From b94a555dfcca64ff508c4e9964e2ebe40a334592 Mon Sep 17 00:00:00 2001
From: Zhen Wang <zhenw@google.com>
Date: Wed, 12 Jun 2019 20:23:13 -0700
Subject: [PATCH] Add systemd monitor for kubelet, docker, and containerd
 restart events

---
 config/systemd-monitor.json | 28 ++++++++++++++++++++++++++++
 1 file changed, 28 insertions(+)
 create mode 100644 config/systemd-monitor.json

diff --git a/config/systemd-monitor.json b/config/systemd-monitor.json
new file mode 100644
index 00000000..17376fe9
--- /dev/null
+++ b/config/systemd-monitor.json
@@ -0,0 +1,28 @@
+{
+	"plugin": "journald",
+	"pluginConfig": {
+		"source": "systemd"
+	},
+	"logPath": "/var/log/journal",
+	"lookback": "",
+	"bufferSize": 10,
+	"source": "systemd-monitor",
+	"conditions": [],
+	"rules": [
+		{
+			"type": "temporary",
+			"reason": "KubeletStart",
+			"pattern": "Started Kubernetes kubelet."
+		},
+		{
+			"type": "temporary",
+			"reason": "DockerStart",
+			"pattern": "Starting Docker Application Container Engine..."
+		},
+		{
+			"type": "temporary",
+			"reason": "ContainerdStart",
+			"pattern": "Starting containerd container runtime..."
+		}
+	]
+}