Sysdig Sagehttps://docs.sysdig.com/en/sysdig-monitor/sysdig-sage/Recent content on Sysdig SageenMon, 20 Apr 2026 12:08:14 +0200 https://docs.sysdig.com/icons/sysdig-horizontal.pngSysdig Sagehttps://docs.sysdig.com/en/sysdig-monitor/sysdig-sage/Sysdig logoSysdig Sage - Enable Sysdig Sagehttps://docs.sysdig.com/en/sysdig-monitor/sysdig-sage/#enable-sysdig-sageSysdig Sage for Monitor must first be enabled on your account. Contact your Customer Success Engineer (CSE) to request activation.Sysdig Sage for Monitor must first be enabled on your account. Contact your Customer Success Engineer (CSE) to request activation.

Once activated, a Sysdig Monitor administrator must grant Sysdig Sage permissions to the desired teams:

Create a Custom Role for Sysdig Sage

To use Sysdig Sage, create a custom role and assign the required permissions:

  1. Log in to Sysdig Monitor as an Admin.
  2. Go to Settings > Roles.
  3. Click New Role.
  4. Scroll down to the Monitor section and locate Sysdig Sage.
  5. From the Sysdig Sage dropdown, select Full Access.
  6. Click Save.

For more information about creating roles, see Create a Custom Role.

Create a Team for Sysdig Sage

Create a team to group the users who need access to Sysdig Sage. You will assign this team the custom role in the next step.

  1. Select Settings > Teams.
  2. Click Add team.
  3. Configure the team and select Save.

For more information about team creation, see Create a Team.

Assign Users to the Sysdig Sage Role

Assign users to the Sysdig Sage team and grant them the custom role you created:

  1. Log in to Sysdig Monitor as an Admin.
  2. Go to Settings > Teams.
  3. Select the team you configured for Sysdig Sage.
  4. In the Team Users tab, click Assign User.
  5. From the User dropdown, select the user.
  6. From the Role dropdown, select the Sysdig Sage role you created.
  7. Click Save.

The user now has access to Sysdig Sage.

]]>Enable Sysdig SageSysdig Sage - Get Started with Sysdig Sagehttps://docs.sysdig.com/en/sysdig-monitor/sysdig-sage/#get-started-with-sysdig-sageLog in to Sysdig Monitor. Click the Sysdig Sage icon on the right side of the screen. Enter your question or request in plain language. What You Can Ask Sysdig Sage Use case Description Troubleshoot Kubernetes issues From the events page, click Ask Sysdig Sage. Sysdig Sage investigates the incident using metrics, events, and live logs to provide a diagnosis with remediation steps. Translate natural language to PromQL Enter a question in plain language and Sysdig Sage generates and runs the corresponding PromQL query. For example: “What is the CPU usage of my nginx pods?” or “Show me memory consumption by namespace.” Explore your environment Ask about cluster health, workload status, or resource utilization, and Sysdig Sage correlates signals across your infrastructure.
  • Log in to Sysdig Monitor.
  • Click the Sysdig Sage icon on the right side of the screen.
  • Enter your question or request in plain language.

    • What You Can Ask Sysdig Sage

    Use case Description
    Troubleshoot Kubernetes issues From the events page, click Ask Sysdig Sage. Sysdig Sage investigates the incident using metrics, events, and live logs to provide a diagnosis with remediation steps.
    Translate natural language to PromQL Enter a question in plain language and Sysdig Sage generates and runs the corresponding PromQL query. For example: “What is the CPU usage of my nginx pods?” or “Show me memory consumption by namespace.”
    Explore your environment Ask about cluster health, workload status, or resource utilization, and Sysdig Sage correlates signals across your infrastructure.
    ]]>    Get Started with Sysdig Sage    Sysdig Sage - Data Sourceshttps://docs.sysdig.com/en/sysdig-monitor/sysdig-sage/#data-sourcesSysdig Sage queries the following data sources to build context for each conversation:Sysdig Sage queries the following data sources to build context for each conversation:

    Data source Description
    Metrics PromQL queries for CPU, memory, disk, network, and node-level health signals.
    Dashboards and alerts Sysdig Sage correlates queries from your existing alerts and dashboards, and suggests relevant dashboards to help identify the root cause.
    Kubernetes events Deployment events, pod lifecycle events, and scheduling decisions.
    Kubernetes Advisories Active advisories surfaced from Kubernetes Advisor.
    Live logs Stack traces, panics, and configuration errors from pod output.
    ]]>    Data Sources    Sysdig Sage - Disable Sysdig Sagehttps://docs.sysdig.com/en/sysdig-monitor/sysdig-sage/#disable-sysdig-sageTo revoke Sysdig Sage access for a specific user:Remove User Access

    To revoke Sysdig Sage access for a specific user:

    1. Go to Settings > Teams.
    2. Select the team you created for Sysdig Sage users.
    3. Click the Team Users tab.
    4. Click the options menu (⋮) on the user’s row and select Remove User.

    Disable Sysdig Sage for Your Account

    To fully disable Sysdig Sage across your account, contact your Sysdig representative.

    ]]>    Disable Sysdig Sage