Kusto-AKS Pod Logs

podlogs_1.csl

let _Namespace = "Your Namespace";
let _ServiceName = "Name of your deployment";
let _ContainerName = "Name of the container"; // Only required if you have multiple containers in the Pod (ie. Sidecars)
KubePodInventory 
| project ContainerID, ContainerName, Namespace 
| where Namespace == _Namespace
| where ServiceName == _ServiceName
| where ContainerName hasprefix_cs _ContainerName 
| distinct ContainerID 
| join kind=inner ContainerLog on ContainerID 
// Uncomment the following line to filter out Log entries
// | where LogEntry has "{filter/search text}"
| project TimeGenerated, LogEntry 
| order by TimeGenerated desc;