Kaspersky Machine Learning for Anomaly Detection

Scenario: viewing container logs and metrics

Before starting to work with the logging subsystem, it is recommended to read the Grafana User Guide.

The Kaspersky MLAD log stores entries only for the last 48 hours.

This subsection provides steps for assessing the performance and viewing the logs of a specific container from the Kaspersky MLAD distribution kit.

The scenario for assessing the performance and viewing the logs of a specific container consists of the following steps:

1. Navigating to the logging subsystem

   Go to the logging system by clicking the button. This opens the Grafana interface in which you need to enter the name and password of the Kaspersky MLAD user.

   Available only to the system administrators and users with the Manage application logs permission.

2. Navigating to the section with container logs and metrics

   Go to the Service detailed monitoring section and select the relevant container from the Container drop-down list.

3. Analyzing container metrics

   In the Service detailed monitoring section, analyze the graphs of Kaspersky MLAD metrics for the selected container during the relevant period.

   The Service detailed monitoring section provides the following metrics:

   • Memory – history of the container's RAM usage. This is measured in bytes.
   • CPU – history of central processor workload caused by the container. This is measured as a percentage.
   • File system – history of the container's load on the disk subsystem (read/write operations). This is measured in bytes.
   • Network – history of the container's use of network resources. This is measured in bytes per second.
4. Analyzing container metrics

   Analyze the container log records for the selected period, which are displayed under the metrics dashboard. You can search the container log records. To do so, enter a search query in the Log search field and press the ENTER key. To reset the search results, clear the Log search field and press the ENTER key.

5. Exporting container logs

   To export container logs for the selected period to a text file, under Service detailed monitoring, choose Inspect → Data from the vertical menu in the upper right corner of the relevant metric section, and in the panel that opens, click Download CSV.