869e9d46576\",\"labels\":{\"label\":\"6.0_415-audit\"},\"sequence\":1744794870524914210},\"requestReceivedTimestamp\":\"2025-04-16T09:14:30.464677Z\",\"requestURI\":\"/apis/authorization.k8s.io/v1/subjectaccessreviews?timeout=10s\",\"responseStatus\":{\"code\":201,\"metadata\":{}},\"sourceIPs\":[\"10.20.177.61\"],\"stage\":\"ResponseComplete\",\"stageTimestamp\":\"2025-04-16T09:14:30.466319Z\",\"user\":{\"extra\":{\"authentication.kubernetes.io/pod-name\":[\"apiserver-697cd4dc74-vz4sk\"],\"authentication.kubernetes.io/pod-uid\":[\"37665c21-cd83-4d21-aa34-9134b0312654\"]},\"groups\":[\"system:serviceaccounts\",\"system:serviceaccounts:openshift-apiserver\",\"system:authenticated\"],\"uid\":\"8e9db7dc-aa11-44ee-9da1-6431f99033a4\",\"username\":\"system:serviceaccount:openshift-apiserver:openshift-apiserver-sa\"},\"userAgent\":\"openshift-apiserver/v0.0.0 (linux/ppc64le) kubernetes/$Format\",\"verb\":\"create\"}"],["1744794870526812860","{\"@timestamp\":\"2025-04-16T09:14:30.523937554Z\",\"annotations\":{\"authorization.k8s.io/decision\":\"allow\",\"authorization.k8s.io/reason\":\"RBAC: allowed by ClusterRoleBinding \\\"system:openshift:openshift-apiserver\\\" of ClusterRole \\\"cluster-admin\\\" to ServiceAccount \\\"openshift-apiserver-sa/openshift-apiserver\\\"\"},\"apiVersion\":\"audit.k8s.io/v1\",\"auditID\":\"c326fe79-31e2-4236-b0d0-eb3c341a8ed6\",\"hostname\":\"master-0\",\"k8s_audit_level\":\"Metadata\",\"kind\":\"Event\",\"kubernetes\":{\"container_name\":\"\",\"namespace_name\":\"\",\"pod_name\":\"\"},\"level\":\"Metadata\",\"log_source\":\"kubeAPI\",\"log_type\":\"audit\",\"objectRef\":{\"apiGroup\":\"authorization.k8s.io\",\"apiVersion\":\"v1\",\"resource\":\"subjectaccessreviews\"},\"openshift\":{\"cluster_id\":\"f3ed82e8-831f-45fe-a973-d869e9d46576\",\"labels\":{\"label\":\"6.0_415-audit\"},\"sequence\":1744794870524877335},\"requestReceivedTimestamp\":\"2025-04-16T09:14:30.446049Z\",\"requestURI\":\"/apis/authorization.k8s.io/v1/subjectaccessreviews?timeout=10s\",\"responseStatus\":{\"code\":201,\"metadata\":{}},\"sourceIPs\":[\"10.20.177.61\"],\"stage\":\"ResponseComplete\",\"stageTimestamp\":\"2025-04-16T09:14:30.447928Z\",\"user\":{\"extra\":{\"authentication.kubernetes.io/pod-name\":[\"apiserver-697cd4dc74-vz4sk\"],\"authentication.kubernetes.io/pod-uid\":[\"37665c21-cd83-4d21-aa34-9134b0312654\"]},\"groups\":[\"system:serviceaccounts\",\"system:serviceaccounts:openshift-apiserver\",\"system:authenticated\"],\"uid\":\"8e9db7dc-aa11-44ee-9da1-6431f99033a4\",\"username\":\"system:serviceaccount:openshift-apiserver:openshift-apiserver-sa\"},\"userAgent\":\"openshift-apiserver/v0.0.0 (linux/ppc64le) kubernetes/$Format\",\"verb\":\"create\"}"],["1744794870526780979","{\"@timestamp\":\"2025-04-16T09:14:30.523928831Z\",\"annotations\":{\"authorization.k8s.io/decision\":\"allow\",\"authorization.k8s.io/reason\":\"RBAC: allowed by ClusterRoleBinding \\\"system:openshift:openshift-apiserver\\\" of ClusterRole \\\"cluster-admin\\\" to ServiceAccount \\\"openshift-apiserver-sa/openshift-apiserver\\\"\"},\"apiVersion\":\"audit.k8s.io/v1\",\"auditID\":\"2c02bdc3-c617-41f2-9f70-d50ce57f0794\",\"hostname\":\"master-0\",\"k8s_audit_level\":\"Metadata\",\"kind\":\"Event\",\"kubernetes\":{\"container_name\":\"\",\"namespace_name\":\"\",\"pod_name\":\"\"},\"level\":\"Metadata\",\"log_source\":\"kubeAPI\",\"log_type\":\"audit\",\"objectRef\":{\"apiGroup\":\"authorization.k8s.io\",\"apiVersion\":\"v1\",\"resource\":\"subjectaccessreviews\"},\"openshift\":{\"cluster_id\":\"f3ed82e8-831f-45fe-a973-d869e9d46576\",\"labels\":{\"label\":\"6.0_415-audit\"},\"sequence\":1744794870524837194},\"requestReceivedTimestamp\":\"2025-04-16T09:14:30.446006Z\",\"requestURI\":\"/apis/authorization.k8s.io/v1/subjectaccessreviews?timeout=10s\",\"responseStatus\":{\"code\":201,\"metadata\":{}},\"sourceIPs\":[\"10.20.177.61\"],\"stage\":\"ResponseComplete\",\"stageTimestamp\":\"2025-04-16T09:14:30.447857Z\",\"user\":{\"extra\":{\"authentication.kubernetes.io/pod-name\":[\"apiserver-697cd4dc74-vz4sk\"],\"authentication.kubernetes.io/pod-uid\":[\"37665c21-cd83-4d21-aa34-9134b0312654\"]},\"groups\":[\"system:serviceaccounts\",\"system:serviceaccounts:openshift-apiserver\",\"system:authenticated\"],\"uid\":\"8e9db7dc-aa11-44ee-9da1-6431f99033a4\",\"username\":\"system:serviceaccount:openshift-apiserver:openshift-apiserver-sa\"},\"userAgent\":\"openshift-apiserver/v0.0.0 (linux/ppc64le) kubernetes/$Format\",\"verb\":\"create\"}"],["1744794870526748717","{\"@timestamp\":\"2025-04-16T09:14:30.523919300Z\",\"annotations\":{\"authorization.k8s.io/decision\":\"allow\",\"authorization.k8s.io/reason\":\"RBAC: allowed by ClusterRoleBinding \\\"system:openshift:operator:openshift-apiserver-operator\\\" of ClusterRole \\\"cluster-admin\\\" to ServiceAccount \\\"openshift-apiserver-operator/openshift-apiserver-operator\\\"\"},\"apiVersion\":\"audit.k8s.io/v1\",\"auditID\":\"e66ced6f-31f2-4b4b-884a-0cc2d0eff28f\",\"hostname\":\"master-0\",\"k8s_audit_level\":\"Metadata\",\"kind\":\"Event\",\"kubernetes\":{\"container_name\":\"\",\"namespace_name\":\"\",\"pod_name\":\"\"},\"level\":\"Metadata\",\"log_source\":\"kubeAPI\",\"log_type\":\"audit\",\"objectRef\":{\"apiGroup\":\"apiregistration.k8s.io\",\"apiVersion\":\"v1\",\"name\":\"v1.template.openshift.io\",\"resource\":\"apiservices\"},\"openshift\":{\"cluster_id\":\"f3ed82e8-831f-45fe-a973-d869e9d46576\",\"labels\":{\"label\":\"6.0_415-audit\"},\"sequence\":1744794870524788872},\"requestReceivedTimestamp\":\"2025-04-16T09:14:30.439818Z\",\"requestURI\":\"/apis/apiregistration.k8s.io/v1/apiservices/v1.template.openshift.io\",\"responseStatus\":{\"code\":200,\"metadata\":{}},\"sourceIPs\":[\"10.20.177.61\"],\"stage\":\"ResponseComplete\",\"stageTimestamp\":\"2025-04-16T09:14:30.441521Z\",\"user\":{\"extra\":{\"authentication.kubernetes.io/pod-name\":[\"openshift-apiserver-operator-745f4cccbd-8gwdv\"],\"authentication.kubernetes.io/pod-uid\":[\"52adbc3f-5c05-4d02-b448-a86e8b0064a2\"]},\"groups\":[\"system:serviceaccounts\",\"system:serviceaccounts:openshift-apiserver-operator\",\"system:authenticated\"],\"uid\":\"e3ca86dd-d85d-4e5b-8944-07b51d4d5c14\",\"username\":\"system:serviceaccount:openshift-apiserver-operator:openshift-apiserver-operator\"},\"userAgent\":\"cluster-openshift-apiserver-operator/v0.0.0 (linux/ppc64le) kubernetes/$Format\",\"verb\":\"get\"}"],["1744794870526703956","{\"@timestamp\":\"2025-04-16T09:14:30.523910472Z\",\"annotations\":{\"authorization.k8s.io/decision\":\"allow\",\"authorization.k8s.io/reason\":\"RBAC: allowed by ClusterRoleBinding \\\"system:openshift:operator:openshift-apiserver-operator\\\" of ClusterRole \\\"cluster-admin\\\" to ServiceAccount \\\"openshift-apiserver-operator/openshift-apiserver-operator\\\"\"},\"apiVersion\":\"audit.k8s.io/v1\",\"auditID\":\"c76529a8-12b7-4c55-bbb7-3b2a8f165ccc\",\"hostname\":\"master-0\",\"k8s_audit_level\":\"Metadata\",\"kind\":\"Event\",\"kubernetes\":{\"container_name\":\"\",\"namespace_name\":\"\",\"pod_name\":\"\"},\"level\":\"Metadata\",\"log_source\":\"kubeAPI\",\"log_type\":\"audit\",\"objectRef\":{\"apiGroup\":\"apiregistration.k8s.io\",\"apiVersion\":\"v1\",\"name\":\"v1.security.openshift.io\",\"resource\":\"apiservices\"},\"openshift\":{\"cluster_id\":\"f3ed82e8-831f-45fe-a973-d869e9d46576\",\"labels\":{\"label\":\"6.0_415-audit\"},\"sequence\":1744794870524750540},\"requestReceivedTimestamp\":\"2025-04-16T09:14:30.436167Z\",\"requestURI\":\"/apis/apiregistration.k8s.io/v1/apiservices/v1.security.openshift.io\",\"responseStatus\":{\"code\":200,\"metadata\":{}},\"sourceIPs\":[\"10.20.177.61\"],\"stage\":\"ResponseComplete\",\"stageTimestamp\":\"2025-04-16T09:14:30.438906Z\",\"user\":{\"extra\":{\"authentication.kubernetes.io/pod-name\":[\"openshift-apiserver-operator-745f4cccbd-8gwdv\"],\"authentication.kubernetes.io/pod-uid\":[\"52adbc3f-5c05-4d02-b448-a86e8b0064a2\"]},\"groups\":[\"system:serviceaccounts\",\"system:serviceaccounts:openshift-apiserver-operator\",\"system:authenticated\"],\"uid\":\"e3ca86dd-d85d-4e5b-8944-07b51d4d5c14\",\"username\":\"system:serviceaccount:openshift-apiserver-operator:openshift-apiserver-operator\"},\"userAgent\":\"cluster-openshift-apiserver-operator/v0.0.0 (linux/ppc64le) kubernetes/$Format\",\"verb\":\"get\"}"]]}],"stats":{"summary":{"bytesProcessedPerSecond":74293,"linesProcessedPerSecond":56,"totalBytesProcessed":2067460,"totalLinesProcessed":1565,"execTime":27.828421,"queueTime":0,"subqueries":0,"totalEntriesReturned":100,"splits":4,"shards":4,"totalPostFilterLines":1565,"totalStructuredMetadataBytesProcessed":15650},"querier":{"store":{"totalChunksRef":12,"totalChunksDownloaded":12,"chunksDownloadTime":2235133693,"queryReferencedStructuredMetadata":false,"chunk":{"headChunkBytes":0,"headChunkLines":0,"decompressedBytes":2067460,"decompressedLines":1565,"compressedBytes":6436357,"totalDuplicates":0,"postFilterLines":1565,"headChunkStructuredMetadataBytes":0,"decompressedStructuredMetadataBytes":15650},"chunkRefsFetchTime":11305071295,"congestionControlLatency":0,"pipelineWrapperFilteredLines":0}},"ingester":{"totalReached":4,"totalChunksMatched":0,"totalBatches":4,"totalLinesSent":0,"store":{"totalChunksRef":0,"totalChunksDownloaded":0,"chunksDownloadTime":0,"queryReferencedStructuredMetadata":false,"chunk":{"headChunkBytes":0,"headChunkLines":0,"decompressedBytes":0,"decompressedLines":0,"compressedBytes":0,"totalDuplicates":0,"postFilterLines":0,"headChunkStructuredMetadataBytes":0,"decompressedStructuredMetadataBytes":0},"chunkRefsFetchTime":0,"congestionControlLatency":0,"pipelineWrapperFilteredLines":0}},"cache":{"chunk":{"entriesFound":0,"entriesRequested":12,"entriesStored":24,"bytesReceived":0,"bytesSent":6442182,"requests":2,"downloadTime":18555,"queryLengthServed":0},"index":{"entriesFound":0,"entriesRequested":0,"entriesStored":0,"bytesReceived":0,"bytesSent":0,"requests":0,"downloadTime":0,"queryLengthServed":0},"result":{"entriesFound":0,"entriesRequested":0,"entriesStored":0,"bytesReceived":0,"bytesSent":0,"requests":0,"downloadTime":0,"queryLengthServed":0},"statsResult":{"entriesFound":1,"entriesRequested":2,"entriesStored":2,"bytesReceived":182,"bytesSent":0,"requests":4,"downloadTime":33655,"queryLengthServed":30000000000},"volumeResult":{"entriesFound":0,"entriesRequested":0,"entriesStored":0,"bytesReceived":0,"bytesSent":0,"requests":0,"downloadTime":0,"queryLengthServed":0},"seriesResult":{"entriesFound":0,"entriesRequested":0,"entriesStored":0,"bytesReceived":0,"bytesSent":0,"requests":0,"downloadTime":0,"queryLengthServed":0},"labelResult":{"entriesFound":0,"entriesRequested":0,"entriesStored":0,"bytesReceived":0,"bytesSent":0,"requests":0,"downloadTime":0,"queryLengthServed":0},"instantMetricResult":{"entriesFound":0,"entriesRequested":0,"entriesStored":0,"bytesReceived":0,"bytesSent":0,"requests":0,"downloadTime":0,"queryLengthServed":0}},"index":{"totalChunks":0,"postFilterChunks":0,"shardsDuration":0,"usedBloomFilters":false}}}} ```