Connect to Activity to start exploring audit logs and activities
Here are some common scenarios to get you started:
Human-readable activity stream
Filter by human vs system changesWho's accessing your secrets?
objectRef.resource == "secrets" && verb in ["get", "list"]Track deletions in production
verb == "delete" && objectRef.namespace == "production"Find failed pod operations
objectRef.resource == "pods" && responseStatus.code >= 400