Getting Started with Sysdig Monitor

Get Started Page (SaaS)

The Get Started page targets the key steps to ensure users are getting the most value out of Sysdig Monitor. The page is updated with new steps as users complete tasks and Sysdig adds new features to the product.

The Get Started page also serves as a linking page for

  • Documentation

  • Release Notes

  • The Sysdig Blog

  • Self-Paced Training

  • Support

Users can access the Get Started page at any time by clicking the rocketship in the side menu.


Create a Dashboard

Sysdig users can create customized dashboards to display the most relevant views and metrics for the infrastructure in a single location. Each dashboard is comprised of a series of panels configured to display specific data in a number of different formats. See Dashboards.

Configure a Notification Channel

Notification channels are an easy way to integrate Sysdig with your existing incident management workflows. Sysdig supports email, PagerDuty, Slack, custom webhooks, and more. See Set Up Notification Channels.

Configure an Alert

Sysdig Monitor emits alerts to get proactive notification of events, anomalies, or any incident that requires attention. The alerting system provides out-of-the-box push gateways for regular email, Slack, Cloud-provider notification queues, and custom webhooks, among others. See Alerts.

Kubernetes Infrastructure View

Get a unified view of the health, risk, and capacity of your Kubernetes infrastructure in a multi- and hybrid-cloud environment. See Overview.

Explore your infrastructure & troubleshoot incidents

View and troubleshoot key metrics and entities of your infrastructure stack. Drill down to any layers of your infrastructure hierarchy and view granular level data. See Explore.

Manage your service & application integrations

Provides an at a glance summary of the current state of the infrastructure and helps configure applications to be monitored. See Manage Integrations with Sysdig Spotlight.

Basic Onboarding

This section describes onboarding tips for Sysdig Monitor on-premises versions prior to 3.5.0.

Access the Sysdig Monitor Interface

To access the interface, the Sysdig Agent must be installed. For instructions on installing the Sysdig agent, see the Agent Installation documentation.

  • The first user becomes the administrator.

  • Once agent installation is complete, the Sysdig Monitor interface is available at, if you are in the US East region. For other regions, the format is https://<region> Replace <region> with the region where your Sysidig application is hosted. For example, for Sysdig Monitor in the EU, you use

    See SaaS Regions and IP Ranges and identify the correct URLs associated with your Sysdig application and region.

  • Subsequent users must also have user credentials defined, either through Sysdig Monitor or through an integrated authentication tool.

    For information on creating users, see User and Team Administration.

The Sysdig Monitor Interface

The Explore module is the primary starting point for all troubleshooting with Sysdig Monitor, and the default homepage of the web interface for all users. An overview of the health of the entire infrastructure is displayed in a table, with various infrastructure components broken into a pre-configured hierarchical grouping.


Groupings are hierarchical aggregations that allow users to break down their infrastructure into logical sections to find and view issues. The default out-of-the-box grouping is host.hostName →

For more information on groupings, refer to the Grouping, Scoping, and Segmenting Metrics section.


The left-side menu provides access to the five primary modules within Sysdig Monitor, in addition to the user menus and Spotlight.




The Overview module provides a unified view of the health, risk, and capacity of your Kubernetes infrastructure.


The Explore module provides users with an in-depth overview of the entire infrastructure, and the ability to deep dive into metrics and dashboards to troubleshoot issues.


The Dashboards module allows users to create, modify, and share dashboards.

For more information, refer to the Dashboards documentation.


The Alerts module allows users to create, modify, and enable/disable the current alerts configured in Sysdig Monitor, to ensure infrastructure issues are identified effectively.

For more information, refer to the Alerts documentation.


The Events module provides a detailed list of any events that triggered an alert within the infrastructure.

For more information, refer to the Events documentation.


The Captures page provides a complete list of any capture files that have been created within Sysdig Monitor.

For more information, refer to the Captures documentation.

Manage Integrations with Sysdig Spotlight

Sysdig Spotlight provides an at a glance summary of the current state of the infrastructure and helps configure applications to be monitored.


You manage Sysdig Monitor integrations through Sysdig Spotlight, before being configured separately.

Add an Integration

To add new integrations:

  1. Click the Spotlight (target) icon in the management section of the left-hand sidebar to open Sysdig Spotlight.

  2. Click the Manage Your Integrations link.

  3. Choose the integrations to add by selecting the relevant icon, or by searching for the integration, and then selecting the relevant icon. Multiple integrations can be added at once.

  4. Click the Add X Integration/s button to add the integrations to Sysdig Monitor.

Integrations whose configuration is pending are marked with a warning symbol.


For configuration and supported applications, refer to the Integrations for Sysdig Monitor documentation.

Delete an Integration

To delete existing integrations:

  1. From the Spotlight page, select the integrations to remove.


    Running integrations cannot be removed.

  2. Click the Remove X Integration(s) button.

  3. Click the Remove link to confirm the changes.