rancher / rancher/support-bundle-kit

[Feature] Add Optional Time-Based Log Collection to Support Bundle Kit

Open
#195 1 comment 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Dominant language
Go
Stars
24
Forks
43
Avg merge
1d 15h
Merged PRs (30d)
6

Description

Description

When investigating incidents (Root Cause Analysis), we often need to collect logs from a very specific time window (e.g., between 2:00 PM and 2:15 PM when the error occurred). Currently, the support bundle collects all logs, which can be a massive amount of data and makes it difficult and time-consuming to find the relevant information.

Solution

I would like to add an optional, opt-in feature to support-bundle-kit that allows users to collect logs within a defined time range. This would be a huge improvement for debugging and incident response. The feature should be opt-in, controlled by an environment variable (e.g., LOG_TIME_RANGE). When enabled, the kit should only fetch logs that fall within the specified time window. If the environment variable is not set, the behavior should remain exactly the same as before. This enhancement makes the tool much more powerful for targeted RCA without impacting its default behavior for users who don't need it.

The current alternative is to collect the full logs and then manually filter them, which is inefficient, especially in large clusters

Contributor guide

No contributing guide indexed for this repository

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

No files, tests, or entry points are named. Start by tracing the existing log collection entry point and how environment variables are read; clarify the LOG_TIME_RANGE format, timezone and boundary behavior, then verify filtered collection and unchanged behavior when it is unset.

Written by the indexing model from the issue text.

Assessment

Tech stack
go, kubernetes
Domain
devops, observability-sre
Issue type
Feature
Difficulty
4/5
Estimated time
3-5 days
Activity status
Active
Clarity
Mostly clear
Newbie friendliness
52/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.