Skip to main content
Sumo Logic

Lab 3 - Examine an existing dashboard and query using metadata

Learn  about our new Dashboards (Beta), learn how to edit existing dashboards, and create new ones that can be stack linked for future investigations

Getting Started

With the use of out-of-the-box dashboards installed with our Kubernetes app, the Explore view gives us the ability to traverse the hierarchy and do cross signal correlation across the Kubernetes environment. In this lab, you will be familiarized with our new Dashboards (Beta), learn how to edit existing dashboards and search for information using metadata.

Examine an existing dashboard

Dashboard (Beta) is a unique framework that allows you to view logs and metrics data on the same dashboard in an integrated and seamless view. This gives you the same control over how your metrics and log data are visualized. 

  1. First let’s open an Explore tab. On the Home page, click +New.

  2. Select Explore.
    Screen Shot 2019-09-04 at 11.28.44 PM.png

  3. Change your view to the deployment view, under Explore By, click Kubernetes Service View.

  4. Select Kubernetes Deployment View.

  5. Let’s expand down to a particular dashboard, click 

  6. Click prod-loggen.
    Screen Shot 2019-09-04 at 11.31.00 PM.png

    Notice that as you clicked on the Explore left navigation pane, that the dashboards have been changing. Let's find out why this happens.

  7. Take a look at our Google apps deployment dashboard, click googleapps.

    Screen Shot 2019-09-04 at 11.40.59 PM.png

  8. At the top of the dashboard. There is a grayed-out section under the Dashboard's name. You will see cluster, namespace prod-loggen, and deployment googleapps. This section captures and displays the path you traversed to in the hierarchy, using the left navigation pane.

    Screen Shot 2019-09-04 at 11.45.01 PM.png

    These are all key value pairs (aka metadata) that have been passed to the Dashboard (Beta), acting as filters controlling what the dashboards displays. Our Dashboards (Beta) are completely customizable to whatever key value pairs you would like to use as filters. You can even trigger off of your own metadata.

  9. Click the lower details icon at the top right of the dashboard and Select Open in Dashboards (Beta).

    Screen Shot 2019-09-08 at 12.51.19 PM.png

    The dashboard we had just navigated to, called Kubernetes - Deployment Overview, will open in a Dashboard (Beta) tab. This is how you open an existing dashboard.


  10. From here you can make edits to the dashboard. Hover (or click) in Pods Running and select the 3 details icon at the top right of the panel, click Open in Metrics.

  11. Screen Shot 2020-01-30 at 4.24.04 PM.png

  12. This is the underlying query used to generate the panel. If desired, you can make edits to existing panels and save. For more information see lab Part 5: Modify your dashboard to do so.

Searching using the Structured Query Builder in Dashboards (Beta)

Now that you are familiar with the concept of examining a Dashboard (Beta), let’s use metrics to search for Kubernetes information.

  1. To open a new Dashboard (Beta), on the Home page, click + New.
  2. Select Dashboard from the drop-down list.
  3. Now let’s add a time series panel. Click Add Panel and select Honeycomb.

      Screen Shot 2020-01-30 at 4.55.27 PM.png

  4. Let's search for the CPU usage per node for our cluster using the Structured Query Builder. At the metrics window, inside the Structured Query Builder section at the top,  you will see a From. In the From, enter This applies the Kubernetes metadata to specifically request a cluster that you will run a search upon.

 Screen Shot 2019-10-07 at 3.11.47 PM.png

  1. Use the Structured Query Builder again, to specify the metric for CPU usage per node. In the get metric, enter  node_cpu_utlisation:avg1m

  2. In the Preview Table you will see any queries that matched to your request.

  3. Click on the Chart tab. You will see the visual giving the pods that contained the metric within that cluster.

Screen Shot 2019-10-07 at 3.17.39 PM.png



  1. Traversing the hierarchy on the left of the Explore tab displays different dashboards which come out-of-the-box configured for Kubernetes components.  

  2. I can’t display logs, metrics, and events all in one Explore tab.


Congratulations! You’ve completed these tasks in Part 3 of the Kubernetes Hands-on Labs:

  1. Analyzed an existing Kubernetes dashboard.
  2. Using the structured query builder in Dashboard (Beta).