| 1 | ## |
| 2 | ## apps.plugin process grouping |
| 3 | ## |
| 4 | ## Documentation at: |
| 5 | ## https://github.com/netdata/netdata/blob/master/src/collectors/apps.plugin/README.md |
| 6 | ## |
| 7 | ## ----------------------------------------------------------------------------- |
| 8 | ## Subprocesses of process managers are monitored individually. |
| 9 | ## (uncomment to add or edit - the default is also hardcoded into the plugin) |
| 10 | |
| 11 | ## Clear all the managers, to set yours, otherwise append to the internal list. |
| 12 | #managers: clear |
| 13 | |
| 14 | ## Linux process managers |
| 15 | #managers: init systemd containerd-shim-runc-v2 dumb-init gnome-shell docker-init tini |
| 16 | #managers: spawn-plugins openrc-run.sh crond plasmashell xfwm4 |
| 17 | #managers: *python3*bin/yugabyted* |
| 18 | |
| 19 | ## FreeBSD process managers |
| 20 | #managers: init spawn-plugins |
| 21 | |
| 22 | ## MacOS process managers |
| 23 | #managers: launchd spawn-plugins |
| 24 | |
| 25 | ## Windows process managers |
| 26 | #managers: wininit services explorer System netdata |
| 27 | |
| 28 | ## ----------------------------------------------------------------------------- |
| 29 | ## Interpreters to search for the actual command name in command line. |
| 30 | ## (uncomment to add or edit - the default is also hardcoded into the plugin) |
| 31 | |
| 32 | ## Clear all the interpreters, to set yours, otherwise append to the internal list. |
| 33 | #interpreters: clear |
| 34 | |
| 35 | #interpreters: python python2 python3 |
| 36 | #interpreters: sh bash zsh |
| 37 | #interpreters: node perl awk |
| 38 | |
| 39 | ## ----------------------------------------------------------------------------- |
| 40 | ## Processes of interest |
| 41 | ## Grouping and/or rename individual processes. |
| 42 | ## (there is no internal default for this section) |
| 43 | ## |
| 44 | ## Pattern matching rules: |
| 45 | ## - All matches are CASE INSENSITIVE (case sensitive in v2.5.2 and earlier) |
| 46 | ## - Use quotes for process names with spaces: "Process Name" |
| 47 | ## - Patterns work on both Unix-like systems and Windows: |
| 48 | ## - Exact match: firefox (matches process named firefox) |
| 49 | ## - Prefix match: firefox* (matches firefox, firefox.exe, firefox-bin, etc.) |
| 50 | ## - Suffix match: *fox (matches firefox, icefox, etc.) |
| 51 | ## - Substring match: *firefox* (searches in full command line/path) |
| 52 | ## |
| 53 | ## Windows-specific notes: |
| 54 | ## - Process names work without .exe extension (automatically handled) |
| 55 | ## - Substring patterns (*pattern*) search within the full executable path |
| 56 | ## - No backslash escaping needed for Windows paths |
| 57 | ## - The 'name' field (friendly name) is used for default categories when no pattern matches |
| 58 | ## - v2.5.3+: Patterns also match against the 'name' field (friendly name) |
| 59 | |
| 60 | ## NETDATA processes accounting |
| 61 | netdata: netdata |
| 62 | |
| 63 | ## NETDATA agent-service-discovery (kubernetes) |
| 64 | agent_sd: agent_sd |
| 65 | |
| 66 | ## ----------------------------------------------------------------------------- |
| 67 | |
| 68 | oracledb: ora_* oracle_* *runOracle.sh* |
| 69 | unicorn: *unicorn* |
| 70 | puma: *puma* |
| 71 | couchdb: *couchdb* |
| 72 | graphite: *carbon-cache.py* *carbon-aggregator.py* *graphite/manage.py* |
| 73 | opentsdb: *net.opentsdb.tools.TSDMain* |
| 74 | imapd: *imapd |
| 75 | pop3d: *pop3d |
| 76 | popd: *popd |
| 77 | camo: *camo* |
| 78 | vicidial: *vicidial* |
| 79 | vines: *vines* |
| 80 | prosody: *prosody* |
| 81 | azure: mdsd *waagent* *omiserver* *omiagent* hv_kvp_daemon hv_vss_daemon *auoms* *omsagent* |
| 82 | datadog: *datadog* |
| 83 | newrelic: newrelic* |
| 84 | google-agent: *google_guest_agent* *google_osconfig_agent* |
| 85 | aws-s3: '*aws s3*' s3cmd s5cmd |
| 86 | proxmox-ve: pve* spiceproxy |
| 87 | libvirt: virtlogd virtqemud virtstoraged virtnetworkd virtlockd virtinterfaced |
| 88 | libvirt: virtnodedevd virtproxyd virtsecretd libvirtd |
| 89 | guest-agent: qemu-ga spice-vdagent cloud-init* |
| 90 | dhcp: dhcp* dhclient |
| 91 | |
| 92 | build: cc1 cc1plus as gcc* cppcheck ld make cmake automake autoconf autoreconf |
| 93 | build: cargo rustc bazel buck git gdb valgrind* rpmbuild dpkg-buildpackage |
| 94 | packagemanager: apt* dpkg* dselect dnf yum rpm zypp* yast* pacman xbps* swupd* |
| 95 | packagemanager: packagekitd pkgin pkg apk snapd slackpkg slapt-get emerge* |
| 96 | clam: clam* *clam |
| 97 | backup: rsync lsyncd bacula* borg rclone |
| 98 | cron: cron* atd anacron *systemd-cron* incrond |
| 99 | ups: upsmon upsd */nut/* apcupsd |
| 100 | |
| 101 | rabbitmq: *rabbitmq* |
| 102 | sidekiq: *sidekiq* |
| 103 | vernemq: *beam.smp*vernemq* *start_vernemq* *run_erl*vernemq* *vernemq*epmd* |
| 104 | erlang: beam.smp |
| 105 | postfix: *postfix* |
| 106 | |
| 107 | dagster: *dagster* |
| 108 | |
| 109 | ## ----------------------------------------------------------------------------- |
| 110 | ## java applications |
| 111 | |
| 112 | hdfsdatanode: *org.apache.hadoop.hdfs.server.datanode.DataNode* |
| 113 | hdfsnamenode: *org.apache.hadoop.hdfs.server.namenode.NameNode* |
| 114 | hdfsjournalnode: *org.apache.hadoop.hdfs.qjournal.server.JournalNode* |
| 115 | hdfszkfc: *org.apache.hadoop.hdfs.tools.DFSZKFailoverController* |
| 116 | yarnnode: *org.apache.hadoop.yarn.server.nodemanager.NodeManager* |
| 117 | yarnmgr: *org.apache.hadoop.yarn.server.resourcemanager.ResourceManager* |
| 118 | yarnproxy: *org.apache.hadoop.yarn.server.webproxy.WebAppProxyServer* |
| 119 | sparkworker: *org.apache.spark.deploy.worker.Worker* |
| 120 | sparkmaster: *org.apache.spark.deploy.master.Master* |
| 121 | hbaseregion: *org.apache.hadoop.hbase.regionserver.HRegionServer* |
| 122 | hbaserest: *org.apache.hadoop.hbase.rest.RESTServer* |
| 123 | hbasethrift: *org.apache.hadoop.hbase.thrift.ThriftServer* |
| 124 | hbasemaster: *org.apache.hadoop.hbase.master.HMaster* |
| 125 | zookeeper: *org.apache.zookeeper.server.quorum.QuorumPeerMain* |
| 126 | hive2: *org.apache.hive.service.server.HiveServer2* |
| 127 | hivemetastore: *org.apache.hadoop.hive.metastore.HiveMetaStore* |
| 128 | solr: *solr.install.dir* |
| 129 | airflow: *airflow* |
| 130 | kafka: *kafka.Kafka* |
| 131 | |
| 132 | ## ----------------------------------------------------------------------------- |
| 133 | ## Kernel / System |
| 134 | ## The following are interesting kernel threads and related processes to |
| 135 | ## monitor individually, mainly for their CPU utilization. |
| 136 | |
| 137 | ## These kernel threads switch tasks all the time, so they should never be |
| 138 | ## categorized as anything specific. |
| 139 | kernel: kworker/* |
| 140 | |
| 141 | ## Kernel Samepage Merging (KSM) daemon that looks for identical memory pages |
| 142 | ## across processes and merges them to save memory. |
| 143 | ksmd: ksmd |
| 144 | |
| 145 | ## Handles migration of processes between CPU cores to balance load. |
| 146 | kmigration: migration/* |
| 147 | |
| 148 | ## Manages memory compaction, moving memory pages around to reduce |
| 149 | ## fragmentation. |
| 150 | kcompactd: kcompactd* |
| 151 | |
| 152 | ## Responsible for freeing up memory by swapping pages to disk when needed. |
| 153 | kswapd: kswapd* |
| 154 | |
| 155 | ## DAMON is a mechanism designed to efficiently monitor the memory access |
| 156 | ## patterns of running processes or the system itself. |
| 157 | kdamond: kdamond |
| 158 | |
| 159 | ## Manages ballooning in virtualized environments. |
| 160 | vballoon: vballoon* |
| 161 | |
| 162 | ## virtio - Handles or I/O (storage and network) on virtual machines. |
| 163 | kvirtio: virtio-* vhost-* |
| 164 | |
| 165 | ## Layer 4 (transport layer) load balancing |
| 166 | ipvs: ipvsd ipvs_* ip_vs_* |
| 167 | |
| 168 | ## Hugepages |
| 169 | ## Scans memory regions and tries to promote regular-sized pages (4KB) into |
| 170 | ## hugepages (2MB) where possible. Merge smaller contiguous 4KB pages into 2MB |
| 171 | ## pages. Hugepages also use: kswapd, kcompactd, and migration. |
| 172 | khugepaged: khugepaged |
| 173 | |
| 174 | ## Note about zswap: |
| 175 | ## zswap does not introduce its own dedicated kernel threads. Instead, it |
| 176 | ## operates within the existing memory management and swapping framework of the |
| 177 | ## kernel: |
| 178 | ## - kswapd: swaps pages in/out of memory, using compression in the process. |
| 179 | ## - kcompactd: compacts memory when pages are compressed or moved around. |
| 180 | |
| 181 | ## ----------------------------------------------------------------------------- |
| 182 | ## Block Devices |
| 183 | |
| 184 | ## Handles deferred block I/O operations for block devices. |
| 185 | kblockd: kblockd |
| 186 | |
| 187 | ## Device Mapper (DM) |
| 188 | device-mapper: kcopyd/* kcryptd/* kdmflush/* dm_bufio_cache |
| 189 | device-mapper: raid1/* raid5/* raid10/* multipathd bioset/* |
| 190 | |
| 191 | ## Software RAID (MD) |
| 192 | md-raid: md*_raid* md*_resync md*_reshape md*_recovery md_thread |
| 193 | md-raid: flush_md* raid*_sync |
| 194 | |
| 195 | ## iSCSI |
| 196 | iscsi: iscsid iscsiadm iscsi_eh/* iscsi_xmit/* iscsi_ttx/* iscsi_rx/* iscsi_trx/* |
| 197 | |
| 198 | ## SCSI |
| 199 | scsi: scsi_eh/* scsi_tmf/* scsi_wq/* |
| 200 | |
| 201 | ## BCACHE |
| 202 | bcache: bcache* bch_btree_io bch_journal |
| 203 | |
| 204 | ## SAS |
| 205 | sas: sas_task/* mpt* |
| 206 | |
| 207 | ## Fibre Channel (FC) |
| 208 | fc: fc_transport qla2xxx* |
| 209 | |
| 210 | ## loop devices |
| 211 | loop: loop* flush-loop* |
| 212 | |
| 213 | ## ----------------------------------------------------------------------------- |
| 214 | ## Filesystems |
| 215 | |
| 216 | ## Ext4 |
| 217 | ext4: ext4-* jbd2/* |
| 218 | |
| 219 | ## XFS |
| 220 | xfs: xfs* |
| 221 | |
| 222 | ## BTRFS |
| 223 | btrfs: btrfs* |
| 224 | |
| 225 | ## NFS |
| 226 | nfs: rpcbind rpc.* nfs* rpciod |
| 227 | |
| 228 | ## ZFS |
| 229 | zfs: spl_* z_* txg_* zil_* arc_* l2arc* zfs* zed zdb zpool* |
| 230 | |
| 231 | ## CEPH |
| 232 | ceph: ceph-* ceph_* radosgw* rbd-* cephfs-* |
| 233 | ceph: ceph cephadm osdmaptool crushtool rados rbd |
| 234 | |
| 235 | ## CIFS & Samba |
| 236 | cifs: smbd nmbd winbindd ctdbd ctdb-* ctdb_* |
| 237 | cifs: cifsd cifscreds cifs.upcall |
| 238 | |
| 239 | ## Apple Filling Protocol (AFP) |
| 240 | afp: netatalk afpd cnid_dbd cnid_metad |
| 241 | |
| 242 | ## ----------------------------------------------------------------------------- |
| 243 | ## Desktops |
| 244 | |
| 245 | systemd-journald: *systemd-journal* |
| 246 | systemd: systemd systemd-* |
| 247 | |
| 248 | ## GNOME |
| 249 | desktop: gnome-* gsd-* gjs goa-* gcr-* gvfs-* *xdg-*-gnome* passimd gvfsd* |
| 250 | desktop: at-spi-* at-spi2-* dconf-service gcr-* |
| 251 | |
| 252 | ## KDE |
| 253 | desktop: plasmashell kwin-* kde* *-kde-* klauncher kactivitymanagerd krunner |
| 254 | desktop: kdeconnectd ksmserver kglobalaccel5 plasma-* *org.kde.* |
| 255 | desktop: sddm* kwalletd5 knotify5 kmix kscreen kwayland-* |
| 256 | |
| 257 | ## XFCE4 |
| 258 | desktop: xfce4-* xfwm4 xfdesktop xfce4-panel xfsettingsd xfconfd |
| 259 | desktop: lightdm lightdm-* |
| 260 | |
| 261 | ## Generic tools related to desktop |
| 262 | desktop: gdm gdm-* dbus-* xdg-* ibus-* evolution-* accounts-daemon colord |
| 263 | desktop: geoclue pulse* pipewire* wireplumber jack* touchegg pulseaudio |
| 264 | desktop: Xwayland Xorg |