Explore

• 1: Using Explore
• 1.1: Using Metrics Explorer
• 1.2: Using PromQL Query Explorer
• 1.3: Using PromQL Library
• 1.4: Manage Groupings
• 2: Explore (Legacy)

1 - Using Explore

1.1 - Using Metrics Explorer

You’ll find Metrics Explorer on the Explore slider menu on the Sysdig Monitor UI. Click Explore to display the slider.

Filter Infrastructure & Metrics

You can drill down the infrastructure stack and get insight into the numerous metrics available to you at each level of your stack. These displays can be found by selecting a top-level infrastructure object, then using the scope filtering for relevant infrastructure objects and metrics filtering for desired metrics.

Sysdig Monitor displays only the metrics and dashboards that are relevant to the selected infrastructure object.

Switch Groupings

To switch between available groupings follow the steps outlined below.

Learn More

To take the exploration further, you can:

• Create an Alert that enables you to craft a metric alert based on one of the selected queries.
• Create Dashboard Panel which lets you add the selected metrics to a new dashboard panel.

1.2 - Using PromQL Query Explorer

You’ll find PromQL Query on the Explore slider menu on the Sysdig Monitor UI. To access it, click Explore > PromQL Query.

Query with PromQL

The PromQL field supports manually building PromQL queries. You can enter simple or complex PromQL queries and build dashboards and create alerts. The PromQL Query Explorer allows running up to 5 queries simultaneously.

Explore metrics and labels available in your infrastructure

For example, calculate the number of bytes received in a selected host:

sysdig_host_net_total_bytes{host_mac="0a:e2:e8:b4:6c:1a"}

Calculate the number of bytes received in all the hosts except one:

sysdig_host_net_total_bytes{host_mac!="0a:a3:4b:3e:db:a2"}

Compare current data with historical data:

sysdig_host_net_total_bytes offset 7d

Use arithmetic operators to perform calculations on one or more metrics or labels

For example, calculate the rate of incoming bytes and convert it to bits:

rate(sysdig_host_net_total_bytes[5m]) * 8

Build complex PromQL queries

For example, return summary ingress traffic across all the network interfaces grouped by instances

sum(rate(sysdig_host_net_total_bytes[5m])) by (container_id)

Label Filtering

Time Navigation

To learn how to use the Time Navigation, see Time Navigation.

Toggle Query Results

Learn More

To take the exploration further, users can:

• Create an Alert that enables you to craft a metric alert based on one of the selected queries.
• Create Dashboard Panel which lets you add the selected metrics to a new dashboard panel.

1.3 - Using PromQL Library

Using the examples, you can also perform complex queries against your metrics with one click and get insight into your infrastructure problems which was not previously possible with Sysdig querying.

You’ll find PromQL Library on the Explore slider menu on the Sysdig Monitor UI. To access it, click Explore > PromQL Library.

Use PromQL Library

Click Try me to open PromQL Query Explore. A visualization corresponding to the query will be displayed.

See PromQL Query Explorer for more information.

To copy a query, click the copy icon next to the query.

Filter PromQL Queries

Automatic tag filtering identifies common tags in the given examples. You can use the following to filter queries:

• Visual label filtering: Simply click the desired color-coded label to filter queries based on tags.

• Text search: Use the Text Search bar on the top-left navigation pane.

• Label search: Use the Label drop-down list on the top-left navigation pane.

• Filter using categories: Use the All Categories checkboxes.

1.4 - Manage Groupings

An example grouping is shown below:

The example above groups the infrastructure into four levels. This results in a tree view in the Groupings Editor with four levels, with rows for each infrastructure object applicable to each level.

As each label is selected, Sysdig Monitor automatically filters out labels for the next selection that no longer fit the hierarchy, to ensure that only logical groupings are created.

Sysdig Monitor automatically organizes all the configured groupings that are inapplicable to the current infrastructure under Inapplicable Groupings.

Using Groupings Editor

You can perform the following operations using the Groupings Editor:

• Search existing groupings

• Create a new grouping

• Edit an existing grouping

• Rename a groupings

• Share a grouping with the active team

Search for a Grouping

1. Do one of the following:

   • From Explore, click the Groupings drop-down. Search for the desired grouping.

     

     Either select the desired grouping, or search for it by scrolling down the list or by using the search bar, and then select it.

   • Click Manage Groupings and open the Groupings Editor.

     
     Either select the desired grouping, or search for it by scrolling down the list or by using the search bar, and then select it.

Create a New Grouping

1. In the Explore tab, click the Groupings drop-down, then click Manage Groupings.

2. Open the Groupings Editor.

3. Click Add.

   The New Groupings page is displayed.

4. Enter the following information:

   • Groupings Name: Set an appropriate name to identify the grouping that you are creating.

   • Shared with Team: Select if you want to share the grouping with the active team that you are part of.

   • Hierarchy: Determine the hierarchical representation of the grouping by choosing a top-level label and subsequent ones. Repeat adding the labels until there are no further layers available in the infrastructure label hierarchy.

     You can search for the label by entering the first few characters in the Select label drop-down or scrolling down. As you add labels, the preview displays associated components in your infrastructure.

5. Check the preview to ensure that the label selection is correct.

6. Click Save&Apply.

Rename a Grouping

Renaming is allowed only for groupings that are owned by you. To rename a shared grouping, create a copy of it and edit the name.

1. On Explore, click the Groupings drill-down. Search for the desired grouping.

2. Click the Edit button next to the grouping.

3. Open the Groupings Editor.

4. Select the desired grouping. You can either scroll down the list or use the search bar.

5. Click Edit.

   

   The edit window is displayed on the screen.

6. Specify the new grouping name, then click Save& Apply to save the changes.

Share a Grouping with Your Active Team

Custom groupings are owned by you, and therefore you can share them with all the members of your active team. To share a default grouping, create a custom grouping and use the Shared with Team option in the Grouping Editor.

1. Click the Groupings drill-down and click Manage Groupings.

   The Grouping Editor screen appears.

2. Highlight the relevant grouping and click Edit.

3. Click Shared with Team.

4. Click Save &Apply to save the changes.

To share a default grouping, create a custom grouping and then use the Shared with Team option in the Grouping Editor.

2 - Explore (Legacy)

Switch Groupings

Sysdig Monitor detects and collects the metrics associated with your infrastructure once the agent is deployed in your environment. Use the Explore UI to search, group, and troubleshoot your infrastructure components.

To switch between available data sources:

1. On the Explore tab, click the My Groupings drop-down menu:

2. Select the desired grouping from the drop-down list.

   

Groupings Editor

The Groupings Editor helps you create and manage your infrastructure groupings.

Use Drill-Down Menu

Sysdig Monitor users can drill down into the infrastructure by using the numerous dashboards and metrics available for display in the Explore UI. These displays can be found by selecting an infrastructure object, and opening the drill-down menu.

Sysdig Monitor only displays the metrics and dashboards that are relevant to the selected infrastructure object.

Metrics

Sysdig Monitor users can view specific metrics for an infrastructure object by navigating the drill-down menu:

1. On the Explore tab, open the drill-down menu.

2. Navigate to Search Metrics and Dashboard.

   

3. Select the desired metrics.

   The metric will now be presented on the Explore UI, until the user navigates away from it.

   The scope of the metric, when viewed via the drill-down menu, is set to the infrastructure object that you have selected.

Troubleshooting Views

The drill-down menu displays all the default dashboard templates relevant to the selected infrastructure object. These Troubleshooting Views are broken into the following sections:

The scope of the Troubleshooting View, when viewed via the drill-down menu, is set to the infrastructure object that you have selected from the drill-down.

• Application Dashboards

• AWS CloudWatch Dashboards

• Compliance & Security Dashboards

• Containers Dashboards

• Docker Dashboards

• Hosts Infrastructure Dashboards

• Kubernetes Control Plane Dashboards

• Kubernetes Dashboards

• Marathon Dashboards

• Mesos Dashboards

• OpenShift Dashboards

• Rancher Dashboards

• Sysdig Secure Dashboards

• Troubleshooting Dashboards

To navigate to the Troubleshooting Views:

1. On the Explore tab, select an infrastructure object.

2. Open the drill-down menu and select the desired infrastructure element

3. Navigate to Search Metrics and Dashboard.

   

4. Select the desired troubleshooting view.

   The selected dashboard will now be presented on the screen, until you navigate away from it.

Pin and Unpin the Drill-Down Menu

1. On the Explore tab, select an infrastructure object.

2. Open the drill-down menu.

3. Click Pin Menu to pin the menu to the Explore tab.

   

   To unpin the menu, click Unpin Menu at the bottom of the menu.