--- title: "Observability and troubleshooting" description: "Use Elasticsearch logs for visibility into all network traffic with Kubernetes context." product: "Calico Enterprise" version: "3.21" section: "Observability" canonical_url: "https://docs.tigera.io/calico-enterprise/3.21/observability/" --- # Observability and troubleshooting See what's going on in your cluster with network observability tools and detailed logging. ## Getting started ##### [Web console tutorial](https://docs.tigera.io/calico-enterprise/3.21/observability/get-started-cem.md) [Tour the main features of the web console.](https://docs.tigera.io/calico-enterprise/3.21/observability/get-started-cem.md) ##### [Manage alerts](https://docs.tigera.io/calico-enterprise/3.21/observability/alerts.md) [Manage alerts and events for Calico Enterprise features.](https://docs.tigera.io/calico-enterprise/3.21/observability/alerts.md) ##### [Kibana dashboards and logs](https://docs.tigera.io/calico-enterprise/3.21/observability/kibana.md) [Learn the basics of using Elasticsearch logs and Kibana to gain visibility and troubleshoot.](https://docs.tigera.io/calico-enterprise/3.21/observability/kibana.md) ##### [Packet capture](https://docs.tigera.io/calico-enterprise/3.21/observability/packetcapture.md) [Capture live traffic for debugging microservices and application interaction.](https://docs.tigera.io/calico-enterprise/3.21/observability/packetcapture.md) ##### [Network visualization](https://docs.tigera.io/calico-enterprise/3.21/observability/visualize-traffic.md) [Learn the power of network sets.](https://docs.tigera.io/calico-enterprise/3.21/observability/visualize-traffic.md) ## Getting started with logs ##### [Overview](https://docs.tigera.io/calico-enterprise/3.21/observability/elastic/overview.md) [Summary of the out-of-box features for Calico Enterprise logs.](https://docs.tigera.io/calico-enterprise/3.21/observability/elastic/overview.md) ##### [Configure data retention](https://docs.tigera.io/calico-enterprise/3.21/observability/elastic/retention.md) [Configure how long to retain logs and compliance reports.](https://docs.tigera.io/calico-enterprise/3.21/observability/elastic/retention.md) ##### [Archive logs](https://docs.tigera.io/calico-enterprise/3.21/observability/elastic/archive-storage.md) [Archive logs to Syslog, Splunk, or Amazon S3 for maintaining compliance data.](https://docs.tigera.io/calico-enterprise/3.21/observability/elastic/archive-storage.md) ##### [Overview](https://docs.tigera.io/calico-enterprise/3.21/observability/elastic/overview.md) [Summary of the out-of-box features for Calico Enterprise logs.](https://docs.tigera.io/calico-enterprise/3.21/observability/elastic/overview.md) ##### [Configure RBAC for Elasticsearch logs and events](https://docs.tigera.io/calico-enterprise/3.21/observability/elastic/rbac-elasticsearch.md) [Configure RBAC to control access to Elasticsearch logs and events.](https://docs.tigera.io/calico-enterprise/3.21/observability/elastic/rbac-elasticsearch.md) ##### [BGP logs](https://docs.tigera.io/calico-enterprise/3.21/observability/elastic/bgp.md) [Key/value pairs of BGP activity logs and how to construct queries.](https://docs.tigera.io/calico-enterprise/3.21/observability/elastic/bgp.md) ##### [Audit logs](https://docs.tigera.io/calico-enterprise/3.21/observability/elastic/audit-overview.md) [Calico Enterprise audit logs provide data on changes to resources.](https://docs.tigera.io/calico-enterprise/3.21/observability/elastic/audit-overview.md) ## Flow logs ##### [Flow log data types](https://docs.tigera.io/calico-enterprise/3.21/observability/elastic/flow/datatypes.md) [Data that Calico Enterprise sends to Elasticsearch.](https://docs.tigera.io/calico-enterprise/3.21/observability/elastic/flow/datatypes.md) ##### [Filter flow logs](https://docs.tigera.io/calico-enterprise/3.21/observability/elastic/flow/filtering.md) [Filter Calico Enterprise flow logs.](https://docs.tigera.io/calico-enterprise/3.21/observability/elastic/flow/filtering.md) ##### [Configure flow log aggregation](https://docs.tigera.io/calico-enterprise/3.21/observability/elastic/flow/aggregation.md) [Configure flow log aggregation to reduce log volume and costs.](https://docs.tigera.io/calico-enterprise/3.21/observability/elastic/flow/aggregation.md) ##### [Enable HostEndpoint reporting in flow logs](https://docs.tigera.io/calico-enterprise/3.21/observability/elastic/flow/hep.md) [Enable hostendpoint reporting in flow logs.](https://docs.tigera.io/calico-enterprise/3.21/observability/elastic/flow/hep.md) ##### [Enable process-level information in flow logs](https://docs.tigera.io/calico-enterprise/3.21/observability/elastic/flow/processpath.md) [Get visibility into process-level network activity in flow logs.](https://docs.tigera.io/calico-enterprise/3.21/observability/elastic/flow/processpath.md) ##### [Enabling TCP socket stats in flow logs](https://docs.tigera.io/calico-enterprise/3.21/observability/elastic/flow/tcpstats.md) [Enabling TCP socket stats information in flow logs](https://docs.tigera.io/calico-enterprise/3.21/observability/elastic/flow/tcpstats.md) ## DNS logs ##### [Configure DNS logs](https://docs.tigera.io/calico-enterprise/3.21/observability/elastic/dns/dns-logs.md) [Key/value pairs of DNS activity logs and how to construct queries.](https://docs.tigera.io/calico-enterprise/3.21/observability/elastic/dns/dns-logs.md) ##### [Filter DNS logs](https://docs.tigera.io/calico-enterprise/3.21/observability/elastic/dns/filtering-dns.md) [Suppress DNS logs of low significance using filters.](https://docs.tigera.io/calico-enterprise/3.21/observability/elastic/dns/filtering-dns.md) ## L7 logs ##### [Configure L7 logs](https://docs.tigera.io/calico-enterprise/3.21/observability/elastic/l7/configure.md) [Configure and aggregate L7 logs.](https://docs.tigera.io/calico-enterprise/3.21/observability/elastic/l7/configure.md) ##### [L7 log data types](https://docs.tigera.io/calico-enterprise/3.21/observability/elastic/l7/datatypes.md) [L7 data that Calico Enterprise sends to Elasticsearch.](https://docs.tigera.io/calico-enterprise/3.21/observability/elastic/l7/datatypes.md)