...

Having the required data and the unification of streams is central to Kloudfuse platform being able to do the auto alerting. Hawkeye service is designed to monitor user controllable entities in their infrastructure for abnormal behavior depending on the entity in an intelligent fashion.

Anomalies: Services

Knight discovers peer to peer communication between services automatically. The communication is tracked for various protocols. The discovered services and their connection to other services (entities) is discovered (and shown in the service list UI). The service map is also discovered using the communication as edges. Each of the service list and service map records the RED metric for the service or the edge.

Using this data, HawkEye looks for anomalies in real-time fashion using state-of-the-art statistical learning algorithms or service level objectives as configured. If an anomalous behavior is detected then an alert is raise which is then evaluated by BullsEye.

Persistent Volumes

This feature is not enabled by default. Contact us for more information. Follow these steps to enable.

Outliers: Resources

Using Kubernetes data Kloudfuse automatically monitors resource consumption for outliers.

Forecasting: Persistent Volumes

Using Kubernetes data Kloudfuse automatically monitors the forecasted behavior of persistent volumes to watch out for capacity exhaustion.

BullsEye: Auto Analysis

Bullseye service is designed for analyzing signals, correlating them with signals within the same stream or across the streams. This analysis helps reduce the effort required to debug issues and narrowing down problematic areas in minutes.

...

BullsEye is designed to narrow down to other anomalous areas of your infrastructure starting from the source which is captured in an alert. Due to the Kloudfuse Platform being unified, i.e., all data being present in a single platform, it can cast a wider net for looking into data derived from each of the streams present in the system, making it the most likely to identify problematic behavior in minutes.

Additionally, if instrumentation less tracing is enabled, it can sieve through this wider net in much more efficient manner to eliminate noise and present only the most relevant information which can tremendously reduce the time to resolution

Configuring Bullseye to run analysis when an alert fires, or an ad-hoc basis is possible. Please follow these steps to enable.

Bullseye is also configured to be executed for all alerts/signals monitored by Hawkeye using auto alerting.