Sysdig Monitor

Sysdig Monitor is part of Sysdig’s container intelligence platform. Sysdig uses a unified platform to deliver security, monitoring, and forensics in a container- and microservices-friendly architecture. Sysdig Monitor is a monitoring, troubleshooting, and alerting suite offering deep, process-level visibility into dynamic, distributed production environments. Sysdig Monitor captures, correlates, and visualizes full-stack data, and provides dashboards for monitoring.

In the background, the Sysdig agent lives on the hosts being monitored and collects the appropriate metrics and events. Out of the box, the agent reports on a wide variety of pre-defined metrics. Additional metrics and custom parameters are available via agent configuration files. For more information, see the Sysdig Agent Documentation.

Major Benefits

  • Explore and monitor application performance at any level of the infrastructure stack

  • Correlate metrics and events, and compare with past performance

  • Observe platform state and health

  • Auto-detect anomalies

  • Visualize and share performance metrics with out-of-the-box and custom dashboards

  • Powerful, tuned, and flexible alerts

  • Proactively alert on incidents across services, hosts, containers and so on

  • Trigger system captures for offline troubleshooting and forensics

  • Analyze system call activity to accelerate problem resolution

Topics in This Section
Getting Started with Sysdig Monitor

Sysdig Monitor allows you to maximize the visibility of your Kubernetes environments with native Prometheus support. You can troubleshoot issues faster with Sysdig’s eBPF derived metrics, out-of-the-box dashboards, and alerts.


Advisor brings your metrics, alerts, and events into a focused and curated view to help you operate and troubleshoot Kubernetes infrastructure.



Metrics are quantitative values or measures that can be grouped/divided by labels.


Sysdig users can create customized dashboards to display the most useful or relevant views and metrics in a single location.


Alert is the responsive component of Sysdig Monitor. Alerts notify you when an event or issue occurs that requires attention. Events and issues are identified based on changes in the metric values collected by Sysdig Monitor. The Alerts module displays out-of-the-box alerts and a wizard for creating and editing alerts as needed.


An event represents a change of state of an object in a monitored environment. An event indicates an operational change, an exception, or an performance issue.

Monitoring Integrations

Integrations for Sysdig Monitor include a number of platforms, orchestrators, and a wide range of applications designed to extend Monitor capabilities and collect metrics from these systems. Sysdig collects metrics from Prometheus, JMX, StatsD, Kubernetes, and a number of applications to provide a 360-degree view of your infrastructure. Many metrics are collected out of the box; you can also extend the integration or create custom metrics to receive curated insights into your infrastructure stack.


Sysdig capture files contain system calls and other OS events that can be analyzed with either the open-source sysdig or csysdig (curses-based) utilities, and are displayed in the Captures module.