jq - kamialie/knowledge_corner GitHub Wiki

jq

# Filter lines based on 2 conditions
$ jq 'select(.verb=="delete" and .objectRef.resource=="secrets")' /var/log/kubernetes/audit.log

Resources