Sysdig API

Sysdig provides REST APIs that enable you to programmatically access and manage Sysdig Monitor, Sysdig Secure, and Sysdig Platform.

API Documentation Status

Sysdig is actively working on improving the Sysdig API. There are two documentation versions:

  • Next Gen Sysdig API docs — This includes new API versions standardized for both Sysdig Monitor and Sysdig Secure.
  • Current Sysdig API docs — You can still use the current APIs until all the new API versions are introduced.

Getting Started

Authentication

To use the APIs, you must authenticate with one of the following authentication options:

  • Team-Based Service Account
  • Global Service Account
  • Sysdig API token (user-based)

To use any of the methods, set an Authorization header and provide a Bearer token:

Authorization: Bearer { team-based service account | global service account | api token }

Obtain the Sysdig API Token

See Retrieve the Sysdig API Token for instructions on retrieving the API token.

Obtain the Service Account

See Service Accounts for instructions on retrieving the Team-Based Service Account.

Authorization

The API documentation provides the permissions required to access a specific endpoint. Available permissions depend on the selected role. Not all permissions or roles are available for Team-Based Service Accounts because they are based on User (non-admin) roles.

See Understand Sysdig Users for more information.

Conventions

API access is over HTTPS. Data is sent and received primarily in JSON format.

HTTP PUT Request Method Convention

Ensure that you provide all fields in the endpoint when using the PUT method, unless otherwise specified in the API endpoint documentation.

Perform the HTTP GET request first to obtain the contents before making any changes.

See the endpoint documentation before using HTTP PUT method.

Access the Sysdig API Using the Regional Endpoints

If you are using Sysdig SaaS, use the following links to access the standardized Sysdig API for each region:

RegionHostname
US-1https://api.us1.sysdig.com
US-2https://api.us2.sysdig.com
US-3https://api.us3.sysdig.com
US-4https://api.us4.sysdig.com
EU-1https://api.eu1.sysdig.com
AU-1https://api.au1.sysdig.com
ME-1https://api.me2.sysdig.com
IN-1https://api.in1.sysdig.com

Access the Sysdig APIs Using Hostname

If you are using Sysdig On-Prem, you can access public APIs use the Sysdig hostname.

Use the format https://api.sysdig.dnsName, where sysdig.dnsName is the hostname from the Installer values.

Access the Documentation

You can access the API docs through the UI or directly using the URL of your SaaS region or On-Prem installation.

Access from the Sysdig UI

  1. Log in to either Sysdig Monitor or Sysdig Secure and click the User menu at the bottom of the left navigation bar.

  2. Look for the group labeled Help, where you will find two entries:

    • Next Gen API Docs - Updated and standardized Sysdig API documentation
    • Current API Docs - Current Sysdig API documentation

Access Next Gen API Documentation Using Regional Endpoints

If you are using Sysdig SaaS, you can access the Next Gen API documentation directly with the following links. The correct link will depend on your SaaS region. See SaaS Regions and IP Ranges for details.

RegionSecureMonitor
US-1https://secure.sysdig.com/apidocs/secure?_product=SDShttps://app.sysdigcloud.com/apidocs/monitor?_product=SDC
US-2https://us2.app.sysdig.com/apidocs/secure?_product=SDShttps://us2.app.sysdig.com/apidocs/monitor?_product=SDC
US-3https://app.us3.sysdig.com/apidocs/secure?_product=SDShttps://app.us3.sysdig.com/apidocs/monitor?_product=SDC
US-4https://app.us4.sysdig.com/apidocs/secure?_product=SDShttps://app.us4.sysdig.com/apidocs/monitor?_product=SDC
EU-1https://eu1.app.sysdig.com/apidocs/secure?_product=SDShttps://eu1.app.sysdig.com/apidocs/monitor?_product=SDC
AU-1https://app.au1.sysdig.com/apidocs/secure?_product=SDShttps://app.au1.sysdig.com/apidocs/monitor?_product=SDC
ME-2https://app.me2.sysdig.com/apidocs/secure?_product=SDShttps://app.me2.sysdig.com/apidocs/monitor?_product=SDC

Access Current API Documentation Using Regional Endpoints

If you are using Sysdig SaaS, you can access the Current API documentation directly with the following links. The correct link will depend on your SaaS region. See SaaS Regions and IP Ranges for details.

RegionSecureMonitor
US-1https://secure.sysdig.com/secure/swagger.htmlhttps://app.sysdigcloud.com/api/public/docs/index.html
US-2https://us2.app.sysdig.com/secure/swagger.htmlhttps://us2.app.sysdig.com/api/public/docs/index.html
US-3https://app.us3.sysdig.com/secure/swagger.htmlhttps://app.us3.sysdig.com/api/public/docs/index.html
US-4https://app.us4.sysdig.com/secure/swagger.htmlhttps://app.us4.sysdig.com/api/public/docs/index.html
EU-1https://eu1.app.sysdig.com/secure/swagger.htmlhttps://eu1.app.sysdig.com/api/public/docs/index.html
AU-1https://app.au1.sysdig.com/secure/swagger.htmlhttps://app.au1.sysdig.com/api/public/docs/index.html
ME-2https://app.me2.sysdig.com/secure/swagger.htmlhttps://app.me2.sysdig.com/api/public/docs/index.html