Search query to fetch PCF application instances and its event messages such as start, stop and crash and with the reason

[Abhigyan_2907]

Hi ,

I want Search query to fetch PCF application instances and its event messages such as start, stop and crash and with the reason. Can anyone help me with the query how to fetch this.

Thanks,

Abhigyan.

[renjith_nair]

@Abhigyan_2907 ,

Assuming that by PCF , you meant Pivotal Cloud Foundry 

Without looking at the sample logs, it's difficult to formulate a search to get the logs. 

There are different log types for applications and based on your requirement , you could search the respective types. 

Have a look at this https://docs.cloudfoundry.org/devguide/deploy-apps/streaming-logs.html 

[ITWhisperer]

Which index and sourcetype have the events been ingested into?

[Abhigyan_2907]

I know the index and sourcetype and pcf instances are coming but what to query to fetch each instances event like stating stopped running crashed with the. Timestamp