Sysdig Sage for Monitor

Sysdig Sage is an AI-powered assistant built into Sysdig Monitor that helps you troubleshoot Kubernetes issues and explore metrics with multi-step conversations. You can ask questions in plain language about your infrastructure health, translate natural language into PromQL queries, and get guided root cause analysis for incidents.

Sysdig Sage for Monitor is in Controlled Availability. Contact your Sysdig representative to request access.

Enable Sysdig Sage

Sysdig Sage for Monitor must first be enabled on your account. Contact your Customer Success Engineer (CSE) to request activation.

Once activated, a Sysdig Monitor administrator must grant Sysdig Sage permissions to the desired teams:

Create a Custom Role for Sysdig Sage

To use Sysdig Sage, create a custom role and assign the required permissions:

  1. Log in to Sysdig Monitor as an Admin.
  2. Go to Settings > Roles.
  3. Click New Role.
  4. Scroll down to the Monitor section and locate Sysdig Sage.
  5. From the Sysdig Sage dropdown, select Full Access.
  6. Click Save.

For more information about creating roles, see Create a Custom Role.

Create a Team for Sysdig Sage

Create a team to group the users who need access to Sysdig Sage. You will assign this team the custom role in the next step.

  1. Select Settings > Teams.
  2. Click Add team.
  3. Configure the team and select Save.

For more information about team creation, see Create a Team.

Assign Users to the Sysdig Sage Role

Assign users to the Sysdig Sage team and grant them the custom role you created:

  1. Log in to Sysdig Monitor as an Admin.
  2. Go to Settings > Teams.
  3. Select the team you configured for Sysdig Sage.
  4. In the Team Users tab, click Assign User.
  5. From the User dropdown, select the user.
  6. From the Role dropdown, select the Sysdig Sage role you created.
  7. Click Save.

The user now has access to Sysdig Sage.

Get Started with Sysdig Sage

  1. Log in to Sysdig Monitor.
  2. Click the Sysdig Sage icon on the right side of the screen.
  3. Enter your question or request in plain language.

What You Can Ask Sysdig Sage

Use caseDescription
Troubleshoot Kubernetes issuesFrom the events page, click Ask Sysdig Sage. Sysdig Sage investigates the incident using metrics, events, and live logs to provide a diagnosis with remediation steps.
Translate natural language to PromQLEnter a question in plain language and Sysdig Sage generates and runs the corresponding PromQL query. For example: “What is the CPU usage of my nginx pods?” or “Show me memory consumption by namespace.”
Explore your environmentAsk about cluster health, workload status, or resource utilization, and Sysdig Sage correlates signals across your infrastructure.

Data Sources

Sysdig Sage queries the following data sources to build context for each conversation:

Data sourceDescription
MetricsPromQL queries for CPU, memory, disk, network, and node-level health signals.
Dashboards and alertsSysdig Sage correlates queries from your existing alerts and dashboards, and suggests relevant dashboards to help identify the root cause.
Kubernetes eventsDeployment events, pod lifecycle events, and scheduling decisions.
Kubernetes AdvisoriesActive advisories surfaced from Kubernetes Advisor.
Live logsStack traces, panics, and configuration errors from pod output.

Disable Sysdig Sage

Remove User Access

To revoke Sysdig Sage access for a specific user:

  1. Go to Settings > Teams.
  2. Select the team you created for Sysdig Sage users.
  3. Click the Team Users tab.
  4. Click the options menu (⋮) on the user’s row and select Remove User.

Disable Sysdig Sage for Your Account

To fully disable Sysdig Sage across your account, contact your Sysdig representative.