We've introduced a new 'Standard User' role designed for developers that includes edit access to dashboards, alerts, events but NO access to Explore. The existing 'Edit user' role has been renamed to 'Advanced user' and existing 'Read only' renamed to 'View only'. See our user documentation for more details.

When creating or editing teams, the first 30 labels and tags are displayed with the ability to search for additional options.

We've extended and changed our AWS groupings in Explore. The previous 'AWS Instances' grouping (cloudprovider.availabilityzone > cloudprovider.id) is now 'AWS Instances by Zones'. We've also added a new grouping 'AWS Instances' (cloudprovider.id) that displays any discovered AWS data source (e.g., EC2, RDS, ELB).

New checkboxes on the alerts page simplifies selection of multiple alerts and bulk actions.

You can now add text panels to your dashboards to provide additional information. Text panels can be used as title headers or to provide additional context that you would like to communicate. Features limited markdown support.

A new out-of-the-box alert is available to provide notifications when a Kubernetes node is not ready. By default the alert is set to warning, but severity is user configurable.

You can now add up to five different segments for a given metric in time-series and stacked area panels.

Admins can now set a default entry point for a team to simplify the onboarding process. This determines the first page users see when they start the application (e.g., a specific dashboard, settings, etc.).

Sysdig provides out of the box dashboards for monitoring Istio using Prometheus exporters.

New test function lets you pre-test your notification channels like, email, Slack, PagerDuty, etc.

Copy and share unique groupings with all of your teams.

New icon labels appear on hover to clarify underying function for users.

Introducing a new 'rate of change' math function for metrics. Now you can alert by the rate at which a metric changes vs. a static threshold. For example, a default alert: Rate of change of disk usage alerts you if your disk usage increases more than x% in a day.

Sysdig Monitor can now ingest a Prometheus histogram metric type and visualize them in a chart to show the distribution of specific metrics.

Did you know you can add Sysdig as a Grafana data source? To help you get started visualizing Sysdig-collected metrics in Grafana, we've added a Grafana Plugin link to the help menu that takes you to the setup instructions.

Alert configuration settings for Kubernetes metrics now limit scope and segmentation based on the metric that is selected to allow for more accurate alerting. Check out our support page for more details.

In your timeseries line charts you can now compare time-shifting metrics to easily spot trends and anomalies. With compare-to for timeseries you can configure and observe how one or more metrics have changed since a previous time (e.g., 1 hour ago or 2 days ago).

We've added cpu.cores.used and cpu.cores.used.percent that align with the way Kubernetes exposes cpu usage. Now you can compare values using kube-state-metrics such as kubernetes.node.capacity.cpuCores, kubernetes.pod.resourceLimits.cpuCores in order to determine if resources are oversubscribed. These metrics are also key for capacity planning and chargeback calculations.

Our Sysdig Monitor Metrics support page now features updated CPU metrics descriptions to provide more insight into each available metric.

The UI now allows columns to be resized for all tables in the application including alerts, events, teams, and users.

Suggest mode auto-selects only the relevant dashboards and metrics, hiding any inapplicable views. This is now the normal mode of operation. The turn on/off option is no longer available.

We've put a new, more modern face on the Sysdig Monitor login screen.

Our new user interface provides a more modern framework for interacting with the product. Navigation is re-oriented from a top-of-screen menu to an icon-driven left side panel, providing more space for viewing your metrics and dashboards. Click here for a quick video introduction!.

Metric number panels now feature a configurable 'Compare to' function to display the change in measurement since a previous time frame. Provides insight into the increase or decrease of metrics over time.

We've redesigned Sysdig Monitor's Explore page to give you extra screen space to view your killer dashboards and metrics. The new vertical layout helps you see more and get to what you need faster.

New Service Golden Signal dashboards provide out-of-the-box metrics that developers need when launching and monitoring a service or app. Includes slowest transactions, latency, request volume, error rates, and most requested URLs.

You can now download table data in JSON or CSV format for offline viewing and analysis.

We've simplified the dashboard panel copy function and added a duplicate panel option in menu. We've also redesigned the dropdowns in the top right header including making it easier to quickly see and select your teams.

Want a simple way to quickly see what matters most in your environment? Spotlight helps you quickly discover, detect, and optimize your infrastructure and services. A Spotlight health check shows you new integrations, infrastructure, app, and agent status, and more at-a-glance.

We’ve massively simplified grouping and scopes. Our new approach gives you better, more precise data - with less chance of invalid groupings (e.g. Kubernetes deployment > hostname). Have questions? Watch this video, read this article, or contact Customer Success and we’ll analyze your account for you!

Sysdig Monitor now collects kube-state-metrics for monitoring and alerting on the state of Kubernetes objects. New dashboards provide visibility of metrics for nodes, namespaces, services, daemonSets, jobs, replicaSets and pods. Requires update to the Sysdig agent version 0.77.0 or higher. Click here for details on enabling this feature.

Ever want to share a killer dashboard with a colleague who is not a Sysdig Monitor user? Now you can! Just pick, click, and send your URL.

We’ve introduced a new 'Team Manager' role that provides the privilege to add, delete, and modify team users as well as grant read or edit access.

Last year we introduced suggest mode – available in 'Settings>Sysdig Labs' – as a way to boost your efficiency by showing only the views, metrics, and grouping presets applicable to your environment. This option has proven so popular that it is now enabled by default.

When using webhooks, typically used to pass authentication credentials, you can now add custom headers to pass along additional details with an outgoing request.

As part of the broader Sysdig Platform initiative, 'Admin Team' within Sysdig Monitor is now renamed to 'Monitor Operations.' The Monitor Operations team will continue to behave the same as the previous Admin team:

• The Monitor Operations team cannot be deleted.
• Monitor Operations users have full visibility to all resources.
• To change settings for any team, admins must switch to the Monitor Operations team.

Sysdig Monitor now supports JMX monitoring for Java 9 applications. To enable collection of Java 9 metrics, update to the latest Sysdig Agent. For more details, review the Sysdig Agent changelogs.

Users can have different roles for each of the teams they belong to, either 'Read user' or 'Edit user'. A read user can only use the app in read-only mode, with no permission to create/edit/delete dashboards, alerts, etc while the edit user is allowed to make those changes. This is a per team role defined by Admin users.

A new default dashboard has been added to the Explore page where you can see the most important Memcached performance monitoring metrics: connections, commands, get hits/misses, evictions, etc.

Confused about which time and group aggregation use on each metric? Now you can access to a quick recap with the best practices on how to aggregate metrics based on type (percentage, latency, etc).

With histograms you can see the distribution of values of a metric over hosts, containers, etc. Use case for histograms is to detect outliers. For example you can plot a histogram of response time by containers to find out which response time ranges are the most common and which containers are outside this common/normal range. Along the x-axis are buckets/ranges of the metric value. The bars represent how many segments are in that range. On hovering you can see the names of the segments in that range.

We moved time navigation to the bottom of the page. Custom time ranges now have a better UX, and zoom in/out controls are more prominent.

Metric information (metric name with time and group aggregation) can be seen when hovering a panel (bar charts, time series, stacked and number panels). This is helpful to give more context about the purpose of the panel.

ALB metrics are now supported with an entry in our newly introduced data source dropdown menu, a new explore table configuration, and a new default dashboard that includes metrics like healthy and unhealthy hosts, requests per second, response time, and HTTP response by codes (2XX, 3XX, 4XX and 5XX).

We added two new buttons to time series and stacked area charts: users can now download raw data in JSON or CSV format to run custom data analysis.

We released Sysdig Inspect back in September: a powerful interface for container troubleshooting from captures files. Sysdig Inspect has been built on top of Sysdig open source and is also available for Mac and Linux users but now you can open capture files directly from your browser when using Sysdig Monitor.

Scope matching when exploring events has been improved, bringing you back into the right point in time, groupind and scope. Additionally, the Explore page has an ad-hoc single event mode showing you only the specific event that we are exploring.

Sysdig Monitor will automatically detect Prometheus metrics. This is done by pattern matching against standard Kubernetes annotations, container images/names/labels, standard ports or process names. These metrics will show up in a new Prometheus folder under the Metrics section on the Explore page. You can create dashboards, set alerts and analyze your Prometheus data by applying all the existing grouping, scoping and segmentation capabilities. Read more on our blog: Prometheus metrics with Sysdig Monitor.

We replaced the side menu of the Explore table with a simple dropdown menu which lets the user choose which data source should be accessed to show data (Sysdig Agent metrics, AWS, etc).

Users can switch between UTC and local timezone via controls in the time navigation. Changes are reflected wherever we show dates/times across the entire application.

Alerts can be downloaded as a JSON file to see the raw structure and update it using a text editor. Modified JSON can be uploaded using our API as documented in Sysdig Monitor API > Alerts.

You can now customize the number of segments that appear on bar charts and stacked area charts (same as time series charts); see previous feature changelog for further details.

Alerts dispatched through the PagerDuty notification channel will now include additional fields like timestamp, UTC, alert name, alert description, severity, alertId/eventId and links to the alert or the event.

Now alert configuration is easier than ever. When creating or editing an alert, next to the parameters configuration you can see a preview of the configured triggering threshold against the value of selected metric and scope in the past. This way you can choose better threshold values.

You can customize how the selected metric is displayed within the Explore tab. Those options already available in Dashboards like panel type or Y-axis range and scale customization can be used here too.

It is possible to specify an explicity limit of the number of lines included in time series charts. This way you can display the top N or the bottom N segments. This is useful when the 'Segment by' aggregation creates a high cardinality of segments or groups: imagine you have hundreds of Kubernetes Pods but you want to see only the CPU usage of the top 10.

We have just released Sysdig Inspect: a powerful interface for container troubleshooting and security investigation from captures in Sysdig Monitor. Sysdig Inspect has been built on top of Sysdig open source and is also available for Mac and Linux users. Learn more and download it from https://github.com/draios/sysdig-inspect.

The Explore tab grouping dropdown has been redesigned. Now it's easier to view, select, edit and delete the Explore table groupings.

The separator between the Explore table and the drilldown views can be moved up and down for resizing, giving more screen space for visualizing metrics and pre-built views of the selected scope above.

Sysdig Monitor will automatically detect Prometheus metrics. This is done by pattern matching against standard ports, process names or container images/names/labels. These metrics will show up in a new Prometheus folder under the Metrics section on the Explore page. You can create dashboards, set alerts and events and can analyze your Prometheus data by applying all the existing grouping, scoping and segmentation capabilities. Prometheus metrics will be capped at a limit similar to that of StatsD and JMX.

Now you can view data as a stacked area chart on your dashboards by creating new area panels or updating existing ones. This can be accessed by selecting the 'Area' icon in the Visualize section of the 'Add new panel' in Dashboards. You can create this view by either choosing multiple metrics with the same unit and aggregation or choosing a single metric with a single segment (similar to a time-series line chart). Some of the charts in the 'Default Dashboards' have been updated with this new capability (e.g., Overview by Process now shows metrics stacked up by process name).

Now you can view data in a table format on your dashboards by creating table panels or updating existing panels to a table. Here the columns represent metrics and the rows represent segments which are used to aggregate the metrics such as pods, services, hosts, containers, processes and so on.

Now you can create alerts directly from Explore by clicking on the alert icon listed on each row.

We have updated our Explore feature with a new row at the top labeled as 'Entire Infrastructure'. This row will provide a global view of your infrastructure and the corresponding drilldown will provide a pre-built dashboard with the relevant scope.

Customers can now use OpenID to access Sysdig Monitor (SaaS) via SSO. On the login screen click on the OpenID icon before entering the username and password. This will redirect the authentication to the chosen OpenID provider and grant you access upon validation. Please refer to the OpenID customer docs for more details.

Now you can access the prebuilt agent dashboard by viewing the 'Sysdig Agent Summary' under 'My default dashboards'. This dashboard provides you insights into all your Sysdig agents across all hosts in your environment.

Now you can customize your messages for email, Slack and AWS SNS alert notification channels. Both the subject and the body of your message can be tailored to suit your requirements. The subject will contain the name and state of the alert along with an optional text string. The body will contain an optional section for plain text together with the existing default alert notification template. The default template contains information such as metric, scope, trigger conditions and current value, etc along with link to 'Explore event' that takes you back in time when the alert triggered to allow fruther debugging.

We have introduced the advanced operators 'in' and 'not in' to match for or against a list of variables while setting the scope of a dashboard. For eg: 1. kubernetes.namespace.name in 'prod, dev' 2. host.ip.public not in '172.20.40.10,172.20.40.12,172.20.40.14'.

Customers can now use Security Assertion Markup Language (SAML) - an open standard data format to exchange authentication and authorization data between an identity provider and service provider. SAML works in conjunction with identity providers like Okta and Onelogin for SSO access to Sysdig Monitor. On the login screen, click on the SAML button before entering the username and password. This will redirect your authentication to the chosen IDP for credentials validation and granting access to the Sysdig Monitor application. Please refer to Sysdig Monitor SAML configuration for more details.

We've made some improvements to help you find the information you are looking for faster. Now, your metrics are organized based on its data source - host, containers, app checks, StatsD, system or network just to name a few. For eg. all the StatsD metrics for MongoDB - mongo.statsd.conn, mongo.statsd.delete - will be grouped under StatsD while viewing 'MongoDB' app metrics. We've renamed the 'Views' to 'Default dashboards' although the functionality remains the same: you can continue to use pre-built dashboards to visualize all the data for your cloud providers, orchestrators, applications, networks, hosts and containers and services.

You can set alerts for specific events to monitor your containers, orchestrators and services. Here we inspect specific events such as pods / containers killed, restarts or software deployments and monitor threshold limits for each of these events - for example: trigger an alert if any of your pods generate a CrashLoopBackOff event. Like on metric alerts, you can use the usual channels - Email, Slack, Pagerduty, Amazon SNS, OpsGenie - to get your alert notifications.

Time series graphs have received quite a few improvements on how they handle Y-axis settings: you can decide between fixed (as it was now) or dynamic range; linear, logarithmic or exponential scale and also show multiple axes when visualizing multiple metrics.

From now on, when you do any layout change in your own or shared with you dashboards, you will have to explicitly save changes or discard them. No need to freak out anymore when you edit a layout by mistake! Changes will be saved as a custom layout.

If you are using Teams, you should notice that Default Team has been renamed to Admin Team. In addition, now you can configure on Settings > Teams the default team for any new user. The idea behind this change is to automatically place new users in a restricted access group.

Now creating an alert is easier than ever! A wizard will guide you through the process of creating a new alert based on Uptime, a Metric, an Event, Anomaly Detection or Group Outlier. Then, defining the alert will consist of selecting which metric you want to alert on (a), the scope (b) and the trigger conditions (c) with threshold and wait time. Once done that, you will be able to configure notification settings and activate Sysdig captures as usual.

Time-series graphs engine has been updated. Now the legend appears on the right hand side or as an overlay when the panel is small. A more compact and clean look while you can quickly identify the metric you want just going over the legend entry.

Who doesn't like automation? Now you can copy the dashboards and alerts that you have already created to the different Teams in your account. And if they don't have access to the defined scope they will get a warning to update that setting!

Table panels available in Explore Tab Views now show all available data instead of just the top 20 results. Tables are paginated and it is possible to search through them. You can find these tables in Connections, File Systems or Top Processes Views to name a few places.

Tired of seeing pre-built views that aren't relevant to the metrics you collect? Hide 'em! Suggest mode does just that. Turn it on in Labs

Docker Swarm fan? Check out our new enhanced dashboards, explore views, and tagging for Swarm. We'll see your stacks, services, tasks and other properties! Read more on How to Monitor Docker Swarm.

If you're on our Fast Dashboards Beta (turn it on in Labs, you can now easily adjust the scope of a dashboard! All panels within the dashboard will be updated with the globally defined scope automatically although you can always go to each one individually and customize it back.

Sysdig support is now located at (https://www.sysdig.com/support). Please bookmark the new address.

Sysdig Cloud has a new name! As of today, it's officially called Sysdig Monitor. Both the SaaS version and the On-Prem version fall under the Sysdig Monitor umbrella. Same great products, new name!

Now new panels (widgets) can be added to dashboards directly within the dashboard view. Along with this one more dashboard usability improvements are on the way!

A new agent version has been published. This version brings Oracle Linux support with pre-compiled kernel modules, improved Mesos support and some bugfixes. Don't forget to update your agents!

More flexibility has been introduced on alerts logic. Now you can scope the alert using the Aggregated across clause with modifiers that go beyond simple boolean logic and offer more complex array checks or regular expressions. The available operators are: IS, IS NOT, IN, NOT IN, CONTAINS, DOES NOT CONTAIN, STARTS WITH. Usage examples are scoping an alert based on the hostname matching a regexp or HTTP response code is not 200.

We just released major performance and usability improvements to the dashboards section: up to 10x faster dashboards! Also now you can see dynamic markers on the charts. To enable these go to Settings > Sysdig Labs. More to come, stay tuned!

The alert configuration interface has been redesigned to make easier and more straightforward to configure alert parameters. We've focused on highlighting the most important elements of defining an alert, and have significantly improved the language around time aggregation. For troubleshooting, Sysdig captures now default to 15 seconds.

Now each panel in any dashboard can individually set its metrics scope. Click on the gear icon on the panel and a configuration UI like in alerts will allow you to set the conditions that define the metrics included in the panel.

Time navigation UI has been improved to make it easier to jump back and forward in time, selecting different graphing periods or introducing exactly the date you want to visualize before rendering the dashboard.

A new rate aggregation setting is available in addition to existing Average, Sum and Min/Max options. Rate returns the average value of the metric across the time period being evaluated. This is typically used in always increasing counter metrics like network traffic, file I/O, etc.

We have released a new version of Sysdig Monitor agent 0.47.0 that increases the number of metrics we can handle, particularly interesting in scenarios using JMX that can sample down to 10 seconds. The new default limits are 300 beans per process, 500 metrics per process and 500 metrics per host. This version also brings container.image.id tag support. Update instructions.

Two new metrics allow to better monitor mounted filesystem usage. fs.root.used.percent contains the usage of the root filesystem while fs.largest.used.percent is the usage of the largest file system. Explore view tabs have been updated to include these metrics instead of the previous fs.used.percent that was the sum of all filesystems in use.

The new Sysdig Monitor agent 0.43.0 supports token based authentication in addition to Basic authentication for DC/OS Enterprise. Also metric collection works through HTTPS now.

Sysdig Monitor agent 0.43.0 provides a way to define custom App checks configuration for every container. This allows to delegate monitoring configuration to the application teams. A variable called SYSDIG_AGENT_CONF will be checked for each monitored process, its parents and the Docker container. The value of this variable should follow the same syntax than on dragent.yaml, for example ENV SYSDIG_AGENT_CONF {app_checks: [{ name: redisdb, pattern: {comm: redis-server}, conf: { host: 127.0.0.1, port: 6379, password: protected} }] }.

Stay up to date with Sysdig features in your favorite RSS reader. Subscribe on our support page or use this URL https://sysdig.com/sysdig-cloud-changelogs/

We want you to always have the latest on Sysdig Monitor's uptime status, performance, and recent events. We've now launched a status page where we'll keep you continually updated.

We now have a native alerting integration with OpsGenie. Add it to your list of alerting channels today!

You can now receive a notification whenever an alert condition is resolved. You choose if you'd like the notification for a manual resolve or when the condition subsides. Resolved notifications are configured per alert channel in your settings .

Programmatically integrate your alerts with your other systems using a webhook notification. With a webhook, you can post the body of an alert to any API. You can then use that to consume alerts, or trigger any follow-on behavior you'd like. Read more here.

We've created new views that allow you to assess the health of a service at a glance. Simply select a row in the Explore table, and then search for the service views within the view panel below.

We now support additional Kubernetes metadata for deployments, replicasets, and daemonsets. Use them just like you would any other tag within Sysdig. Enjoy!

We now have a native alerting integration with VictorOps. Add it to your list of alerting channels today!

Your alerts are too good for just one Slack channel, or one email address. Now configure fine-grained alerting channels with as many notification endpoints as you like across multiple Slack channels, PagerDuty channels, email addresses, SNS topics, with VictorOps and OpsGenie coming shortly!

We've further improved our Kubernetes master monitoring and installation through better detection of ports and auto-selection of the correct sysdig agent to monitor with. We recommend that Kubernetes users update their install. Read more here.

Deploy SysdigBot and start talking to your monitoring system. SysdigBot allows you to add a custom event to Sysdig via Slack, and even can listen on a channel and turn every message into a Sysdig Monitor event! Read more here.

We've always provided the ability to compare data "in the past" to "now". But we've made it simpler to compare data around an event. Simply go to the Events tab and select an event. Click on "Compare to now" and see the event in historical context as well as right now, in the same view.

We've made creating alerts a bit easier for you by adding auto-complete to alert scopes. After you select a tag and begin typing a value, we'll use our super powers to give you the options that match. Go ahead and try it by creating a new alert right now!

Container monitoring tools typically give you container resource utilization metrics in terms of the amount of total host resources being used by the container. But what if you want to know how much of a container's allocated resources are in use? Starting today, you can! Sysdig Monitor has added new metrics for CPU shares and quota, and memory and swap limits. Now if you've got noisey neighbor containers that are bumping up against or even exceding their limits, you'll be the first to know. Be sure to check out the new "CPU/Memory (Containers)" and "Container Limits" views as well.

Read more in our blog post: Monitoring Greedy Containers

We recently introduced Custom Events as a way for Sysdig Monitor to ingest any type of event and correlate that with your metrics. We've now expanded this platform to offer built-in support for native events from Docker and Kubernetes. A default set of Docker and Kubernetes warning events are now automatically collected by the Sysdig agent container. These events will appear in your event stream and will be overlaid on your charts. Event settings are also fully configurable, if you'd like to see a more or less robust event stream: see the docs for more info.

Three new Kubernetes metrics are now automatically supported by Sysdig Monitor:

• Pod restarts: the number of times a container inside a pod has been restarted
• Replicas desired: the number of desired replicas for a replication controller
• Replicas running: the number of running replicas for a replication controller

Sysdig Monitor now automatically collects iNode metrics - these should match essentially what you'd see in 'df -i'. Try segmenting by fs.mountDir to see any metric broken down by file system.

What's our favorite movie? Slack to the Future. What's our favorite song? Baby got Slack. What's our favorite board game? Slackgammon. That's right: Sysdig now integrates with our favorite chat tool: Slack! Just go to your Notifications settings, and in a few clicks you'll be routing Sysdig Monitor alerts directly to the Slack channel of your choice.

Sysdig Monitor now offers a comprehensive API with a handy Python client wrapper. Choose from our extensive list of pre-built example scripts for common functionality like marking custom events, triggering sysdig captures, enabling/disabling alerts, creating dashboards + alerts, and exporting metrics. Or build your own advanced functionality using the Python library, or the underlying REST API itself.

Sysdig Monitor can now ingest any custom event you want, including code deploys, auto-scaling activities, business level actions, etc. Sysdig Monitor will automatically overlay these events on charts and graphs, for easy correlation with your performance data. Check out the support page for a quick guide to sending custom events to Sysdig Monitor.

Sysdig Monitor now supports "advanced" alert thresholds with multiple conditions. Want to get an alert only if cpu AND memory are high? Now you can do that. Want to combine 15 different conditions with arbitrary boolean logic? You can do that too :) Check out "advanced mode" when configuring your next alert, and read the reference docs to learn more about the advanced threshold syntax.

If you're reading this, then you've already found this new feature :) We release new functionality into Sysdig Monitor all the time, and we want to help you take advantage of the latest and greatest. Starting now, new feature releases will be documented in the app, as well as on our support website. Any time there are new features in Sysdig Monitor, you'll see a friendly red dot appear on the help menu icon. Click it and find out what's new!

Sysdig Monitor now supports monitoring Docker orchestration tools, including Compose, Swarm and the brand new Docker DataCenter and Universal Control Plane (UCP). Check out new Docker oriented Grouping Presets and Views. We've also pushed new and updated Views for other orchestration tools including Kubernetes, Mesos, Marathon, and Amazon's ECS.

Your Explore table is now customizable: you can now add any metric or metadata as a new column. Create the perfect overview for your infrastructure and dig down in from there. Note, you can also now resize, reorganize, and remove columns as needed.

Alert events now appear directly on your charts! Just hover over the indicator bar to get detailed information on the alert. Now it's easy to correlate behavior in your metrics with relevant alerts. For an example check out: Correlating alerts in container environments. Note: stay tuned for custom event notifications (eg. code pushes) coming soon!

New dashboard panels! These colorful little dashboard panels display single numbers in big, easily readable fonts. Thresholds can be customized for drop-dead simple red/yellow/green status boards. Read Better Container Monitoring with the Number Panel to learn how to utilize the number panel in your Dashboards!