Skip to content

Commit fe393fa

Browse files
Enhance process event metrics (#653)
This adds sources info to process events in the metrics document. ``` "process_events": { "sent_bytes": 1478944, "sent_count": 732, "sources": [ { "sent_bytes": 0, "sent_count": 0, "source": "shmget", "suppressed_bytes": 0, "suppressed_count": 1 } ], "suppressed_bytes": 0, "suppressed_count": 7 } ``` This change allows for data based diag->prod decisions for new Linux process events: load_module, ptrace, and shmget
1 parent f74d96a commit fe393fa

File tree

2 files changed

+10
-0
lines changed

2 files changed

+10
-0
lines changed

custom_documentation/doc/endpoint/metrics/metrics.md

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -75,6 +75,11 @@ This is an internal state management document that includes metrics on Endpoint'
7575
| Endpoint.metrics.documents_volume.overall.suppressed_count |
7676
| Endpoint.metrics.documents_volume.process_events.sent_bytes |
7777
| Endpoint.metrics.documents_volume.process_events.sent_count |
78+
| Endpoint.metrics.documents_volume.process_events.sources.sent_bytes |
79+
| Endpoint.metrics.documents_volume.process_events.sources.sent_count |
80+
| Endpoint.metrics.documents_volume.process_events.sources.source |
81+
| Endpoint.metrics.documents_volume.process_events.sources.suppressed_bytes |
82+
| Endpoint.metrics.documents_volume.process_events.sources.suppressed_count |
7883
| Endpoint.metrics.documents_volume.process_events.suppressed_bytes |
7984
| Endpoint.metrics.documents_volume.process_events.suppressed_count |
8085
| Endpoint.metrics.documents_volume.registry_events.sent_bytes |

custom_documentation/src/endpoint/data_stream/metrics/metrics.yaml

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -82,6 +82,11 @@ fields:
8282
- Endpoint.metrics.documents_volume.overall.suppressed_count
8383
- Endpoint.metrics.documents_volume.process_events.sent_bytes
8484
- Endpoint.metrics.documents_volume.process_events.sent_count
85+
- Endpoint.metrics.documents_volume.process_events.sources.sent_bytes
86+
- Endpoint.metrics.documents_volume.process_events.sources.sent_count
87+
- Endpoint.metrics.documents_volume.process_events.sources.source
88+
- Endpoint.metrics.documents_volume.process_events.sources.suppressed_bytes
89+
- Endpoint.metrics.documents_volume.process_events.sources.suppressed_count
8590
- Endpoint.metrics.documents_volume.process_events.suppressed_bytes
8691
- Endpoint.metrics.documents_volume.process_events.suppressed_count
8792
- Endpoint.metrics.documents_volume.registry_events.sent_bytes

0 commit comments

Comments
 (0)