Find the cause of Kubernetes workload failures.
Diagnoses Kubernetes failures and provides an evidence-backed root-cause hypothesis with recommended next steps.
When to use it
Use when diagnosing pod failures, node pressure, resource exhaustion, image pull failures, admission rejections, autoscaling anomalies, or Kubernetes/application signal correlations.
Give it a Kubernetes incident question or supplied evidence; it returns a hypothesis, supporting evidence, confidence, and recommended next steps.
Cluster queries require elastic CLI version 0.2 or later with an Elasticsearch context; analysis of evidence already supplied by the user does not require cluster access.
Cluster queries require Elasticsearch 8.11 or later, or Serverless, with Kubernetes telemetry ingested through EDOT / the OpenTelemetry kube-stack collector into OTel-receiver-namespaced data streams.
This skill
Elasticsearch
Reads Kubernetes telemetry from Elasticsearch
Kibana
Reads enabled alert rules