bash
kubectl logs <pod> -n <namespace>Kubernetes Logs and Events Cheat Sheet
Find pod logs, previous container logs, event timelines, kube-system logs, and cluster incident evidence quickly.
Export
Copy the compact sheet, download it, or print it.
Download
`D` dense toggle · `C` copy all
Pod Logs
Get logs from a named container
Required for sidecars and multi-container pods.
bashANYlogscontainers
bash
kubectl logs <pod> -n <namespace> -c <container>Follow logs with timestamps
Stream logs with timestamps for incident reconstruction.
bashANYlogstimestamps
bash
kubectl logs -f <pod> -n <namespace> --timestampsbash
kubectl logs <pod> -n <namespace> --tail=200bash
kubectl logs <pod> -n <namespace> --since=30mbash
kubectl logs <pod> -n <namespace> --previousAggregate Logs by Workload
Read logs via deployment resource
Print logs from a workload resource instead of a single pod.
bashANYlogsdeployment
bash
kubectl logs deployment/<name> -n <namespace>bash
kubectl logs job/<name> -n <namespace>Read logs from pods matching a label
Aggregate logs across all containers of pods with a label.
bashANYlogslabels
bash
kubectl logs -n <namespace> -l app=<label> --all-containers=true --prefixbash
kubectl logs -n <namespace> -l app=<label> -f --all-containers=true --max-log-requests=20Event Analysis
List namespace events
See the recent warning and normal events in a namespace.
bashANYeventsnamespace
bash
kubectl get events -n <namespace>bash
kubectl get events -n <namespace> --sort-by=.metadata.creationTimestampSort all cluster events by timestamp
Find cluster-wide warnings around the same time window.
bashANYeventscluster
bash
kubectl get events -A --sort-by=.metadata.creationTimestampbash
kubectl get events -A --field-selector type=Warning --sort-by=.metadata.creationTimestampShow events for a specific object
Describe an object and inspect its event section.
bashANYeventsdescribe
bash
kubectl describe pod <pod> -n <namespace> | sed -n '/Events:/,$p'System and Control Plane Logs
Read logs from kube-system pods
Aggregate logs from a system component by label.
bashANYkube-systemlogs
bash
kubectl logs -n kube-system -l k8s-app=<label> --all-containers=true --prefixList control plane static pods
Check apiserver, scheduler, controller-manager, and etcd pods.
bashANYcontrol-planelogs
bash
kubectl get pods -n kube-system -o wide | egrep 'apiserver|scheduler|controller-manager|etcd'bash
kubectl logs -n kube-system <kube-apiserver-pod>Read controller-manager logs
Troubleshoot controllers and reconciliation failures.
bashANYcontroller-managerlogs
bash
kubectl logs -n kube-system <kube-controller-manager-pod>bash
kubectl logs -n kube-system <kube-scheduler-pod>Incident Collection
Export object YAML during incident
Capture the exact spec and status for later analysis.
bashANYincidentyaml
bash
kubectl get <resource> <name> -n <namespace> -o yaml > incident-object.yamlDump cluster info to a directory
Collect cluster state to files instead of stdout.
bashANYincidentdiagnostics
bash
kubectl cluster-info dump --output-directory=./cluster-dumpSave pod logs to a file
Persist logs for investigation or attachment to a ticket.
bashANYincidentlogs
bash
kubectl logs <pod> -n <namespace> --all-containers=true > pod.logMore in Kubernetes Debugging
Kubernetes Node Debugging Cheat Sheet
Diagnose node readiness, kubelet issues, pressure conditions, cordon/drain, and node-level debugging with kubectl debug.
Kubernetes Network Debugging Cheat Sheet
Debug Services, DNS, Ingress, network policies, connectivity, endpoints, and port-forwarding issues.
Kubernetes Pod Debugging Cheat Sheet
Troubleshoot Pending, CrashLoopBackOff, image pull, readiness, liveness, and init container problems.
Kubernetes Debugging Cheat Sheet
Core kubectl troubleshooting commands for pods, deployments, services, events, logs, exec sessions, and ephemeral debugging.