intro to sysdig: container visibility at scale

Information presented is confidential

The first and onlycontainer-native monitoring solution

Apurva Davé, Sysdig Specialist

Information presented is confidentialInformation presented is confidential

Monitoring containers is different

Microservices and containers break legacy monitoring and analytics tools

Sysdig is the first and only solution that can natively monitor any infrastructure and app, including container-based ones

Information presented is confidentialInformation presented is confidential

Monitoring containers is different

Legacy monitoring approaches cannot see inside containers

Running monitoring agents inside containers is not a viable solution

Yesterday’s monitoring tools don’t understand microservices architectures

Information presented is confidentialInformation presented is confidential

Host OS

Container orchestration & tooling

Network & infrastructure

Container

CoreApp

Sysdig ContainerVision

Unique system instrumentation

Container Container

Infr.App

Information presented is confidentialInformation presented is confidential

Sysdig ContainerVision

Kernel

Docker

Container1

Container2

Container3

App App rkt LXC

Information presented is confidentialInformation presented is confidential

Kernel

Sysdig ContainerVision

Docker

Container1

Container2

Container3

App App Docker LXC

Kernel moduleInstrumentation

Information presented is confidentialInformation presented is confidential

Sysdig ContainerVision

Kernel

Docker

Container1

Container2

Container3

App

App Docker LXC

Sysdig

Docker

collection &analysis

Information presented is confidentialInformation presented is confidential

New instrumentation = Better visibility

Infrastructure based monitoring & alerting

Typical infrastructure monitoring products

Information presented is confidentialInformation presented is confidential

New instrumentation = Better visibility

Application- intelligent Monitoring & alerting

Trace-driven troubleshooting

Service-oriented performance management

Information presented is confidentialInformation presented is confidential

Service-oriented performance management

Monitor applications & logical services (not hosts!)

Service 1 Service 2 Service 3

Computing node

Computing node Computing node

Computing node Computing node

Computing node

Information presented is confidentialInformation presented is confidential

Service-oriented performance management

Monitor applications & logical services (not hosts!)

Service 1 Service 2 Service 3

What’s the response time of my Cassandra service that’s currently distributed over three data centers? What are the

slowest queries?”“

Information presented is confidentialInformation presented is confidential

Service-oriented performance management

Deep, real-time understanding of orchestration metadata

Information presented is confidentialInformation presented is confidential

Application Intelligent Monitoring & Alerting

TemplatesPre-built templates by application & service

No plug-insAutomatic discovery of apps

StatsDZero-config statsD & JMX – no agents inside containers

Anomaly detectionOutlier & deviation based comparisons

Information presented is confidentialInformation presented is confidential

Application Intelligent Monitoring & Alerting

We automatically discover your appsThousands of relevant metrics without a single plug-in or YAML config

Apache Btrfs Cacti

Go

LightTPD

Node.jsPostgreSQLPH

P

Ruby Tomcat

ZooKeeper

Information presented is confidentialInformation presented is confidential

Application Intelligent Monitoring & Alerting

Developers spun up a new service based on apache and mongo last night without letting us know. We deployed sysdig, so we still see it all, without any config.”

“

Information presented is confidentialInformation presented is confidential

Trace-driven troubleshooting

“Dashboard

sCorrelate

eventsTrace file with every system

call

System Call

PID CPU USER TH VIRTRES FILE NET

303 1.5 root 3 280K 57K0 236.00

35 0.5 root 5 37K 02K 0.00

Replay the state of my system last night, when the Auth service alerts fired, 5 minutes before our app went down. Show all the system calls from the containers we destroyed.”

Information presented is confidentialInformation presented is confidential

Demo

Information presented is confidentialInformation presented is confidential

Summary

Deep container visibility

Service oriented performance management

Application intelligent monitoring & alerting

Trace driven troubleshooting

Start a free trial today and see Sysdig running in your own environment!