Container monitoring manages, stores, analyzes, and displays the events that are generated by Alibaba Cloud services, such as Kubernetes cluster events, in a centralized manner. If your application uses an Alibaba Cloud service, container monitoring automatically analyzes and displays the events of this service. This allows you to view and analyze the events with ease.

Event model

The following table describes the parameters that define an associated event.

Parameter Required Description
source Yes The source of the event.
type Yes The type of the event.
level Yes The level of the event.
time Yes The time when the event occurred.
data Yes The content of the event, which is generally in the JSON format.
PID No The ID of the pod.
IP No The IP address.
ClusterId No The ID of the cluster.
PodName No The name of the pod.

Go to the Associated events page

  1. Log on to the ARMS console.
  2. In the left-side navigation pane, click Container Monitoring.
  3. In the top navigation bar of the MNS console, select the region where your cluster is deployed.
  4. On the Container Monitoring page, click the name of the Kubernetes cluster whose associated events you want to view.
  5. In the left-side navigation pane, click Associated events.

Modules of the Associated events page

The Associated events page appears in non-application mode or application mode, based on whether an application is monitored by application monitoring. The page in non-application mode displays all events of the account, whereas the page in application mode displays only the events that are related to a specific application.

The Associated events page includes the Event Center section and four tabs: Normal View, Topology View, Cluster view, and Subscription rules.
  • Event Center: displays the number of times that each type of typical event preset by the system occurred. For more information, see Event Center.
  • Normal View: displays the simple analysis of all events that are associated with the current account in multiple dimensions. For more information, see Normal View.
  • Topology View: displays the events that are associated with the specified application and the resource topology of the application. For more information, see Topology View.
  • Cluster view: displays the simple analysis of all events that are associated with the current cluster in multiple dimensions. For more information, see Cluster view.
  • Subscription rules: displays the subscription rules that you create in a list. For more information, see Subscription rules.

Event Center

The Event Center section displays the number of times that each type of typical event preset by the system occurred within the specified time range. You can adjust the time range in the upper-right corner. Click Subscribe below an event to edit subscription rules of the event. For more information about subscription rules, see Subscription rules.

Normal View

On the Normal View tab, you can specify filter conditions to search for events. The search results are displayed in four sections, including Last two weeks event re li tu, Proportion of events from different sources, Trend of the number of events from different sources, and Event Details.

Normal View
  • Last two weeks event re li tu: displays the heat map for hourly occurrences of events that meet the filter conditions in the last two weeks. A darker color indicates more events in the hour.
  • Proportion of events from different sources: displays the proportions of events from different sources.
  • Trend of the number of events from different sources: displays the trends of events from different sources within the specified time range.
  • Event Details: displays the details of all current events.

Perform the following operations to view information on the Normal View tab:

  • In the Last two weeks event re li tu section, click each heat block to view event details in the hour.
  • In the Trend of the number of events from different sources section, click each column to view all the events that occurred in the specified time range in the Event Details section.
  • In the Event Details section, click View in the Operation column of an event to view the details of the event.
  • In the Event Details section, click Subscription in the Operation column of an event to subscribe to the event. For more information, see Subscription rules.

Topology View

On the Topology View tab, the resource topology of the specified application is displayed. The resources include the Elastic Compute Service (ECS) instances used by the application, pods deployed for the application, the ApsaraDB RDS and ApsaraDB for Redis middleware resources used by the application, and the Server Load Balancer (SLB) and NAT Gateway resources attached to the application. After the resource topology is displayed, the obtained associated events, ActionTrail events, and CloudMonitor events are associated with topology nodes. If you click a node, the events associated with the node are displayed in the Event Details section in the upper-left corner.
  • Application-side events: the events that are recorded by the Associated events module.
  • Events related to cloud resources: the events that CloudMonitor records.
  • Audit related operations: the audit records from ActionTrail.

The topology view can help you troubleshoot the associated resources when an application error occurs. For example, in a large enterprise, an employee mistakenly restarts an ApsaraDB RDS instance in the production environment, which leads to an online service failure. The topology view helps you find out the restart operation on the ApsaraDB RDS instance that is accessed by the application.

Topology View

Cluster view

On the Cluster view tab, you can specify filter conditions to search for events. The search results are displayed in five sections, including Proportion of events in different clusters, Trend of the number of events in different clusters, Overview of Key Events, Overview of Key Resources, and Event Details.

Container Monitoring - Associated events - Cluster view
  • Proportion of events in different clusters: displays the proportions of events in different clusters.
  • Trend of the number of events in different clusters: displays the trends of events in different clusters within the specified time range.
  • Overview of Key Events: displays the number of times that each type of typical event preset by the system occurred within the specified time range in the specified cluster.
  • Overview of Key Resources: displays the details of key resources in the specified cluster.
  • Event Details: displays the details of all events in the specified cluster.

Perform the following operations to view information on the Cluster view tab:

  • In the Trend of the number of events in different clusters section, click each column to view all the events that occurred in the specified time range in the Event Details section.
  • Click View Cluster Events to view the details of all events in the specified cluster on the Normal View tab.
  • In the Overview of Key Events, click the name of an event to view the details of the event on the Normal View tab.
  • In the Overview of Key Resources section, click View lifecycle related events to view the events of resources in the specified time range in the Event Details section.
  • In the Event Details section, click View in the Operation column of an event to view the details of the event.
  • In the Event Details section, click Subscription in the Operation column of an event to subscribe to the event. For more information, see Subscription rules.

Subscription rules

On the Subscription rules tab, all your existing subscription rules are displayed. You can enable, disable, or modify subscription rules on this tab.
Notice You can modify only the rules that you created in the console. You cannot modify rules that are automatically created by the system.
A subscription rule is used as a basis when you subscribe to events that meet specified criteria and send the events to a specified webhook. You can use one of the following methods to create a subscription rule:
  • Method 1: On the Subscription rules tab, click Create a subscription rule in the upper-right corner.
  • Method 2: On the Normal View or Cluster view tab, click Subscription in the Operation column of an event in the Event Details section.

Create a subscription rule

  1. Click the Subscription rules tab. On this tab, click Create a subscription rule in the upper-right corner.
  2. In the Create a subscription rule panel, set the Rule name and Rule description parameters, and then click Next in the Enter basic information step.
  3. In the Select event mode step, configure the event parameters and click Next.
    Parameter Description
    Event Source Select an event source from the drop-down list.
    Event Type Select an event type from the drop-down list.
    Event Level Select an event level from the drop-down list.
    Event Keywords Enter event keywords in the field.
    Show advanced filtering options By default, this switch is turned off. After you turn on the switch, you can configure filtering options, including Associated Application ID, Host IP, Cluster ID, and POD name.
    Custom filter conditions A custom filter condition is used to specify the condition that must be met by a field in the JSON data of the specified event. The root node in the JSON data of an event is data. A specific field is expressed by using the dot (.) notation starting from the root node.. Enter custom filter conditions. You can enter up to six filter conditions.
    Select a valid field Enter a valid field in the form of %data.x.y;. Then, enter an alias for the field. The alias can be used as a placeholder when you enter the POST request body of webhook information. You can configure up to six valid fields.
    Notification Template

    In the Notification Template field, enter the content that is sent to you when the specified event occurs. If the notification object is the webhook of a DingTalk chatbot, include the keyword used to create the DingTalk chatbot in the notification template.

  4. From the Select Contact drop-down list, select a contact. Then, click Submitted.
    If no contact is available in the Select Contact drop-down list, click Create Contact on the right side to create a contact. After you create a contact, select the contact from the Select Contact drop-down list.

Subscribe to events on the Normal View or Cluster view tab

  1. In the Event Details section of the Normal View or Cluster view tab, click Subscription in the Operation column of an event.
    If you create a subscription rule by using this method, the source, type, and level filter conditions are automatically selected based on the selected event.
  2. In the Create a subscription rule panel, set the Rule name and Rule description parameters, and then click Next in the Enter basic information step.
  3. In the Select event mode step, enter a value in the Value field in the JSON file of the event. This way, you can specify custom filter conditions and valid fields. A filter condition and a valid field are automatically generated each time you click a field. You can manually modify or delete the fields to adjust the subscription rule. After you configure the event mode, click Next.
  4. From the Select Contact drop-down list, select a contact. Then, click Submitted.
    If no contact is available in the Select Contact drop-down list, click Create Contact on the right side to create a contact. After you create a contact, select the contact from the Select Contact drop-down list.

Contact us

If you have questions about container monitoring, you can join the official DingTalk group for container monitoring (group ID: 31588365) to seek help.