Stack Overflow
Stack Overflow

Questions tagged [sysdig]

Linux system exploration and troubleshooting tool with first class support for containers.

25 questions
2
votes
0 answers

Image scanning not working in Sysdig secure

I am working on Sysdig-secure to enable Image Scanning. I have followed all the steps to enable image scanning (https://docs.sysdig.com/en/image-scanning.html#UUID-4db6c413-043d-8661-7599-c12c0ce0d7cf_UUID-1b8910ba-b5f9-4150-9854-67419de3f302). On…
Ramya R
  • 21
  • 2
2
votes
0 answers

Catch seccomp violation of Docker container

I would like to catch any violations of prohibited systemcalls a container, started with a seccomp profile, executed. For example, my profile defines chown as blocked, which is also prevented within the container. Now, I would like to log if a…
MajorasKid
  • 733
  • 2
  • 5
  • 24
2
votes
0 answers

How does time aggregation work in Sysdig?

I have doubts on how time aggregation works in Sysdig. I have already referred to this documentation: https://sysdigdocs.atlassian.net/wiki/spaces/Monitor/pages/209027280/Data+Aggregation and I still find it vague. As far as I understand, Sysdig…
aldred
  • 743
  • 3
  • 9
  • 19
2
votes
1 answer

writing sysdig output to a file

I want to check my users commands on my server for a period of time so I use sysdig command with nohup. I want to write output to a file like so: # nohup sysdig -c spy_users 1>>/path/to/true 2>>/path/to/false & But result is not written to file…
yasin
  • 107
  • 10
2
votes
0 answers

Weird process time improvement when supervising with sysdig

I recently tried Sysdig for a project. My main goal is to catch syscalls from the kernel and Sysdig seems to be a good option. Actually, I had done some tests with different techniques and compared the overhead for each one. I come here with a…
iFlo
  • 1,442
  • 10
  • 19
1
vote
0 answers

Sysdig - how to merge two .scap files into a single .scap file?

Using Sysdig, I captured logs into two individual files using the sysdig -w filename.scap command. I would like to merge the two files into a single file and then be able to read it with the sysdig -r merged_file_name.scap command. How can I merge…
Evyatar Saias
  • 698
  • 7
  • 18
1
vote
1 answer

How to create a drop down in grafana dashboard which is based on sysdig metrics label

I am trying to create a drop down in grafana panel for the below metric : cloud_storage_request_count{repo="github",method="create",region="ap-south",zone="ap-south-1"} I want to create a dropdown based on labels region and zone in grafana dashboard…
Pixzium Media
  • 109
  • 2
  • 10
1
vote
1 answer

Running sysdig on minikube

I'm trying to run sysdig on my local kubernetes cluster which I'm running using minikube with kvm2 as the vm-driver. I'm new to sysdig and wanted to find the system calls run by by a pod. The command I ran is: sudo sysdig k8s.ns.name=default or…
mememan
  • 13
  • 4
1
vote
3 answers

API monitoring tool

I wish to monitor all the APIs that I created on one of my docker containers. That Docker container is using Django REST framework for its services.. and I am running it on Azure. I want to monitor my API by means of if it is working or if there are…
Dean Christian Armada
  • 6,724
  • 9
  • 67
  • 116
1
vote
1 answer

How to get RAM, CPU, network usage on a specific process on a container

I am looking at a number of Docker containers running on a Centos7 VM. Each container will be running a number of processes. For each process, I want to be able to see the CPU network and RAM usage to identify when the container is starting to get…
Alex Pomerenk
  • 39
  • 1
  • 5
1
vote
1 answer

How to trace a single process with 'sysdig'?

How to trace a single process with sysdig ? Something similar to strace /bin/ls
ovolax
  • 2,387
  • 2
  • 12
  • 7
0
votes
0 answers

Sysdig Agent not scarping vault prometheus metrics

I have a vault standalone instance running in Kubernetes cluster and i was able to get vault metrics in prometheus format using below command curl http://172-77-77-32.default.pod.cluster.local:8200/v1/sys/metrics?format=prometheus # HELP…
Raghavendra
  • 521
  • 5
  • 11
0
votes
1 answer

What is the "duration" value in the PromQL alert interface in SysDig

According to SysDig documentation, Duration: Specify the time window for evaluating the alert condition in minutes, hour, or day. The alert will be triggered if the query returns data for the specified duration. I am afraid I do not understand…
A B
  • 85
  • 1
  • 6
0
votes
1 answer

PROMQL Joining more metrics

I'm using SYSDIG monitoring in IBM Cloud. I have these two metrics first: sum by(container_image_repo,container_image_tag) (sysdig_container_cpu_cores_used) Which return by repo and tag the total used cpu (in Value_A) second: count…
Lupo Argentato
  • 1
0
votes
1 answer

Sysdig - get syscalls triggered by a k8 pod

I want to capture all system calls from a k8 pod. Sysdig supports the -k flag for specifying a url to the kubernetes kubectl api. I exposed the kubectl api using the kubectl proxy command below kubectl proxy --port=8080 & I want to filter system…
Evyatar Saias
  • 698
  • 7
  • 18
1
2