Visualize Metrics Using the Topology View

Topology View provides an interactive, animated interface to visualize how different components in your system interact with each other in real-time. The interface by default renders a selected host's top processes and their interaction with processes on remote hosts or host groups. Entities in any valid logical grouping can be visually represented with Topology View. The interaction is depicted as nodes and links. Links connect nodes. Nodes and links radially expand from the left.

  • Nodes: The entities participating in network communication. A node could be a process, a container, a host, or any label identified by Sysdig Agent. For example:

    The limit imposed on the maximum number of nodes that can be visualized is as follows:

    • host groups (hosts in a region): 20

    • hosts: 20

    • containers: 20

    • processes: 10

    This limit applies to the entities at any node level.

  • Links: The network connection between nodes.


Hosts and their child processes (host.hostName > serve as the default grouping for the Topology View. Scaling a Topology View is limited by the number of processes and connections. Sysdig Monitor creates the Topology View by identifying network endpoints (IP addresses) derived from system call data.

Topology View in the Explore tab provides pre-defined dashboards to represent CPU Usage, NetworkTraffic, and Response Time metrics, and as such, they are not configurable. It serves as a template diagnostic tool that provides bottom-up inter-process connection metrics as graphs. For a detailed description on each default metric type supported by the Topology View, see Topology Dashboards.

About Topology View

The UI allows you to zoom in, zoom out, fit, pan, and reset the display, and expand and collapse the nodes.

Zoom into an entity by clicking the associated + icon and view the top processes within the selected entity. You can expand the hosts to see individual processes running inside and corresponding metric value. The links indicating network connections are rendered between entities in the selected hierarchy and, when zoomed, between processes and entities. Use the mouse scroll wheel to zoom the content, then left-click and drag to move the map components within the window.

Topology View uses legends and color schemes. This section explains what they mean.

  • The line width (thickness) of the links expresses metric values relative to other connections in the system. Scaling line width is relative to the metric values associated with each link. Topology View dynamically adjusts the legend as the data recorded for each connection changes.

    • The thin black line(—): Lower metric values.

    • The thick black line(): Higher metric values.

    • Dashed lines(---): A previously existed connection. For example, an active connection between node A and B, rendered as a solid line, could dissolve after a data update if that connection does not exist anymore in the new data set. Instead of removing it from the graph, Sysdig Monitor depicts the inactive connection as a dotted line until the next data update. If the connection returns in a subsequent data update, it is rendered again as a solid line. If the connection does not exist, the line will be removed.

  • The color scheme is determined by color coding for the customizable threshold. The nodes are identified by five colors:

    • 373490300.png

      Green indicates the node is healthy.

    • 373490307.png

      Yellow indicates the node is in a warning state.

    • 373490288.png

      Red indicates the node is in a critical state.

    • 373490314.png

      Grey indicates the node state is unknown. An unknown node typically signifies a node where no Sysdig Agent installed.

    • 373490294.png

      Light Blue indicates no threshold is defined for the metrics.

Configure Topology View

You can navigate to the Topology View from the Explore or Dashboard menus.

Access from Explore

The types of Topology View you can see on Explore are pre-defined dashboard templates that contain only a single panel, and as such, they can't be edited.

  1. Click Explore.

  2. On the Explore tab, click the Switch Data Source drop-down menu.

  3. Select Sysdig Agents.

  4. In the My Groupings drop-down, select the desired data source for which you want a topology view.

  5. From the Search Metrics and Dashboard drill-down, select Topology.

  6. Select one of the three pre-defined Dashboards.

    The Topology View for the selected metrics will appear on the screen.