Troubleshooting Tenable Security Center in Kubernetes

This page describes how to check the container logs and pod status for Tenable Security Center in Kubernetes for troubleshooting purposes.

Check the install container logs

Run the following command to check the install container logs:

Copy

kubectl logs -c sc-install-container tenable-security-center-0 -n tenable

If successful, the output looks like this:

Security Center install proceeding...

Verifying... ########################################

Preparing... ########################################

Security Center install container complete, ready for runtime container.

Check the runtime container logs

Run the following command to check the runtime container logs:

Copy

kubectl logs -c sc-runtime-container tenable-security-center-0 -n tenable

If successful, the output looks like this:

Replacing System RPM database with persistent backup

Checking for SecurityCenter upgrade in progress:

Checking for active migration:

Installing software updates if availableStarting SecurityCenter services: [ OK ]

Check the pod status

Run the following command to check the pod status:

Copy

kubectl get all -n tenable

If successful, the output looks like this:

NAME READY STATUS RESTARTS AGE

pod/tenable-security-center-0 1/1 Running 0 4h4m

NAME TYPE CLUSTER-IP EXTERNAL-IP PORT(S) AGE

service/tenable-sc LoadBalancer 172.00.00.000 k8s-tenable-security-center.amazonaws.com 443:12345/TCP 4h4m

NAME READY AGE

statefulset.apps/tenable-security-center 1/1 4h4m

Note: This output is an example of an AWS environment. Your output may vary depending on your AWS and IP ranges, but the Status should be Running.