diff options
Diffstat (limited to 'collectors/ebpf.plugin/integrations')
17 files changed, 227 insertions, 175 deletions
diff --git a/collectors/ebpf.plugin/integrations/ebpf_cachestat.md b/collectors/ebpf.plugin/integrations/ebpf_cachestat.md index 3f2d2f57d..5bf0a3774 100644 --- a/collectors/ebpf.plugin/integrations/ebpf_cachestat.md +++ b/collectors/ebpf.plugin/integrations/ebpf_cachestat.md @@ -4,6 +4,7 @@ meta_yaml: "https://github.com/netdata/netdata/edit/master/collectors/ebpf.plugi sidebar_label: "eBPF Cachestat" learn_status: "Published" learn_rel_path: "Data Collection/eBPF" +most_popular: False message: "DO NOT EDIT THIS FILE DIRECTLY, IT IS GENERATED BY THE COLLECTOR'S metadata.yaml FILE" endmeta--> @@ -74,16 +75,20 @@ Metrics: These Metrics show grouped information per apps group. -This scope has no labels. +Labels: + +| Label | Description | +|:-----------|:----------------| +| app_group | The name of the group defined in the configuration. | Metrics: | Metric | Dimensions | Unit | |:------|:----------|:----| -| apps.cachestat_ratio | a dimension per app group | % | -| apps.cachestat_dirties | a dimension per app group | page/s | -| apps.cachestat_hits | a dimension per app group | hits/s | -| apps.cachestat_misses | a dimension per app group | misses/s | +| app.ebpf_cachestat_hit_ratio | ratio | % | +| app.ebpf_cachestat_dirty_pages | pages | page/s | +| app.ebpf_cachestat_access | hits | hits/s | +| app.ebpf_cachestat_misses | misses | misses/s | ### Per cgroup @@ -156,15 +161,15 @@ All options are defined inside section `[global]`. | Name | Description | Default | Required | |:----|:-----------|:-------|:--------:| -| update every | Data collection frequency. | 5 | False | -| ebpf load mode | Define whether plugin will monitor the call (`entry`) for the functions or it will also monitor the return (`return`). | entry | False | -| apps | Enable or disable integration with apps.plugin | no | False | -| cgroups | Enable or disable integration with cgroup.plugin | no | False | -| pid table size | Number of elements stored inside hash tables used to monitor calls per PID. | 32768 | False | -| ebpf type format | Define the file type to load an eBPF program. Three options are available: `legacy` (Attach only `kprobe`), `co-re` (Plugin tries to use `trampoline` when available), and `auto` (plugin check OS configuration before to load). | auto | False | -| ebpf co-re tracing | Select the attach method used by plugin when `co-re` is defined in previous option. Two options are available: `trampoline` (Option with lowest overhead), and `probe` (the same of legacy code). | trampoline | False | -| maps per core | Define how plugin will load their hash maps. When enabled (`yes`) plugin will load one hash table per core, instead to have centralized information. | yes | False | -| lifetime | Set default lifetime for thread when enabled by cloud. | 300 | False | +| update every | Data collection frequency. | 5 | no | +| ebpf load mode | Define whether plugin will monitor the call (`entry`) for the functions or it will also monitor the return (`return`). | entry | no | +| apps | Enable or disable integration with apps.plugin | no | no | +| cgroups | Enable or disable integration with cgroup.plugin | no | no | +| pid table size | Number of elements stored inside hash tables used to monitor calls per PID. | 32768 | no | +| ebpf type format | Define the file type to load an eBPF program. Three options are available: `legacy` (Attach only `kprobe`), `co-re` (Plugin tries to use `trampoline` when available), and `auto` (plugin check OS configuration before to load). | auto | no | +| ebpf co-re tracing | Select the attach method used by plugin when `co-re` is defined in previous option. Two options are available: `trampoline` (Option with lowest overhead), and `probe` (the same of legacy code). | trampoline | no | +| maps per core | Define how plugin will load their hash maps. When enabled (`yes`) plugin will load one hash table per core, instead to have centralized information. | yes | no | +| lifetime | Set default lifetime for thread when enabled by cloud. | 300 | no | </details> diff --git a/collectors/ebpf.plugin/integrations/ebpf_dcstat.md b/collectors/ebpf.plugin/integrations/ebpf_dcstat.md index 6d9abea2c..4c5719026 100644 --- a/collectors/ebpf.plugin/integrations/ebpf_dcstat.md +++ b/collectors/ebpf.plugin/integrations/ebpf_dcstat.md @@ -4,6 +4,7 @@ meta_yaml: "https://github.com/netdata/netdata/edit/master/collectors/ebpf.plugi sidebar_label: "eBPF DCstat" learn_status: "Published" learn_rel_path: "Data Collection/eBPF" +most_popular: False message: "DO NOT EDIT THIS FILE DIRECTLY, IT IS GENERATED BY THE COLLECTOR'S metadata.yaml FILE" endmeta--> @@ -59,16 +60,20 @@ The scope defines the instance that the metric belongs to. An instance is unique These Metrics show grouped information per apps group. -This scope has no labels. +Labels: + +| Label | Description | +|:-----------|:----------------| +| app_group | The name of the group defined in the configuration. | Metrics: | Metric | Dimensions | Unit | |:------|:----------|:----| -| apps.dc_ratio | a dimension per app group | % | -| apps.dc_reference | a dimension per app group | files | -| apps.dc_not_cache | a dimension per app group | files | -| apps.dc_not_found | a dimension per app group | files | +| app.ebpf_dc_ratio | ratio | % | +| app.ebpf_dc_reference | files | files | +| app.ebpf_dc_not_cache | files | files | +| app.ebpf_dc_not_found | files | files | ### Per filesystem @@ -154,15 +159,15 @@ All options are defined inside section `[global]`. | Name | Description | Default | Required | |:----|:-----------|:-------|:--------:| -| update every | Data collection frequency. | 5 | False | -| ebpf load mode | Define whether plugin will monitor the call (`entry`) for the functions or it will also monitor the return (`return`). | entry | False | -| apps | Enable or disable integration with apps.plugin | no | False | -| cgroups | Enable or disable integration with cgroup.plugin | no | False | -| pid table size | Number of elements stored inside hash tables used to monitor calls per PID. | 32768 | False | -| ebpf type format | Define the file type to load an eBPF program. Three options are available: `legacy` (Attach only `kprobe`), `co-re` (Plugin tries to use `trampoline` when available), and `auto` (plugin check OS configuration before to load). | auto | False | -| ebpf co-re tracing | Select the attach method used by plugin when `co-re` is defined in previous option. Two options are available: `trampoline` (Option with lowest overhead), and `probe` (the same of legacy code). | trampoline | False | -| maps per core | Define how plugin will load their hash maps. When enabled (`yes`) plugin will load one hash table per core, instead to have centralized information. | yes | False | -| lifetime | Set default lifetime for thread when enabled by cloud. | 300 | False | +| update every | Data collection frequency. | 5 | no | +| ebpf load mode | Define whether plugin will monitor the call (`entry`) for the functions or it will also monitor the return (`return`). | entry | no | +| apps | Enable or disable integration with apps.plugin | no | no | +| cgroups | Enable or disable integration with cgroup.plugin | no | no | +| pid table size | Number of elements stored inside hash tables used to monitor calls per PID. | 32768 | no | +| ebpf type format | Define the file type to load an eBPF program. Three options are available: `legacy` (Attach only `kprobe`), `co-re` (Plugin tries to use `trampoline` when available), and `auto` (plugin check OS configuration before to load). | auto | no | +| ebpf co-re tracing | Select the attach method used by plugin when `co-re` is defined in previous option. Two options are available: `trampoline` (Option with lowest overhead), and `probe` (the same of legacy code). | trampoline | no | +| maps per core | Define how plugin will load their hash maps. When enabled (`yes`) plugin will load one hash table per core, instead to have centralized information. | yes | no | +| lifetime | Set default lifetime for thread when enabled by cloud. | 300 | no | </details> diff --git a/collectors/ebpf.plugin/integrations/ebpf_disk.md b/collectors/ebpf.plugin/integrations/ebpf_disk.md index 12eafce86..557da125d 100644 --- a/collectors/ebpf.plugin/integrations/ebpf_disk.md +++ b/collectors/ebpf.plugin/integrations/ebpf_disk.md @@ -4,6 +4,7 @@ meta_yaml: "https://github.com/netdata/netdata/edit/master/collectors/ebpf.plugi sidebar_label: "eBPF Disk" learn_status: "Published" learn_rel_path: "Data Collection/eBPF" +most_popular: False message: "DO NOT EDIT THIS FILE DIRECTLY, IT IS GENERATED BY THE COLLECTOR'S metadata.yaml FILE" endmeta--> @@ -124,9 +125,9 @@ All options are defined inside section `[global]`. | Name | Description | Default | Required | |:----|:-----------|:-------|:--------:| -| update every | Data collection frequency. | 5 | False | -| ebpf load mode | Define whether plugin will monitor the call (`entry`) for the functions or it will also monitor the return (`return`). | entry | False | -| lifetime | Set default lifetime for thread when enabled by cloud. | 300 | False | +| update every | Data collection frequency. | 5 | no | +| ebpf load mode | Define whether plugin will monitor the call (`entry`) for the functions or it will also monitor the return (`return`). | entry | no | +| lifetime | Set default lifetime for thread when enabled by cloud. | 300 | no | </details> diff --git a/collectors/ebpf.plugin/integrations/ebpf_filedescriptor.md b/collectors/ebpf.plugin/integrations/ebpf_filedescriptor.md index 0a749ec31..23f5bd26e 100644 --- a/collectors/ebpf.plugin/integrations/ebpf_filedescriptor.md +++ b/collectors/ebpf.plugin/integrations/ebpf_filedescriptor.md @@ -4,6 +4,7 @@ meta_yaml: "https://github.com/netdata/netdata/edit/master/collectors/ebpf.plugi sidebar_label: "eBPF Filedescriptor" learn_status: "Published" learn_rel_path: "Data Collection/eBPF" +most_popular: False message: "DO NOT EDIT THIS FILE DIRECTLY, IT IS GENERATED BY THE COLLECTOR'S metadata.yaml FILE" endmeta--> @@ -91,16 +92,20 @@ Metrics: These Metrics show grouped information per apps group. -This scope has no labels. +Labels: + +| Label | Description | +|:-----------|:----------------| +| app_group | The name of the group defined in the configuration. | Metrics: | Metric | Dimensions | Unit | |:------|:----------|:----| -| apps.file_open | a dimension per app group | calls/s | -| apps.file_open_error | a dimension per app group | calls/s | -| apps.file_closed | a dimension per app group | calls/s | -| apps.file_close_error | a dimension per app group | calls/s | +| app.ebpf_file_open | calls | calls/s | +| app.ebpf_file_open_error | calls | calls/s | +| app.ebpf_file_closed | calls | calls/s | +| app.ebpf_file_close_error | calls | calls/s | @@ -154,15 +159,15 @@ All options are defined inside section `[global]`. | Name | Description | Default | Required | |:----|:-----------|:-------|:--------:| -| update every | Data collection frequency. | 5 | False | -| ebpf load mode | Define whether plugin will monitor the call (`entry`) for the functions or it will also monitor the return (`return`). | entry | False | -| apps | Enable or disable integration with apps.plugin | no | False | -| cgroups | Enable or disable integration with cgroup.plugin | no | False | -| pid table size | Number of elements stored inside hash tables used to monitor calls per PID. | 32768 | False | -| ebpf type format | Define the file type to load an eBPF program. Three options are available: `legacy` (Attach only `kprobe`), `co-re` (Plugin tries to use `trampoline` when available), and `auto` (plugin check OS configuration before to load). | auto | False | -| ebpf co-re tracing | Select the attach method used by plugin when `co-re` is defined in previous option. Two options are available: `trampoline` (Option with lowest overhead), and `probe` (the same of legacy code). | trampoline | False | -| maps per core | Define how plugin will load their hash maps. When enabled (`yes`) plugin will load one hash table per core, instead to have centralized information. | yes | False | -| lifetime | Set default lifetime for thread when enabled by cloud. | 300 | False | +| update every | Data collection frequency. | 5 | no | +| ebpf load mode | Define whether plugin will monitor the call (`entry`) for the functions or it will also monitor the return (`return`). | entry | no | +| apps | Enable or disable integration with apps.plugin | no | no | +| cgroups | Enable or disable integration with cgroup.plugin | no | no | +| pid table size | Number of elements stored inside hash tables used to monitor calls per PID. | 32768 | no | +| ebpf type format | Define the file type to load an eBPF program. Three options are available: `legacy` (Attach only `kprobe`), `co-re` (Plugin tries to use `trampoline` when available), and `auto` (plugin check OS configuration before to load). | auto | no | +| ebpf co-re tracing | Select the attach method used by plugin when `co-re` is defined in previous option. Two options are available: `trampoline` (Option with lowest overhead), and `probe` (the same of legacy code). | trampoline | no | +| maps per core | Define how plugin will load their hash maps. When enabled (`yes`) plugin will load one hash table per core, instead to have centralized information. | yes | no | +| lifetime | Set default lifetime for thread when enabled by cloud. | 300 | no | </details> diff --git a/collectors/ebpf.plugin/integrations/ebpf_filesystem.md b/collectors/ebpf.plugin/integrations/ebpf_filesystem.md index b6050657b..7a1bb832b 100644 --- a/collectors/ebpf.plugin/integrations/ebpf_filesystem.md +++ b/collectors/ebpf.plugin/integrations/ebpf_filesystem.md @@ -4,6 +4,7 @@ meta_yaml: "https://github.com/netdata/netdata/edit/master/collectors/ebpf.plugi sidebar_label: "eBPF Filesystem" learn_status: "Published" learn_rel_path: "Data Collection/eBPF" +most_popular: False message: "DO NOT EDIT THIS FILE DIRECTLY, IT IS GENERATED BY THE COLLECTOR'S metadata.yaml FILE" endmeta--> @@ -145,14 +146,14 @@ This configuration file have two different sections. The `[global]` overwrites d | Name | Description | Default | Required | |:----|:-----------|:-------|:--------:| -| update every | Data collection frequency. | 5 | False | -| ebpf load mode | Define whether plugin will monitor the call (`entry`) for the functions or it will also monitor the return (`return`). | entry | False | -| lifetime | Set default lifetime for thread when enabled by cloud. | 300 | False | -| btrfsdist | Enable or disable latency monitoring for functions associated with btrfs filesystem. | yes | False | -| ext4dist | Enable or disable latency monitoring for functions associated with ext4 filesystem. | yes | False | -| nfsdist | Enable or disable latency monitoring for functions associated with nfs filesystem. | yes | False | -| xfsdist | Enable or disable latency monitoring for functions associated with xfs filesystem. | yes | False | -| zfsdist | Enable or disable latency monitoring for functions associated with zfs filesystem. | yes | False | +| update every | Data collection frequency. | 5 | no | +| ebpf load mode | Define whether plugin will monitor the call (`entry`) for the functions or it will also monitor the return (`return`). | entry | no | +| lifetime | Set default lifetime for thread when enabled by cloud. | 300 | no | +| btrfsdist | Enable or disable latency monitoring for functions associated with btrfs filesystem. | yes | no | +| ext4dist | Enable or disable latency monitoring for functions associated with ext4 filesystem. | yes | no | +| nfsdist | Enable or disable latency monitoring for functions associated with nfs filesystem. | yes | no | +| xfsdist | Enable or disable latency monitoring for functions associated with xfs filesystem. | yes | no | +| zfsdist | Enable or disable latency monitoring for functions associated with zfs filesystem. | yes | no | </details> diff --git a/collectors/ebpf.plugin/integrations/ebpf_hardirq.md b/collectors/ebpf.plugin/integrations/ebpf_hardirq.md index cd89cd589..f9b529624 100644 --- a/collectors/ebpf.plugin/integrations/ebpf_hardirq.md +++ b/collectors/ebpf.plugin/integrations/ebpf_hardirq.md @@ -4,6 +4,7 @@ meta_yaml: "https://github.com/netdata/netdata/edit/master/collectors/ebpf.plugi sidebar_label: "eBPF Hardirq" learn_status: "Published" learn_rel_path: "Data Collection/eBPF" +most_popular: False message: "DO NOT EDIT THIS FILE DIRECTLY, IT IS GENERATED BY THE COLLECTOR'S metadata.yaml FILE" endmeta--> @@ -124,9 +125,9 @@ All options are defined inside section `[global]`. | Name | Description | Default | Required | |:----|:-----------|:-------|:--------:| -| update every | Data collection frequency. | 5 | False | -| ebpf load mode | Define whether plugin will monitor the call (`entry`) for the functions or it will also monitor the return (`return`). | entry | False | -| lifetime | Set default lifetime for thread when enabled by cloud. | 300 | False | +| update every | Data collection frequency. | 5 | no | +| ebpf load mode | Define whether plugin will monitor the call (`entry`) for the functions or it will also monitor the return (`return`). | entry | no | +| lifetime | Set default lifetime for thread when enabled by cloud. | 300 | no | </details> diff --git a/collectors/ebpf.plugin/integrations/ebpf_mdflush.md b/collectors/ebpf.plugin/integrations/ebpf_mdflush.md index 51df30b47..0081b7d83 100644 --- a/collectors/ebpf.plugin/integrations/ebpf_mdflush.md +++ b/collectors/ebpf.plugin/integrations/ebpf_mdflush.md @@ -4,6 +4,7 @@ meta_yaml: "https://github.com/netdata/netdata/edit/master/collectors/ebpf.plugi sidebar_label: "eBPF MDflush" learn_status: "Published" learn_rel_path: "Data Collection/eBPF" +most_popular: False message: "DO NOT EDIT THIS FILE DIRECTLY, IT IS GENERATED BY THE COLLECTOR'S metadata.yaml FILE" endmeta--> @@ -119,9 +120,9 @@ All options are defined inside section `[global]`. | Name | Description | Default | Required | |:----|:-----------|:-------|:--------:| -| update every | Data collection frequency. | 5 | False | -| ebpf load mode | Define whether plugin will monitor the call (`entry`) for the functions or it will also monitor the return (`return`). | entry | False | -| lifetime | Set default lifetime for thread when enabled by cloud. | 300 | False | +| update every | Data collection frequency. | 5 | no | +| ebpf load mode | Define whether plugin will monitor the call (`entry`) for the functions or it will also monitor the return (`return`). | entry | no | +| lifetime | Set default lifetime for thread when enabled by cloud. | 300 | no | </details> diff --git a/collectors/ebpf.plugin/integrations/ebpf_mount.md b/collectors/ebpf.plugin/integrations/ebpf_mount.md index 063ffcbad..d19e57809 100644 --- a/collectors/ebpf.plugin/integrations/ebpf_mount.md +++ b/collectors/ebpf.plugin/integrations/ebpf_mount.md @@ -4,6 +4,7 @@ meta_yaml: "https://github.com/netdata/netdata/edit/master/collectors/ebpf.plugi sidebar_label: "eBPF Mount" learn_status: "Published" learn_rel_path: "Data Collection/eBPF" +most_popular: False message: "DO NOT EDIT THIS FILE DIRECTLY, IT IS GENERATED BY THE COLLECTOR'S metadata.yaml FILE" endmeta--> @@ -125,11 +126,11 @@ All options are defined inside section `[global]`. | Name | Description | Default | Required | |:----|:-----------|:-------|:--------:| -| update every | Data collection frequency. | 5 | False | -| ebpf load mode | Define whether plugin will monitor the call (`entry`) for the functions or it will also monitor the return (`return`). | entry | False | -| ebpf type format | Define the file type to load an eBPF program. Three options are available: `legacy` (Attach only `kprobe`), `co-re` (Plugin tries to use `trampoline` when available), and `auto` (plugin check OS configuration before to load). | auto | False | -| ebpf co-re tracing | Select the attach method used by plugin when `co-re` is defined in previous option. Two options are available: `trampoline` (Option with lowest overhead), and `probe` (the same of legacy code). | trampoline | False | -| lifetime | Set default lifetime for thread when enabled by cloud. | 300 | False | +| update every | Data collection frequency. | 5 | no | +| ebpf load mode | Define whether plugin will monitor the call (`entry`) for the functions or it will also monitor the return (`return`). | entry | no | +| ebpf type format | Define the file type to load an eBPF program. Three options are available: `legacy` (Attach only `kprobe`), `co-re` (Plugin tries to use `trampoline` when available), and `auto` (plugin check OS configuration before to load). | auto | no | +| ebpf co-re tracing | Select the attach method used by plugin when `co-re` is defined in previous option. Two options are available: `trampoline` (Option with lowest overhead), and `probe` (the same of legacy code). | trampoline | no | +| lifetime | Set default lifetime for thread when enabled by cloud. | 300 | no | </details> diff --git a/collectors/ebpf.plugin/integrations/ebpf_oomkill.md b/collectors/ebpf.plugin/integrations/ebpf_oomkill.md index 372921387..897cddfac 100644 --- a/collectors/ebpf.plugin/integrations/ebpf_oomkill.md +++ b/collectors/ebpf.plugin/integrations/ebpf_oomkill.md @@ -4,6 +4,7 @@ meta_yaml: "https://github.com/netdata/netdata/edit/master/collectors/ebpf.plugi sidebar_label: "eBPF OOMkill" learn_status: "Published" learn_rel_path: "Data Collection/eBPF" +most_popular: False message: "DO NOT EDIT THIS FILE DIRECTLY, IT IS GENERATED BY THE COLLECTOR'S metadata.yaml FILE" endmeta--> @@ -72,13 +73,17 @@ Metrics: These metrics show cgroup/service that reached OOM. -This scope has no labels. +Labels: + +| Label | Description | +|:-----------|:----------------| +| app_group | The name of the group defined in the configuration. | Metrics: | Metric | Dimensions | Unit | |:------|:----------|:----| -| apps.oomkills | a dimension per app group | kills | +| app.oomkill | kills | kills | diff --git a/collectors/ebpf.plugin/integrations/ebpf_process.md b/collectors/ebpf.plugin/integrations/ebpf_process.md index 3bd92a06e..109890139 100644 --- a/collectors/ebpf.plugin/integrations/ebpf_process.md +++ b/collectors/ebpf.plugin/integrations/ebpf_process.md @@ -4,6 +4,7 @@ meta_yaml: "https://github.com/netdata/netdata/edit/master/collectors/ebpf.plugi sidebar_label: "eBPF Process" learn_status: "Published" learn_rel_path: "Data Collection/eBPF" +most_popular: False message: "DO NOT EDIT THIS FILE DIRECTLY, IT IS GENERATED BY THE COLLECTOR'S metadata.yaml FILE" endmeta--> diff --git a/collectors/ebpf.plugin/integrations/ebpf_processes.md b/collectors/ebpf.plugin/integrations/ebpf_processes.md index 6d3c0d40e..62542359a 100644 --- a/collectors/ebpf.plugin/integrations/ebpf_processes.md +++ b/collectors/ebpf.plugin/integrations/ebpf_processes.md @@ -4,6 +4,7 @@ meta_yaml: "https://github.com/netdata/netdata/edit/master/collectors/ebpf.plugi sidebar_label: "eBPF Processes" learn_status: "Published" learn_rel_path: "Data Collection/eBPF" +most_popular: False message: "DO NOT EDIT THIS FILE DIRECTLY, IT IS GENERATED BY THE COLLECTOR'S metadata.yaml FILE" endmeta--> @@ -74,17 +75,21 @@ Metrics: These Metrics show grouped information per apps group. -This scope has no labels. +Labels: + +| Label | Description | +|:-----------|:----------------| +| app_group | The name of the group defined in the configuration. | Metrics: | Metric | Dimensions | Unit | |:------|:----------|:----| -| apps.process_create | a dimension per app group | calls/s | -| apps.thread_create | a dimension per app group | calls/s | -| apps.task_exit | a dimension per app group | calls/s | -| apps.task_close | a dimension per app group | calls/s | -| apps.task_error | a dimension per app group | calls/s | +| app.process_create | calls | calls/s | +| app.thread_create | call | calls/s | +| app.task_exit | call | calls/s | +| app.task_close | call | calls/s | +| app.task_error | app | calls/s | ### Per cgroup @@ -164,15 +169,15 @@ All options are defined inside section `[global]`. | Name | Description | Default | Required | |:----|:-----------|:-------|:--------:| -| update every | Data collection frequency. | 5 | False | -| ebpf load mode | Define whether plugin will monitor the call (`entry`) for the functions or it will also monitor the return (`return`). | entry | False | -| apps | Enable or disable integration with apps.plugin | no | False | -| cgroups | Enable or disable integration with cgroup.plugin | no | False | -| pid table size | Number of elements stored inside hash tables used to monitor calls per PID. | 32768 | False | -| ebpf type format | Define the file type to load an eBPF program. Three options are available: `legacy` (Attach only `kprobe`), `co-re` (Plugin tries to use `trampoline` when available), and `auto` (plugin check OS configuration before to load). | auto | False | -| ebpf co-re tracing | Select the attach method used by plugin when `co-re` is defined in previous option. Two options are available: `trampoline` (Option with lowest overhead), and `probe` (the same of legacy code). This plugin will always try to attach a tracepoint, so option here will impact only function used to monitor task (thread and process) creation. | trampoline | False | -| maps per core | Define how plugin will load their hash maps. When enabled (`yes`) plugin will load one hash table per core, instead to have centralized information. | yes | False | -| lifetime | Set default lifetime for thread when enabled by cloud. | 300 | False | +| update every | Data collection frequency. | 5 | no | +| ebpf load mode | Define whether plugin will monitor the call (`entry`) for the functions or it will also monitor the return (`return`). | entry | no | +| apps | Enable or disable integration with apps.plugin | no | no | +| cgroups | Enable or disable integration with cgroup.plugin | no | no | +| pid table size | Number of elements stored inside hash tables used to monitor calls per PID. | 32768 | no | +| ebpf type format | Define the file type to load an eBPF program. Three options are available: `legacy` (Attach only `kprobe`), `co-re` (Plugin tries to use `trampoline` when available), and `auto` (plugin check OS configuration before to load). | auto | no | +| ebpf co-re tracing | Select the attach method used by plugin when `co-re` is defined in previous option. Two options are available: `trampoline` (Option with lowest overhead), and `probe` (the same of legacy code). This plugin will always try to attach a tracepoint, so option here will impact only function used to monitor task (thread and process) creation. | trampoline | no | +| maps per core | Define how plugin will load their hash maps. When enabled (`yes`) plugin will load one hash table per core, instead to have centralized information. | yes | no | +| lifetime | Set default lifetime for thread when enabled by cloud. | 300 | no | </details> diff --git a/collectors/ebpf.plugin/integrations/ebpf_shm.md b/collectors/ebpf.plugin/integrations/ebpf_shm.md index 2cfcbeb16..ffa05c770 100644 --- a/collectors/ebpf.plugin/integrations/ebpf_shm.md +++ b/collectors/ebpf.plugin/integrations/ebpf_shm.md @@ -4,6 +4,7 @@ meta_yaml: "https://github.com/netdata/netdata/edit/master/collectors/ebpf.plugi sidebar_label: "eBPF SHM" learn_status: "Published" learn_rel_path: "Data Collection/eBPF" +most_popular: False message: "DO NOT EDIT THIS FILE DIRECTLY, IT IS GENERATED BY THE COLLECTOR'S metadata.yaml FILE" endmeta--> @@ -78,16 +79,20 @@ Metrics: These Metrics show grouped information per apps group. -This scope has no labels. +Labels: + +| Label | Description | +|:-----------|:----------------| +| app_group | The name of the group defined in the configuration. | Metrics: | Metric | Dimensions | Unit | |:------|:----------|:----| -| apps.shmget_call | a dimension per app group | calls/s | -| apps.shmat_call | a dimension per app group | calls/s | -| apps.shmdt_call | a dimension per app group | calls/s | -| apps.shmctl_call | a dimension per app group | calls/s | +| app.ebpf_shmget_call | calls | calls/s | +| app.ebpf_shmat_call | calls | calls/s | +| app.ebpf_shmdt_call | calls | calls/s | +| app.ebpf_shmctl_call | calls | calls/s | ### Per eBPF SHM instance @@ -158,19 +163,19 @@ This configuration file have two different sections. The `[global]` overwrites a | Name | Description | Default | Required | |:----|:-----------|:-------|:--------:| -| update every | Data collection frequency. | 5 | False | -| ebpf load mode | Define whether plugin will monitor the call (`entry`) for the functions or it will also monitor the return (`return`). | entry | False | -| apps | Enable or disable integration with apps.plugin | no | False | -| cgroups | Enable or disable integration with cgroup.plugin | no | False | -| pid table size | Number of elements stored inside hash tables used to monitor calls per PID. | 32768 | False | -| ebpf type format | Define the file type to load an eBPF program. Three options are available: `legacy` (Attach only `kprobe`), `co-re` (Plugin tries to use `trampoline` when available), and `auto` (plugin check OS configuration before to load). | auto | False | -| ebpf co-re tracing | Select the attach method used by plugin when `co-re` is defined in previous option. Two options are available: `trampoline` (Option with lowest overhead), and `probe` (the same of legacy code). | trampoline | False | -| maps per core | Define how plugin will load their hash maps. When enabled (`yes`) plugin will load one hash table per core, instead to have centralized information. | yes | False | -| lifetime | Set default lifetime for thread when enabled by cloud. | 300 | False | -| shmget | Enable or disable monitoring for syscall `shmget` | yes | False | -| shmat | Enable or disable monitoring for syscall `shmat` | yes | False | -| shmdt | Enable or disable monitoring for syscall `shmdt` | yes | False | -| shmctl | Enable or disable monitoring for syscall `shmctl` | yes | False | +| update every | Data collection frequency. | 5 | no | +| ebpf load mode | Define whether plugin will monitor the call (`entry`) for the functions or it will also monitor the return (`return`). | entry | no | +| apps | Enable or disable integration with apps.plugin | no | no | +| cgroups | Enable or disable integration with cgroup.plugin | no | no | +| pid table size | Number of elements stored inside hash tables used to monitor calls per PID. | 32768 | no | +| ebpf type format | Define the file type to load an eBPF program. Three options are available: `legacy` (Attach only `kprobe`), `co-re` (Plugin tries to use `trampoline` when available), and `auto` (plugin check OS configuration before to load). | auto | no | +| ebpf co-re tracing | Select the attach method used by plugin when `co-re` is defined in previous option. Two options are available: `trampoline` (Option with lowest overhead), and `probe` (the same of legacy code). | trampoline | no | +| maps per core | Define how plugin will load their hash maps. When enabled (`yes`) plugin will load one hash table per core, instead to have centralized information. | yes | no | +| lifetime | Set default lifetime for thread when enabled by cloud. | 300 | no | +| shmget | Enable or disable monitoring for syscall `shmget` | yes | no | +| shmat | Enable or disable monitoring for syscall `shmat` | yes | no | +| shmdt | Enable or disable monitoring for syscall `shmdt` | yes | no | +| shmctl | Enable or disable monitoring for syscall `shmctl` | yes | no | </details> diff --git a/collectors/ebpf.plugin/integrations/ebpf_socket.md b/collectors/ebpf.plugin/integrations/ebpf_socket.md index 3d621f439..dc7a7d07b 100644 --- a/collectors/ebpf.plugin/integrations/ebpf_socket.md +++ b/collectors/ebpf.plugin/integrations/ebpf_socket.md @@ -4,6 +4,7 @@ meta_yaml: "https://github.com/netdata/netdata/edit/master/collectors/ebpf.plugi sidebar_label: "eBPF Socket" learn_status: "Published" learn_rel_path: "Data Collection/eBPF" +most_popular: False message: "DO NOT EDIT THIS FILE DIRECTLY, IT IS GENERATED BY THE COLLECTOR'S metadata.yaml FILE" endmeta--> @@ -79,22 +80,25 @@ Metrics: These metrics show grouped information per apps group. -This scope has no labels. +Labels: + +| Label | Description | +|:-----------|:----------------| +| app_group | The name of the group defined in the configuration. | Metrics: | Metric | Dimensions | Unit | |:------|:----------|:----| -| apps.outbound_conn_v4 | a dimension per app group | connections/s | -| apps.outbound_conn_v6 | a dimension per app group | connections/s | -| apps.total_bandwidth_sent | a dimension per app group | kilobits/s | -| apps.total_bandwidth_recv | a dimension per app group | kilobits/s | -| apps.bandwidth_tcp_send | a dimension per app group | calls/s | -| apps.bandwidth_tcp_recv | a dimension per app group | calls/s | -| apps.bandwidth_tcp_retransmit | a dimension per app group | calls/s | -| apps.bandwidth_udp_send | a dimension per app group | calls/s | -| apps.bandwidth_udp_recv | a dimension per app group | calls/s | -| services.net_conn_ipv4 | a dimension per systemd service | connections/s | +| app.ebpf_call_tcp_v4_connection | connections | connections/s | +| app.app.ebpf_call_tcp_v6_connection | connections | connections/s | +| app.ebpf_sock_bytes_sent | bandwidth | kilobits/s | +| app.ebpf_sock_bytes_received | bandwidth | kilobits/s | +| app.ebpf_call_tcp_sendmsg | calls | calls/s | +| app.ebpf_call_tcp_cleanup_rbuf | calls | calls/s | +| app.ebpf_call_tcp_retransmit | calls | calls/s | +| app.ebpf_call_udp_sendmsg | calls | calls/s | +| app.ebpf_call_udp_recvmsg | calls | calls/s | ### Per cgroup @@ -176,18 +180,18 @@ All options are defined inside section `[global]`. Options inside `network conne | Name | Description | Default | Required | |:----|:-----------|:-------|:--------:| -| update every | Data collection frequency. | 5 | False | -| ebpf load mode | Define whether plugin will monitor the call (`entry`) for the functions or it will also monitor the return (`return`). | entry | False | -| apps | Enable or disable integration with apps.plugin | no | False | -| cgroups | Enable or disable integration with cgroup.plugin | no | False | -| bandwidth table size | Number of elements stored inside hash tables used to monitor calls per PID. | 16384 | False | -| ipv4 connection table size | Number of elements stored inside hash tables used to monitor calls per IPV4 connections. | 16384 | False | -| ipv6 connection table size | Number of elements stored inside hash tables used to monitor calls per IPV6 connections. | 16384 | False | -| udp connection table size | Number of temporary elements stored inside hash tables used to monitor UDP connections. | 4096 | False | -| ebpf type format | Define the file type to load an eBPF program. Three options are available: `legacy` (Attach only `kprobe`), `co-re` (Plugin tries to use `trampoline` when available), and `auto` (plugin check OS configuration before to load). | auto | False | -| ebpf co-re tracing | Select the attach method used by plugin when `co-re` is defined in previous option. Two options are available: `trampoline` (Option with lowest overhead), and `probe` (the same of legacy code). | trampoline | False | -| maps per core | Define how plugin will load their hash maps. When enabled (`yes`) plugin will load one hash table per core, instead to have centralized information. | yes | False | -| lifetime | Set default lifetime for thread when enabled by cloud. | 300 | False | +| update every | Data collection frequency. | 5 | no | +| ebpf load mode | Define whether plugin will monitor the call (`entry`) for the functions or it will also monitor the return (`return`). | entry | no | +| apps | Enable or disable integration with apps.plugin | no | no | +| cgroups | Enable or disable integration with cgroup.plugin | no | no | +| bandwidth table size | Number of elements stored inside hash tables used to monitor calls per PID. | 16384 | no | +| ipv4 connection table size | Number of elements stored inside hash tables used to monitor calls per IPV4 connections. | 16384 | no | +| ipv6 connection table size | Number of elements stored inside hash tables used to monitor calls per IPV6 connections. | 16384 | no | +| udp connection table size | Number of temporary elements stored inside hash tables used to monitor UDP connections. | 4096 | no | +| ebpf type format | Define the file type to load an eBPF program. Three options are available: `legacy` (Attach only `kprobe`), `co-re` (Plugin tries to use `trampoline` when available), and `auto` (plugin check OS configuration before to load). | auto | no | +| ebpf co-re tracing | Select the attach method used by plugin when `co-re` is defined in previous option. Two options are available: `trampoline` (Option with lowest overhead), and `probe` (the same of legacy code). | trampoline | no | +| maps per core | Define how plugin will load their hash maps. When enabled (`yes`) plugin will load one hash table per core, instead to have centralized information. | yes | no | +| lifetime | Set default lifetime for thread when enabled by cloud. | 300 | no | </details> diff --git a/collectors/ebpf.plugin/integrations/ebpf_softirq.md b/collectors/ebpf.plugin/integrations/ebpf_softirq.md index 3a061368c..6a4312c6e 100644 --- a/collectors/ebpf.plugin/integrations/ebpf_softirq.md +++ b/collectors/ebpf.plugin/integrations/ebpf_softirq.md @@ -4,6 +4,7 @@ meta_yaml: "https://github.com/netdata/netdata/edit/master/collectors/ebpf.plugi sidebar_label: "eBPF SoftIRQ" learn_status: "Published" learn_rel_path: "Data Collection/eBPF" +most_popular: False message: "DO NOT EDIT THIS FILE DIRECTLY, IT IS GENERATED BY THE COLLECTOR'S metadata.yaml FILE" endmeta--> @@ -124,9 +125,9 @@ All options are defined inside section `[global]`. | Name | Description | Default | Required | |:----|:-----------|:-------|:--------:| -| update every | Data collection frequency. | 5 | False | -| ebpf load mode | Define whether plugin will monitor the call (`entry`) for the functions or it will also monitor the return (`return`). | entry | False | -| lifetime | Set default lifetime for thread when enabled by cloud. | 300 | False | +| update every | Data collection frequency. | 5 | no | +| ebpf load mode | Define whether plugin will monitor the call (`entry`) for the functions or it will also monitor the return (`return`). | entry | no | +| lifetime | Set default lifetime for thread when enabled by cloud. | 300 | no | </details> diff --git a/collectors/ebpf.plugin/integrations/ebpf_swap.md b/collectors/ebpf.plugin/integrations/ebpf_swap.md index 502cd5bce..ce2423f8d 100644 --- a/collectors/ebpf.plugin/integrations/ebpf_swap.md +++ b/collectors/ebpf.plugin/integrations/ebpf_swap.md @@ -4,6 +4,7 @@ meta_yaml: "https://github.com/netdata/netdata/edit/master/collectors/ebpf.plugi sidebar_label: "eBPF SWAP" learn_status: "Published" learn_rel_path: "Data Collection/eBPF" +most_popular: False message: "DO NOT EDIT THIS FILE DIRECTLY, IT IS GENERATED BY THE COLLECTOR'S metadata.yaml FILE" endmeta--> @@ -74,14 +75,18 @@ Metrics: These Metrics show grouped information per apps group. -This scope has no labels. +Labels: + +| Label | Description | +|:-----------|:----------------| +| app_group | The name of the group defined in the configuration. | Metrics: | Metric | Dimensions | Unit | |:------|:----------|:----| -| apps.swap_read_call | a dimension per app group | calls/s | -| apps.swap_write_call | a dimension per app group | calls/s | +| app.ebpf_call_swap_readpage | a dimension per app group | calls/s | +| app.ebpf_call_swap_writepage | a dimension per app group | calls/s | ### Per eBPF SWAP instance @@ -147,15 +152,15 @@ All options are defined inside section `[global]`. | Name | Description | Default | Required | |:----|:-----------|:-------|:--------:| -| update every | Data collection frequency. | 5 | False | -| ebpf load mode | Define whether plugin will monitor the call (`entry`) for the functions or it will also monitor the return (`return`). | entry | False | -| apps | Enable or disable integration with apps.plugin | no | False | -| cgroups | Enable or disable integration with cgroup.plugin | no | False | -| pid table size | Number of elements stored inside hash tables used to monitor calls per PID. | 32768 | False | -| ebpf type format | Define the file type to load an eBPF program. Three options are available: `legacy` (Attach only `kprobe`), `co-re` (Plugin tries to use `trampoline` when available), and `auto` (plugin check OS configuration before to load). | auto | False | -| ebpf co-re tracing | Select the attach method used by plugin when `co-re` is defined in previous option. Two options are available: `trampoline` (Option with lowest overhead), and `probe` (the same of legacy code). | trampoline | False | -| maps per core | Define how plugin will load their hash maps. When enabled (`yes`) plugin will load one hash table per core, instead to have centralized information. | yes | False | -| lifetime | Set default lifetime for thread when enabled by cloud. | 300 | False | +| update every | Data collection frequency. | 5 | no | +| ebpf load mode | Define whether plugin will monitor the call (`entry`) for the functions or it will also monitor the return (`return`). | entry | no | +| apps | Enable or disable integration with apps.plugin | no | no | +| cgroups | Enable or disable integration with cgroup.plugin | no | no | +| pid table size | Number of elements stored inside hash tables used to monitor calls per PID. | 32768 | no | +| ebpf type format | Define the file type to load an eBPF program. Three options are available: `legacy` (Attach only `kprobe`), `co-re` (Plugin tries to use `trampoline` when available), and `auto` (plugin check OS configuration before to load). | auto | no | +| ebpf co-re tracing | Select the attach method used by plugin when `co-re` is defined in previous option. Two options are available: `trampoline` (Option with lowest overhead), and `probe` (the same of legacy code). | trampoline | no | +| maps per core | Define how plugin will load their hash maps. When enabled (`yes`) plugin will load one hash table per core, instead to have centralized information. | yes | no | +| lifetime | Set default lifetime for thread when enabled by cloud. | 300 | no | </details> diff --git a/collectors/ebpf.plugin/integrations/ebpf_sync.md b/collectors/ebpf.plugin/integrations/ebpf_sync.md index 024c3e30e..6f6c246a7 100644 --- a/collectors/ebpf.plugin/integrations/ebpf_sync.md +++ b/collectors/ebpf.plugin/integrations/ebpf_sync.md @@ -4,6 +4,7 @@ meta_yaml: "https://github.com/netdata/netdata/edit/master/collectors/ebpf.plugi sidebar_label: "eBPF Sync" learn_status: "Published" learn_rel_path: "Data Collection/eBPF" +most_popular: False message: "DO NOT EDIT THIS FILE DIRECTLY, IT IS GENERATED BY THE COLLECTOR'S metadata.yaml FILE" endmeta--> @@ -132,21 +133,21 @@ This configuration file have two different sections. The `[global]` overwrites a | Name | Description | Default | Required | |:----|:-----------|:-------|:--------:| -| update every | Data collection frequency. | 5 | False | -| ebpf load mode | Define whether plugin will monitor the call (`entry`) for the functions or it will also monitor the return (`return`). | entry | False | -| apps | Enable or disable integration with apps.plugin | no | False | -| cgroups | Enable or disable integration with cgroup.plugin | no | False | -| pid table size | Number of elements stored inside hash tables used to monitor calls per PID. | 32768 | False | -| ebpf type format | Define the file type to load an eBPF program. Three options are available: `legacy` (Attach only `kprobe`), `co-re` (Plugin tries to use `trampoline` when available), and `auto` (plugin check OS configuration before to load). | auto | False | -| ebpf co-re tracing | Select the attach method used by plugin when `co-re` is defined in previous option. Two options are available: `trampoline` (Option with lowest overhead), and `probe` (the same of legacy code). | trampoline | False | -| maps per core | Define how plugin will load their hash maps. When enabled (`yes`) plugin will load one hash table per core, instead to have centralized information. | yes | False | -| lifetime | Set default lifetime for thread when enabled by cloud. | 300 | False | -| sync | Enable or disable monitoring for syscall `sync` | yes | False | -| msync | Enable or disable monitoring for syscall `msync` | yes | False | -| fsync | Enable or disable monitoring for syscall `fsync` | yes | False | -| fdatasync | Enable or disable monitoring for syscall `fdatasync` | yes | False | -| syncfs | Enable or disable monitoring for syscall `syncfs` | yes | False | -| sync_file_range | Enable or disable monitoring for syscall `sync_file_range` | yes | False | +| update every | Data collection frequency. | 5 | no | +| ebpf load mode | Define whether plugin will monitor the call (`entry`) for the functions or it will also monitor the return (`return`). | entry | no | +| apps | Enable or disable integration with apps.plugin | no | no | +| cgroups | Enable or disable integration with cgroup.plugin | no | no | +| pid table size | Number of elements stored inside hash tables used to monitor calls per PID. | 32768 | no | +| ebpf type format | Define the file type to load an eBPF program. Three options are available: `legacy` (Attach only `kprobe`), `co-re` (Plugin tries to use `trampoline` when available), and `auto` (plugin check OS configuration before to load). | auto | no | +| ebpf co-re tracing | Select the attach method used by plugin when `co-re` is defined in previous option. Two options are available: `trampoline` (Option with lowest overhead), and `probe` (the same of legacy code). | trampoline | no | +| maps per core | Define how plugin will load their hash maps. When enabled (`yes`) plugin will load one hash table per core, instead to have centralized information. | yes | no | +| lifetime | Set default lifetime for thread when enabled by cloud. | 300 | no | +| sync | Enable or disable monitoring for syscall `sync` | yes | no | +| msync | Enable or disable monitoring for syscall `msync` | yes | no | +| fsync | Enable or disable monitoring for syscall `fsync` | yes | no | +| fdatasync | Enable or disable monitoring for syscall `fdatasync` | yes | no | +| syncfs | Enable or disable monitoring for syscall `syncfs` | yes | no | +| sync_file_range | Enable or disable monitoring for syscall `sync_file_range` | yes | no | </details> diff --git a/collectors/ebpf.plugin/integrations/ebpf_vfs.md b/collectors/ebpf.plugin/integrations/ebpf_vfs.md index aa8d82caa..4b824e975 100644 --- a/collectors/ebpf.plugin/integrations/ebpf_vfs.md +++ b/collectors/ebpf.plugin/integrations/ebpf_vfs.md @@ -4,6 +4,7 @@ meta_yaml: "https://github.com/netdata/netdata/edit/master/collectors/ebpf.plugi sidebar_label: "eBPF VFS" learn_status: "Published" learn_rel_path: "Data Collection/eBPF" +most_popular: False message: "DO NOT EDIT THIS FILE DIRECTLY, IT IS GENERATED BY THE COLLECTOR'S metadata.yaml FILE" endmeta--> @@ -117,25 +118,29 @@ Metrics: These Metrics show grouped information per apps group. -This scope has no labels. +Labels: + +| Label | Description | +|:-----------|:----------------| +| app_group | The name of the group defined in the configuration. | Metrics: | Metric | Dimensions | Unit | |:------|:----------|:----| -| apps.file_deleted | a dimension per app group | calls/s | -| apps.vfs_write_call | a dimension per app group | calls/s | -| apps.vfs_write_error | a dimension per app group | calls/s | -| apps.vfs_read_call | a dimension per app group | calls/s | -| apps.vfs_read_error | a dimension per app group | calls/s | -| apps.vfs_write_bytes | a dimension per app group | bytes/s | -| apps.vfs_read_bytes | a dimension per app group | bytes/s | -| apps.vfs_fsync | a dimension per app group | calls/s | -| apps.vfs_fsync_error | a dimension per app group | calls/s | -| apps.vfs_open | a dimension per app group | calls/s | -| apps.vfs_open_error | a dimension per app group | calls/s | -| apps.vfs_create | a dimension per app group | calls/s | -| apps.vfs_create_error | a dimension per app group | calls/s | +| app.ebpf_call_vfs_unlink | calls | calls/s | +| app.ebpf_call_vfs_write | calls | calls/s | +| app.ebpf_call_vfs_write_error | calls | calls/s | +| app.ebpf_call_vfs_read | calls | calls/s | +| app.ebpf_call_vfs_read_error | calls | calls/s | +| app.ebpf_call_vfs_write_bytes | writes | bytes/s | +| app.ebpf_call_vfs_read_bytes | reads | bytes/s | +| app.ebpf_call_vfs_fsync | calls | calls/s | +| app.ebpf_call_vfs_fsync_error | calls | calls/s | +| app.ebpf_call_vfs_open | calls | calls/s | +| app.ebpf_call_vfs_open_error | calls | calls/s | +| app.ebpf_call_vfs_create | calls | calls/s | +| app.ebpf_call_vfs_create_error | calls | calls/s | @@ -189,15 +194,15 @@ All options are defined inside section `[global]`. | Name | Description | Default | Required | |:----|:-----------|:-------|:--------:| -| update every | Data collection frequency. | 5 | False | -| ebpf load mode | Define whether plugin will monitor the call (`entry`) for the functions or it will also monitor the return (`return`). | entry | False | -| apps | Enable or disable integration with apps.plugin | no | False | -| cgroups | Enable or disable integration with cgroup.plugin | no | False | -| pid table size | Number of elements stored inside hash tables used to monitor calls per PID. | 32768 | False | -| ebpf type format | Define the file type to load an eBPF program. Three options are available: `legacy` (Attach only `kprobe`), `co-re` (Plugin tries to use `trampoline` when available), and `auto` (plugin check OS configuration before to load). | auto | False | -| ebpf co-re tracing | Select the attach method used by plugin when `co-re` is defined in previous option. Two options are available: `trampoline` (Option with lowest overhead), and `probe` (the same of legacy code). | trampoline | False | -| maps per core | Define how plugin will load their hash maps. When enabled (`yes`) plugin will load one hash table per core, instead to have centralized information. | yes | False | -| lifetime | Set default lifetime for thread when enabled by cloud. | 300 | False | +| update every | Data collection frequency. | 5 | no | +| ebpf load mode | Define whether plugin will monitor the call (`entry`) for the functions or it will also monitor the return (`return`). | entry | no | +| apps | Enable or disable integration with apps.plugin | no | no | +| cgroups | Enable or disable integration with cgroup.plugin | no | no | +| pid table size | Number of elements stored inside hash tables used to monitor calls per PID. | 32768 | no | +| ebpf type format | Define the file type to load an eBPF program. Three options are available: `legacy` (Attach only `kprobe`), `co-re` (Plugin tries to use `trampoline` when available), and `auto` (plugin check OS configuration before to load). | auto | no | +| ebpf co-re tracing | Select the attach method used by plugin when `co-re` is defined in previous option. Two options are available: `trampoline` (Option with lowest overhead), and `probe` (the same of legacy code). | trampoline | no | +| maps per core | Define how plugin will load their hash maps. When enabled (`yes`) plugin will load one hash table per core, instead to have centralized information. | yes | no | +| lifetime | Set default lifetime for thread when enabled by cloud. | 300 | no | </details> |