1. Documentation
    2. history bug_report picture_as_pdf
×

Using the administration events page

The Red Hat Advanced Cluster Security for Kubernetes (RHACS) administration events page provides a single interface to view administration event information that helps you understand and interpret important event details. This includes error descriptions, resource types, timestamps, and event categorizations. This information helps you efficiently manage and troubleshoot events in your RHACS environment.

Viewing the administration events page

By viewing the administration events page, you can access various event logs in different domains.

Procedure

  • In the RHACS platform, go to Platform Configuration → Administration Events.

Understanding the administration events page

The administration events page organizes information in the following groups:

  • Domain: Categorizes events based on the specific area or domain within RHACS in which they occurred. This classification helps organize and understand the context of events. Domains include Authentication, General, Image Scanning , and Integrations.

  • Resource type: Classifies events based on the resource or component type involved. Resource types include API Token, Cluster, Image, Node, and Notifier.

  • Level: Indicates the severity or importance of an event. Levels include Error, Warning, Success, Info and Unknown.

  • Event last occurred at: Provides information about the timestamp and date when a particular event occurred. It helps track the timing of events, which is essential for diagnosing issues and understanding the sequence of actions or incidents.

  • Count: Indicates the number of times a particular event occurred. This number is useful in assessing the frequency of an issue. An event that has occurred multiple times indicates a persistent issue that you need to fix.

Each event also gives you an indication of what you need to do to fix the error.

Viewing the administration event details

By viewing the details of an administration event, you get more information about the events in that particular domain. This allows you to better understand the context and details of the events.

Procedure

  • In the Administration Events page, click the domain to view its details.

Understanding the administration event details

The administration event provide log information that describes the error or event. They provide important information for understanding a specific issue or incident and includes information about the context of the event as well as the steps to take to fix the error.

The administration event page organizes information in the following groups:

  • Resource type: Classifies events based on the resource or component type involved. Resource types include API Token, Cluster, Image, Node, and Notifier.

  • Resource name: Specifies the name of the resource or component to which the event refers. It identifies the specific instance within the domain where the event occurred.

  • Event type: Specifies the source of the event. Currently, Central generates log events that correspond to administration events created from log statements.

  • Event ID: A unique identifier assigned to each event. It serves as a reference point and can be useful in tracking and managing events over time. Event IDs are unique alphanumeric characters that help identify and distinguish events.

  • Created at: Indicates the timestamp and date when the event was originally created or recorded. It provides an indication of when the event was first detected or created.

  • Last occurred at: Specifies the timestamp and date when the event last occurred. This tracks the timing of the event, which can be critical for diagnosing and fixing recurring issues.

  • Count: Indicates the number of times a particular event occurred. This number is useful in assessing the frequency of an issue. An event that has occurred multiple times indicates a persistent issue you need to fix.

Configuring administration events retention settings

By configuring the retention settings, you can determine when the administration events expire.

Procedure

  1. In the RHACS portal, go to Platform Configuration → System Configuration. You can configure the following setting for administration events:

    • Administration events retention days: The number of days to retain your administration events. By specifying the number of days, you can control when these events expire. This is important for managing your administration events and ensuring that you retain the information for the desired duration.

      By default, the administration events are retained for 4 days. The retention period for these events is determined by the time of the last occurrence and not by the time of creation. This means that an event expires and is deleted only if the time of the last occurrence exceeds the specified retention period.

  2. To change this value, click Edit, make your changes, and then click Save.