- Elastic Docs/
- Solutions and use cases/
- Security solution/
- Cloud Security/
- Cloud workload protection for Kubernetes
Kubernetes dashboard
The Kubernetes dashboard provides insight into Linux process data from your Kubernetes clusters. It shows sessions in detail and in the context of your monitored infrastructure.
- Kubernetes node operating systems must have Linux kernels 5.10.16 or higher.
- This feature is currently available on GKE and EKS using Linux hosts and Kubernetes versions that matchthese specifications.

The numbered sections are described below:
- The charts at the top of the dashboard provide an overview of your monitored Kubernetes infrastructure. You can hide them by clickingHide charts.
- The tree navigation menu allows you to navigate through your deployments and select the scope of the sessions table to the right. You can select any item in the menu to show its sessions. In Logical view, the menu is organized by Cluster, Namespace, Pod, and Container image. In Infrastructure view, it is organized by Cluster, Node, Pod, and Container image.
- The sessions table displays sessions collected from the selected element of your Kubernetes infrastructure. You can view it in fullscreen by selecting the button in the table’s upper right corner. You can sort the table by any of its fields.
You can filter the data using the KQL search bar and date picker at the top of the page.
From the sessions table’s Actions column, you can take the following investigative actions:
Session View displays Kubernetes metadata under theMetadata tab of the Detail panel:
