You can use the following steps to install an agent that will run on one of your Kubernetes clusters to collect audit flow logs from your IBM Cloud Account. These audit flow logs are stored in your Cloud Object Storage (COS) instance. Then, you can enable Security Advisor Activity Insights to analyze your activity flow logs to detect and alert you to suspicious activity.
v1.0: This version will not work after 30th Sept 2019.v2.0: Follow the steps to uninstallv1.0and installv2.0. This is supported on clusters with version "">=1.10.3" and <= v1.15.10". It is supported only on Helm v2v3.0: New customer are advised to install this version. It supports Kuberenetes version ">=v1.16.7" with Helm v3. Helm v2 is not supported. Installation steps can be found here