Monitoring Tenzir nodes is easier than before with Tenzir
v4.18 and its new health metrics.
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Operators API metrics System metrics api | where timestamp > 1 day ago | top path
Monitor Node Health With Metrics The metrics
operator now additionally takes a positional argument for the
metrics name. Now, metrics cpu
is equivalent to metrics | where #schema ==
"tenzir.metrics.cpu"
. That's a lot easier to write!
Tenzir nodes now collect more metrics than before. In particular, the import
,
export
, publish
, subscribe
, enrich
, and lookup
operators now emit
metrics, and nodes additionally collect api
metrics for every API call and
platform
metrics that record the connection status to the Tenzir Platform from
the node's perspective. These are best explained on examples:
Show imported events per schema and day for the last month
metrics import | where timestamp > 30d ago | summarize events=sum(events) by timestamp, schema resolution 1d | sort timestamp, schema
Calculate the rate of context hits for the context 'iocs'
metrics enrich | where context == "iocs" | summarize events=sum(events), hits=sum(hits) | python 'self.rate = self.hits / self.events'
Show the most commonly used APIs in the last hour
metrics api | where timestamp > 1 day ago | top path
These are just three examples to get you started with monitoring your node.
We're planning to make more data available from more operators in the future,
and have built a new framework that makes emitting custom metrics from operators
a breeze.
Play With TQL2 At this point it's an open secret that we're working working on a major revamp
to the Tenzir Query Language. We still have quite a way to go before
making the next version the new default, but we're excited to announce that as
of Tenzir v4.18, it is now possible to try it out without being a Tenzir developer.
To use TQL2 on app.tenzir.com , for pipelines
configured in the tenzir.yaml
configuration file, or through the API, start
the pipeline with a // experimental-tql2
comment. For example:
// experimental-tql2 export live=true where @name == "zeek.http" if method == "GET" { where request_body.len > 0 publish "weird" } else { where uri.ends_with(".exe") and status_code < 400 publish "suspicious" }
Use tenzir --tql2 <pipeline>
to use TQL2 with the tenzir
binary on the
command-line.
Many things in TQL2 are not implemented, not documented, or not yet working
correctly. We are still making breaking changes to it, so we would like to ask
you not to use it in production.
Got feedback? Head over to the #developers
channel in our community
Discord .
Other Changes As usual, the changelog contains a full list of features, changes,
and bug fixes in this release.
Every second Tuesday at 8 AM EST / 11 AM EST / 5 PM CET / 9.30 PM IST, we hold
office hours in our Discord server . Whether you want to participate
in the TQL2 discussion, have ideas for further metrics, feedback of any kind, a
wild idea that you'd like to bring up, or just want to hang out—come join us!