kubernetes-audit-log-explorer
| Crates.io | kubernetes-audit-log-explorer |
| lib.rs | kubernetes-audit-log-explorer |
| version | 0.3.2 |
| created_at | 2024-07-08 01:32:40.208516+00 |
| updated_at | 2025-07-12 01:22:26.755217+00 |
| description | TUI for viewing Kubernetes Audit Logs |
| homepage | https://github.com/karlpvoss/kubernetes-audit-log-explorer |
| repository | https://github.com/karlpvoss/kubernetes-audit-log-explorer |
| max_upload_size | |
| id | 1295262 |
| size | 338,628 |
Karl Voss (karlpvoss)
documentation
README
Kubernetes Audit Log Explorer (KALE)
Assuming you've got some audit logs:
$ cat data
{"kind":"Event","apiVersion":"audit.k8s.io/v1","level":"Metadata","auditID":"ec95c2ca-00d4-40b9-93b4-78a6eb1242c7","stage":"ResponseComplete","requestURI":"..."
{"kind":"Event","apiVersion":"audit.k8s.io/v1","level":"Metadata","auditID":"2f8eb783-8d8b-4540-92db-899f5f0f126a","stage":"ResponseComplete","requestURI":"..."
{"kind":"Event","apiVersion":"audit.k8s.io/v1","level":"Metadata","auditID":"cddf4c0e-9eda-4e17-b9bf-a0af05132186","stage":"ResponseComplete","requestURI":"..."
kale will accept them via stdin:
kale < data
or you can tail them in on the fly using a tool like awslogs:
awslogs get /aws/eks/YOUR-CLUSTER-LOG-GROUP 'kube-apiserver-audit.*' -G -S -s1h | kale
Keybinds
| Key | Effect |
|---|---|
ESC or Q |
Quit |
Up and Down |
Scroll the list of logs |
PageUp and PageDown |
Scroll the list of logs faster |
j and k |
Scroll the Request and Response info panes |
Screenshots
