Investigate · artefacts

Evidence Viewer

Immutable artefacts for incident inc-4821 — pick a custom date/time window to review previous history, logs, and graphs.

Open RCA

In window

6

artefacts

Kinds

5

classes

Integrity

100%

verified

Verify / min

6

live

Focus

off

⌘\

Selected

#2

id

Hash-verified stream

Select a time window, then an artefact. Focus (⌘\\) maximizes the reading canvas.

Read-only Agent OS

History window

Aug 2, 06:30 AM → Aug 2, 06:50 AM

Filters timeline, logs, and load graphs by time

Artefacts

6 in selected window

kubelet.log

integrity verifiedsha256:41ba7d…c012

Captured Aug 2, 2026, 6:43:04 AM·2026-08-02T06:43:04.000Z

Incident inc-4821·Nordic Federated Bank · FS Core Banking Platform · production

Linux journal (read-only)

Capture locus

1 resource

fs-prod-cs-tool2

worker
Application
kubelet
Hostname
fs-prod-cs-tool2
IP address
10.42.6.21
Cluster
fs-prod-k8s
Namespace
kube-system
Pod
calico-node-7xk2m
FQDN / endpoint
registry.corp.internal
Region
eu-north-1
Role
worker

Logs · filtered by time

# journalctl -u kubelet --since "2026-08-02 06:35:00" --until "2026-08-02 06:43:00"
# host=fs-prod-cs-tool2  capturedAt=2026-08-02T06:43:04.088Z  mode=read-only

2026-08-02T06:38:11.204Z kubelet[1184]: E  createPodSandbox for pod "calico-node-7xk2m_kube-system" failed
2026-08-02T06:38:11.204Z kubelet[1184]: E  failed to pull image "registry.corp.internal/cni/calico-node:v3.27.2"
2026-08-02T06:38:11.204Z kubelet[1184]: E  read tcp 10.42.6.21:52344->198.51.100.44:443: read: connection reset by peer
2026-08-02T06:38:46.118Z kubelet[1184]: W  Back-off pulling image "registry.corp.internal/cni/calico-node:v3.27.2"
2026-08-02T06:39:22.551Z kubelet[1184]: E  PullImage failed: connection reset by peer (retry 2)
2026-08-02T06:40:11.002Z kubelet[1184]: E  PullImage failed: connection reset by peer (retry 3)
2026-08-02T06:41:04.902Z kubelet[1184]: E  Error updating node status — lastHeartbeat stale since 2026-08-02T06:37:26Z
2026-08-02T06:42:18.440Z kubelet[1184]: E  ErrImagePull (9 occurrences in 10m window 06:32–06:42)