- "expr": "{namespace=\"$hubbleobservernamespace\",container=\"hubble-observer\"} |~ `(?i)$searchregex` !~ `(?i)$excluderegex`\n| $cri_logparser \n| flow_source_namespace=~\"$sourcenamespace\" | flow_destination_namespace=~\"$destinationnamespace\" | flow_traffic_direction=~\"$direction\" | flow_IP_ipVersion=~\"$ipversion\" | json flow_destination_name=\"flow.destination_names[0]\"\n| pattern `<_>,\"source\":{<_>\"labels\":[<sourceLabels>]},\"destination\":{<_>\"labels\":[<destinationLabels>]}` #\"source\":{\"identity\":6,\"labels\":[\"reserved:remote-node\"]},\"destination\"\n| label_format \n Verdict=`{{.flow_verdict}}`,\n Source_IP=`{{.flow_IP_source}}`,\n Source=`{{ if .flow_source_pod_name }}{{.flow_source_pod_name}} (Pod) {{else}} {{.sourceLabels}} (Label) {{end}}`,\n Source_Namespace=`{{.flow_source_namespace}}`,\n Direction=`{{.flow_traffic_direction}}`,\n Dest_Port=`{{ if .flow_l4_TCP_destination_port}}TCP-{{.flow_l4_TCP_destination_port}}{{else if .flow_l4_UDP_destination_port}}UDP-{{.flow_l4_UDP_destination_port}}{{else if .flow_l4_ICMPv4_type}} ICMPv4 {{else}}{{end}}`, #\n #Destination=`{{.flow_destination_name}}`,\n Destination=`{{ if .flow_destination_pod_name }}{{.flow_destination_pod_name}} (Pod) {{ else if .flow_destination_name }}{{.flow_destination_name}} (URL){{else}} {{.destinationLabels}} (Label) {{end}}`,\n #Destination_Pod=`{{.flow_destination_pod_name}}`,\n Destination_Namespace=`{{.flow_destination_namespace}}`,\n Destination_IP=`{{.flow_IP_destination}}`, \n Drop_Description=`{{.flow_drop_reason_desc}}`,\n Flow_UUID=`{{.flow_uuid}}`",
0 commit comments