From f1914284ef20fc5326272e3227f9e43de5eeec83 Mon Sep 17 00:00:00 2001 From: Ryan Ohnemus Date: Fri, 19 Jan 2024 09:35:34 -0600 Subject: [PATCH] in_kubernetes_events: update to match consolidated timestamp fetching logic (#1277) Signed-off-by: ryanohnemus --- pipeline/inputs/kubernetes-events.md | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/pipeline/inputs/kubernetes-events.md b/pipeline/inputs/kubernetes-events.md index b99537fe1..164c4eb60 100644 --- a/pipeline/inputs/kubernetes-events.md +++ b/pipeline/inputs/kubernetes-events.md @@ -24,7 +24,6 @@ Kubernetes exports it events through the API server. This input plugin allows to | kube_request_limit | kubernetes limit parameter for events query, no limit applied when set to 0. | 0 | | kube_retention_time | Kubernetes retention time for events. | 1h | | kube_namespace | Kubernetes namespace to query events from. Gets events from all namespaces by default | | -| timestamp_key | Record accessor for the timestamp from the event. | $lastTimestamp | | tls.debug | Debug level between 0 (nothing) and 4 (every detail). | 0 | | tls.verify | Enable or disable verification of TLS peer certificate. | On | | tls.vhost | Set optional TLS virtual host. | | @@ -49,3 +48,6 @@ kube_url https://kubernetes.default.svc name stdout match * ``` + +### Event Timestamp +Event timestamp will be created from the first existing field in the following order of precendence: lastTimestamp, firstTimestamp, metadata.creationTimestamp