Abstract: When it is detected that microservices have been created at a computing cluster running the microservices in containers, a respective monitoring subsystem is assigned to each microservice. Monitoring data for each of the microservices is then collected via the respective monitoring subsystems. Respective graphical user interfaces are then provided presenting at least a portion of the respective monitoring data for each microservice.

Abstract: A computer-implemented method comprises intercepting, by a first programmatic container of a first computing device, a system call made by a second programmatic container to an operating system of the first computing device. This example method also includes, in response to intercepting the system call, generating, by the first programmatic container, an enriched message based at least in part on the intercepted system call and a metrics message sent from the second programmatic container to an interface of the first computer. Further, this example method includes sending the enriched message to a monitoring application hosted on a second computer.

Abstract: In an embodiment, a data processing method comprises transmitting, from a monitoring computer system that is programmed for monitoring one or more services, a request for information relating to new services to a cluster of computing nodes that are managing the one or more services; receiving from the cluster of nodes an indication that a new service not included in the one or more services has been created; in response to receiving the indication, creating a monitoring subsystem for performing one or more functions, which may include monitoring the new service, verifying security and/or compliance, logging the new security, and network management; assigning the monitoring subsystem to the new service; sending access information for the monitoring subsystem to one or more user computers.

Abstract: A computer-implemented method comprises executing, in a first container of a first computer system, input source instructions; executing, using the same first computer system, a plurality of containerized application programs in different corresponding containers; monitoring, by the input source instructions, the one or more different containerized application programs by identifying one or more system calls that resulted from the different container applications generating statistical messages relating to operation of the containerized application programs; generating, by the input source instructions, one or more enriched messages based on the system calls that were identified and based on the statistical messages; transmitting the one or more enriched messages to a first metric collector, and aggregating a plurality of the enriched messages into a set of aggregated metrics values; sending, from the first metric collector to a monitoring application that is hosted on a second computer system, the aggregated

Abstract: In an embodiment, a data processing method comprises receiving, from one or more service monitoring processes configured to monitor operations of one or more computer applications instantiated within one or more containers, operation datasets representing operations that have been performed by one or more processes associated with the one or more computer applications; generating a baseline dataset of operations having operation properties from the operation datasets; computing a score for each operation in the baseline dataset, from the operation datasets, the score indicating whether the operation is a candidate for generating a rule that defines one or more expected values for an operation property of the operation; automatically generating a set of baseline operations rules for only those operations in the baseline dataset that score more than a score threshold.

Abstract: In an embodiment, a data processing method comprises creating and storing a scoring threshold value that is associated with determining whether a baseline operation rule is to be generated; receiving, from service monitoring processes, datasets of operations performed on digital objects by processors associated with computer applications; aggregating operations and identifying operation properties from the aggregated operations to generate an aggregated baseline dataset that represents operation properties from aggregated operations; assigning score values to each of the operation properties, wherein each assigned score value represents whether a particular operation property is a candidate for generating a rule that defines expected operation property values for the particular operation property; automatically generating a set of baseline operations rules for only those operation properties that have assigned values that exceed the score threshold value.

Abstract: A computer-implemented method of monitoring programmatic containers (containers) through executing a computer program in a kernel space is disclosed. The method comprises storing trace data in a memory buffer that is shared by the kernel space and a user space, the trace data being related to execution of a process associated with a container at an execution point of the process. The method also comprises retrieving container data related to the container through raw access of one or more kernel data structures when execution of the process is stopped. In addition, the method comprises storing the container data in association with the trace data in the memory buffer.

Abstract: A computer-implemented method of monitoring programmatic containers (containers) performed through executing a monitoring component in a user space is disclosed.

Abstract: Techniques related to communication between independent containers are provided. In an embodiment, a first programmatic container includes one or more first namespaces in which an application program is executing. A second programmatic container includes one or more second namespaces in which a monitoring agent is executing. The one or more first namespaces are independent of the one or more second namespaces. A monitoring agent process hosts the monitoring agent. The monitoring agent is programmed to receive an identifier of the application program. The monitoring agent is further programmed to switch the monitoring agent process from the one or more second namespaces to the one or more first namespaces. After the switch, the monitoring agent process continues to execute in the second programmatic container, but communication is enabled between the application program and the monitoring agent via the monitoring agent process.

Abstract: In an embodiment, a data processing method comprises transmitting, from a monitoring computer system that is programmed for monitoring one or more services, a request for information relating to new services to a cluster of computing nodes that are managing the one or more services; receiving from the cluster of nodes an indication that a new service not included in the one or more services has been created; in response to receiving the indication, creating a monitoring subsystem for performing one or more functions, which may include monitoring the new service, verifying security and/or compliance, logging the new security, and network management; assigning the monitoring subsystem to the new service; sending access information for the monitoring subsystem to one or more user computers.

Abstract: Techniques related to communication between independent containers are provided. In an embodiment, a first programmatic container includes one or more first namespaces in which an application program is executing. A second programmatic container includes one or more second namespaces in which a monitoring agent is executing. The one or more first namespaces are independent of the one or more second namespaces. A monitoring agent process hosts the monitoring agent. The monitoring agent is programmed to receive an identifier of the application program. The monitoring agent is further programmed to switch the monitoring agent process from the one or more second namespaces to the one or more first namespaces. After the switch, the monitoring agent process continues to execute in the second programmatic container, but communication is enabled between the application program and the monitoring agent via the monitoring agent process.

Abstract: A computer-implemented method of monitoring programmatic containers (containers) performed through executing a monitoring component in a user space is disclosed.

Abstract: In an embodiment, a data processing method comprises transmitting, from a monitoring computer system that is programmed for monitoring one or more services, a request for information relating to new services to a cluster of computing nodes that are managing the one or more services; receiving from the cluster of nodes an indication that a new service not included in the one or more services has been created; in response to receiving the indication, creating a monitoring subsystem for performing one or more functions, which may include monitoring the new service, verifying security and/or compliance, logging the new security, and network management; assigning the monitoring subsystem to the new service; sending access information for the monitoring subsystem to one or more user computers.

Abstract: In an embodiment, a data processing method comprises creating and storing a scoring threshold value that is associated with determining whether a baseline operation rule is to be generated; receiving, from service monitoring processes, datasets of operations performed on digital objects by processors associated with computer applications; aggregating operations and identifying operation properties from the aggregated operations to generate an aggregated baseline dataset that represents operation properties from aggregated operations; assigning score values to each of the operation properties, wherein each assigned score value represents whether a particular operation property is a candidate for generating a rule that defines expected operation property values for the particular operation property; automatically generating a set of baseline operations rules for only those operation properties that have assigned values that exceed the score threshold value.

Abstract: In an embodiment, a data processing method comprises creating and storing a scoring threshold value that is associated with determining whether a baseline operation rule is to be generated. Receiving, from service monitoring processes, datasets of operations performed on digital objects by processors associated with computer applications. Aggregating operations and identifying operation properties from the aggregated operations to generate an aggregated baseline dataset that represents operation properties from aggregated operations. Assigning score values to each of the operation properties, wherein each assigned score value represents whether a particular operation property is a candidate for generating a rule that defines expected operation property values for the particular operation property. Automatically generating a set of baseline operations rules for only those operation properties that have assigned values that exceed the score threshold value.

Abstract: Systems and methods for performance and security management of the computing infrastructure that supports an application deployed in a hosted computing environment are described. In one embodiment, for example, a system comprises agents installed on hosts. The agents capture and record system events from operating systems on the hosts that result from application component processes executing on the hosts. The system further includes a collection and analysis engine that obtains captured and recorded system events from the agents, identifies captured and recorded system events that pertain to an application transaction, and produces, from the identified system events, metric data reflecting quantity of computing resources used by the application component processes to process the application transaction. The system also includes a web dashboard that presents the metric data to a user, for example, on a web page.

Abstract: In an embodiment, a data processing method comprises creating and storing a scoring threshold value that is associated with determining whether a baseline operation rule is to be generated. Receiving, from service monitoring processes, datasets of operations performed on digital objects by processors associated with computer applications. Aggregating operations and identifying operation properties from the aggregated operations to generate an aggregated baseline dataset that represents operation properties from aggregated operations. Assigning score values to each of the operation properties, wherein each assigned score value represents whether a particular operation property is a candidate for generating a rule that defines expected operation property values for the particular operation property. Automatically generating a set of baseline operations rules for only those operation properties that have assigned values that exceed the score threshold value.

Abstract: Systems and methods for performance and security management of the computing infrastructure that supports an application deployed in a hosted computing environment are described. In one embodiment, for example, a system comprises agents installed on hosts. The agents capture and record system events from operating systems on the hosts that result from application component processes executing on the hosts. The system further includes a collection and analysis engine that obtains captured and recorded system events from the agents, identifies captured and recorded system events that pertain to an application transaction, and produces, from the identified system events, metric data reflecting quantity of computing resources used by the application component processes to process the application transaction. The system also includes a web dashboard that presents the metric data to a user, for example, on a web page.

Abstract: Systems and methods for performance and security management of the computing infrastructure that supports an application deployed in a hosted computing environment are described. In one embodiment, for example, a system comprises agents installed on hosts. The agents capture and record system events from operating systems on the hosts that result from application component processes executing on the hosts. The system further includes a collection and analysis engine that obtains captured and recorded system events from the agents, identifies captured and recorded system events that pertain to an application transaction, and produces, from the identified system events, metric data reflecting quantity of computing resources used by the application component processes to process the application transaction. The system also includes a web dashboard that presents the metric data to a user, for example, on a web page.

Abstract: In an embodiment, a data processing method comprises transmitting, from a monitoring computer system that is programmed for monitoring one or more services, a request for information relating to new services to a cluster of computing nodes that are managing the one or more services; receiving from the cluster of nodes an indication that a new service not included in the one or more services has been created; in response to receiving the indication, creating a monitoring subsystem for performing one or more functions, which may include monitoring the new service, verifying security and/or compliance, logging the new security, and network management; assigning the monitoring subsystem to the new service; sending access information for the monitoring subsystem to one or more user computers.