add kubernetes.container.status.last.reason metric

Signed-off-by: Tetiana Kravchenko <tetiana.kravchenko@elastic.co>
elastic · Feb 9, 2022 · 3f6426a · 3f6426a
1 parent ba6d176
commit 3f6426a
Show file tree

Hide file tree

Showing 6 changed files with 69 additions and 5 deletions.
diff --git a/CHANGELOG.next.asciidoc b/CHANGELOG.next.asciidoc
@@ -180,6 +180,7 @@ https://github.com/elastic/beats/compare/v7.0.0-alpha2...main[Check the HEAD dif
 - Add `xpack.enabled` support for Enterprise Search module. {pull}29871[29871]
 - Add gcp firestore metricset. {pull}29918[29918]
 - Remove strict parsing on RabbitMQ module {pull}30090[30090]
+- Add `kubernetes.container.status.last.reason` metric {issue}27840|[27840]
 
 *Packetbeat*
 

diff --git a/metricbeat/docs/fields.asciidoc b/metricbeat/docs/fields.asciidoc
@@ -44256,7 +44256,17 @@ type: integer
 *`kubernetes.container.status.reason`*::
 +
 --
-Waiting (ContainerCreating, CrashLoopBackoff, ErrImagePull, ImagePullBackoff) or termination (Completed, ContainerCannotRun, Error, OOMKilled) reason.
+The reason the container is currently in waiting (ContainerCreating, CrashLoopBackoff, ErrImagePull, ImagePullBackoff) or terminated (Completed, ContainerCannotRun, Error, OOMKilled) state.
+
+
+type: keyword
+
+--
+
+*`kubernetes.container.status.last.reason`*::
++
+--
+The last reason the container was in terminated state (Completed, ContainerCannotRun, Error or OOMKilled).
 
 
 type: keyword

diff --git a/metricbeat/module/kubernetes/fields.go b/metricbeat/module/kubernetes/fields.go
diff --git a/metricbeat/module/kubernetes/state_container/_meta/fields.yml b/metricbeat/module/kubernetes/state_container/_meta/fields.yml
@@ -26,8 +26,12 @@
         - name: reason
           type: keyword
           description: >
-            Waiting (ContainerCreating, CrashLoopBackoff, ErrImagePull, ImagePullBackoff)
-            or termination (Completed, ContainerCannotRun, Error, OOMKilled) reason.
+            The reason the container is currently in waiting (ContainerCreating, CrashLoopBackoff, ErrImagePull,
+            ImagePullBackoff) or terminated (Completed, ContainerCannotRun, Error, OOMKilled) state.
+        - name: last.reason
+          type: keyword
+          description: >
+            The last reason the container was in terminated state (Completed, ContainerCannotRun, Error or OOMKilled).
     - name: cpu
       type: group
       fields: