Provides a comprehensive reference and best-practice guidance for writing KFL2 filter expressions (Kubeshark's CEL-based query language). Covers core syntax, operators, string/collection/time functions, protocol flags, Kubernetes context fields, HTTP/DNS/database filters, transport-layer and flow tracking, and performance tips. Essential for generating correct, type-safe filters for traffic investigation.
Load this skill whenever the agent must write, suggest, or validate KFL filter expressions — e.g., building display filters for HTTP errors, DNS troubleshooting, Kubernetes namespace/service filtering, or protocol-specific queries. It must be present before constructing any KFL to avoid silent failures from incorrect syntax or types.
Intended for agents that author or suggest queries for Kubeshark dashboards or MCP agents integrated with Kubeshark; useful for SRE and observability tools that output CEL/KFL expressions.
This skill has not been reviewed by our automated audit pipeline yet.
