whizard-auditing

To collect Kubernetes audit events centrally, you can install the WizTelemetry Auditing extension, which processes and stores cluster events using the vector and OpenSearch stack.

WizTelemetry auditing is a system that enables centralized collection, processing, and storage of Kubernetes and KubeSphere audit events across your clusters.

You configure OpenSearch and vector for KubeSphere auditing by installing the WizTelemetry Auditing extension on target clusters and setting up the integration as described in the extension prerequisites.

Yes, you can query KubeSphere audit events using the provided audit query API, which exposes specific endpoints and query parameters to retrieve stored events.

Yes, installing WizTelemetry auditing requires satisfying specific component dependencies and installation prerequisites to ensure the vector and OpenSearch stack functions correctly across your clusters.