Sysdig running as a kubernetes pod to monitor the VM user activity

[saiy...@gmail.com]

For this particular use case where I am trying to use a sysdig -c spy_users on the VM's where it will be running. 
when I do kubectl logs of pod it should the logs but there is a lot of delays. 
SO sysdig pod running on Node A, user logs in to Node A do some activity and logs off. The sysdiig logs or the container logs are showing the activity after lot of time. It is not real-time, In my case I have nodes coming up and going away frequently it can impact the auditing that I am actually looking for. 
Any help on this ?