SysDig

Connecting to Sysdig

• URL: https://app.sysdigcloud.com
• Select "OpenID" (see below)
• You'll be prompted for the Company Name. Use BcDevOps
• Enter your IDIR username/password when prompted
• That'll get you into Sysdig

Adding Team Members:

https://developer.gov.bc.ca/docs/default/component/platform-developer-docs/docs/app-monitoring/sysdig-monitor-setup-team/#create-sysdig-team-access

---

Updating & Adding Alerts

Once you have access to the sysdig UI, you can be added to available alerts via version control at terraform/channels.tf by adding your email.

for updating alerts, you can modify test or prod alerts in terraform/alerts_test.tf or terraform/alerts_prod.tf and new alerts can be added as 1 of 2 terraform resource types: a sysdig alert or a promql based alert

Generally, promql based alerts are preferred as prometheus is common on all platforms and transferable.

If you're unfamiliar with writing prometheus queries, you can use the explorer to experiment in the sysdig UI and copy out the query. Be aware that double quotes need to be escaped when in the terraform.