> For the complete documentation index, see [llms.txt](https://docs.cloudeka.ai/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.cloudeka.ai/guidance-for-enterprise/deka-gpu/deka-gpu-log-collection/troubleshooting.md).

# Troubleshooting

## No Container Logs

* Check that the app emits logs and annotation is present
* Check index name and provided api\_key are correct
* Check logstash pod logs

```bash
kubectl -n <namespace> logs <logstash_pod_name> --tail=200
```

## No Audit Logs

* Ensure query is correct, referring to the fields reference for kubernetes audit logs
* Check index name and provided api\_key are correct

```bash
kubectl -n <namespace> logs <logstash_pod_name> --tail=200
```

## Logstash Pod Issues

* Describe pod for errors:

```bash
kubectl -n <namespace> describe pod <logstash_pod_name>
```

* Check cluster events

```bash
kubectl -n <namespace> get events --sort-by=.metadata.creationTimestamp
```

{% hint style="success" %}
**Notes**

* Export logs: Use logstash to export logs to your existing platform.
* Log retention: By default, logs are retained for 30 days or 50 GB (whichever comes first).
* Collect both audit & container logs: Yes, enable container logs as described above. Audit logs enabled by default.
* Support: Open a [ticket](/guidance-for-enterprise/service-portal-ai/ticket.md) in the Service Portal AI.
  {% endhint %}
