WARNING: Version 6.1 of Auditbeat has passed its EOL date.
This documentation is no longer being maintained and may be removed. If you are running this version, we strongly advise you to upgrade. For the latest information, see the current release documentation.
Kubernetes fields
editKubernetes fields
editThis functionality is in beta and is subject to change. The design and code is less mature than official GA features and is being provided as-is with no warranties. Beta features are not subject to the support SLA of official GA features.
Kubernetes metadata added by the kubernetes processor
kubernetes.pod.name
edittype: keyword
Kubernetes pod name
kubernetes.namespace
edittype: keyword
Kubernetes namespace
kubernetes.labels
edittype: object
Kubernetes labels map
kubernetes.annotations
edittype: object
Kubernetes annotations map
kubernetes.container.name
edittype: keyword
Kubernetes container name
kubernetes.container.image
edittype: keyword
Kubernetes container image