Display Filter Reference: Sysdig Event
Protocol field name: sysdig
Versions: 2.0.0 to 4.0.8
Back to Display Filter Reference
Field name | Description | Type | Versions |
---|---|---|---|
sysdig | CPU ID | Unsigned integer (16 bits) | 2.0.0 to 4.0.8 |
sysdig | Event length | Unsigned integer (32 bits) | 2.0.0 to 4.0.8 |
sysdig | Event type | Unsigned integer (16 bits) | 2.0.0 to 4.0.8 |
sysdig | Number of parameters | Unsigned integer (32 bits) | 3.2.13 to 3.2.18, 3.4.5 to 4.0.8 |
sysdig | fd | Signed integer (64 bits) | 2.0.0 to 3.0.14 |
sysdig | flags | Unsigned integer (32 bits) | 2.0.0 to 4.0.8 |
sysdig | queuelen | Unsigned integer (32 bits) | 2.0.0 to 4.0.8 |
sysdig | queuemax | Unsigned integer (32 bits) | 2.0.0 to 4.0.8 |
sysdig | Accept queue per connection | Unsigned integer (8 bits) | 2.0.0 to 4.0.8 |
sysdig | tuple | Byte sequence | 2.0.0 to 4.0.8 |
sysdig | mode | Byte sequence | 3.2.0 to 3.6.0 |
sysdig | cmd | Signed integer (64 bits) | 3.2.0 to 4.0.8 |
sysdig | res_or_fd | Byte sequence | 3.2.0 to 4.0.8 |
sysdig | filename | Character string | 3.6.1 to 4.0.8 |
sysdig | id | Character string | 2.0.0 to 3.0.14 |
sysdig | image | Character string | 2.0.0 to 4.0.8 |
sysdig | json | Character string | 3.2.0 to 4.0.8 |
sysdig | type | Unsigned integer (32 bits) | 2.0.0 to 4.0.8 |
sysdig | action | Unsigned integer (32 bits) | 2.0.0 to 4.0.8 |
sysdig | cpu | Unsigned integer (32 bits) | 2.0.0 to 4.0.8 |
sysdig | ratio | Unsigned integer (32 bits) | 2.0.0 to 4.0.8 |
sysdig | maxevents | Byte sequence | 2.0.0 to 4.0.8 |
sysdig | initval | Unsigned integer (64 bits) | 2.0.0 to 4.0.8 |
sysdig | Program arguments | Character string | 2.0.0 to 4.0.8 |
sysdig | cgroups | Byte sequence | 2.0.0 to 4.0.8 |
sysdig | Command | Character string | 2.0.0 to 4.0.8 |
sysdig | Current working directory | Character string | 2.0.0 to 4.0.8 |
sysdig | env | Character string | 2.0.0 to 4.0.8 |
sysdig | exe | Character string | 2.0.0 to 4.0.8 |
sysdig | fdlimit | Unsigned integer (64 bits) | 2.0.0 to 4.0.8 |
sysdig | filename | Character string | 3.2.0 to 3.6.0 |
sysdig | loginuid | Signed integer (32 bits) | 3.2.0 to 4.0.8 |
sysdig | pgft_maj | Unsigned integer (64 bits) | 2.0.0 to 4.0.8 |
sysdig | pgft_min | Unsigned integer (64 bits) | 2.0.0 to 4.0.8 |
sysdig | pid | Byte sequence | 2.0.0 to 3.0.14 |
sysdig | ptid | Byte sequence | 2.0.0 to 4.0.8 |
sysdig | tid | Byte sequence | 2.0.0 to 4.0.8 |
sysdig | tty | Signed integer (32 bits) | 3.2.0 to 4.0.8 |
sysdig | vm_rss | Unsigned integer (32 bits) | 2.0.0 to 4.0.8 |
sysdig | vm_size | Unsigned integer (32 bits) | 2.0.0 to 4.0.8 |
sysdig | vm_swap | Unsigned integer (32 bits) | 2.0.0 to 4.0.8 |
sysdig | mode | Byte sequence | 3.6.1 to 4.0.8 |
sysdig | filename | Byte sequence | 3.6.1 to 4.0.8 |
sysdig | res | Signed integer (64 bits) | 2.0.0 to 4.0.8 |
sysdig | operation | Byte sequence | 2.0.0 to 4.0.8 |
sysdig | op | Byte sequence | 2.0.0 to 4.0.8 |
sysdig | val | Unsigned integer (64 bits) | 2.0.0 to 4.0.8 |
sysdig | gid | Byte sequence | 2.0.0 to 4.0.8 |
sysdig | egid | Byte sequence | 2.0.0 to 4.0.8 |
sysdig | rgid | Byte sequence | 2.0.0 to 4.0.8 |
sysdig | sgid | Byte sequence | 2.0.0 to 4.0.8 |
sysdig | euid | Byte sequence | 2.0.0 to 4.0.8 |
sysdig | ruid | Byte sequence | 2.0.0 to 4.0.8 |
sysdig | suid | Byte sequence | 2.0.0 to 4.0.8 |
sysdig | level | Byte sequence | 3.2.0 to 4.0.8 |
sysdig | optlen | Unsigned integer (32 bits) | 3.2.0 to 4.0.8 |
sysdig | optname | Byte sequence | 3.2.0 to 4.0.8 |
sysdig | val | Byte sequence | 3.2.0 to 4.0.8 |
sysdig | uid | Byte sequence | 2.0.0 to 4.0.8 |
sysdig | description | Character string | 3.2.0 to 4.0.8 |
sysdig | name | Character string | 3.6.1 to 4.0.8 |
sysdig | scope | Character string | 3.2.0 to 4.0.8 |
sysdig | source | Character string | 3.2.0 to 4.0.8 |
sysdig | I/O control: argument | Unsigned integer (64 bits) | 2.0.0 to 4.0.8 |
sysdig | I/O control: request | Unsigned integer (64 bits) | 2.0.0 to 4.0.8 |
sysdig | Parameter length | Unsigned integer (16 bits) | 2.0.0 to 4.0.8 |
sysdig | Parameter lengths | Byte sequence | 2.0.0 to 4.0.8 |
sysdig | newpath | Character string | 3.6.1 to 4.0.8 |
sysdig | oldpath | Character string | 3.6.1 to 4.0.8 |
sysdig | flags | Byte sequence | 3.2.0 to 3.6.0 |
sysdig | newdir | Signed integer (64 bits) | 2.0.0 to 4.0.8 |
sysdig | newpath | Character string | 3.2.0 to 3.6.0 |
sysdig | olddir | Signed integer (64 bits) | 2.0.0 to 4.0.8 |
sysdig | oldpath | Character string | 3.2.0 to 3.6.0 |
sysdig | res | Byte sequence | 3.2.0 to 3.6.0 |
sysdig | backlog | Unsigned integer (32 bits) | 2.0.0 to 4.0.8 |
sysdig | whence | Byte sequence | 2.0.0 to 4.0.8 |
sysdig | path | Byte sequence | 3.2.0 to 4.0.8 |
sysdig | pgoffset | Unsigned integer (64 bits) | 2.0.0 to 4.0.8 |
sysdig | prot | Byte sequence | 2.0.0 to 4.0.8 |
sysdig | res | Unsigned integer (64 bits) | 2.0.0 to 4.0.8 |
sysdig | dev | Character string | 2.0.0 to 4.0.8 |
sysdig | dir | Character string | 2.0.0 to 4.0.8 |
sysdig | type | Character string | 2.0.0 to 4.0.8 |
sysdig | addr | Unsigned integer (64 bits) | 2.0.0 to 3.0.14 |
sysdig | length | Unsigned integer (64 bits) | 2.0.0 to 4.0.8 |
sysdig | interval | Byte sequence | 2.0.0 to 4.0.8 |
sysdig | desc | Character string | 3.2.0 to 4.0.8 |
sysdig | id | Character string | 3.2.0 to 4.0.8 |
sysdig | dev | Unsigned integer (32 bits) | 3.2.0 to 4.0.8 |
sysdig | dirfd | Signed integer (64 bits) | 3.2.0 to 3.6.0 |
sysdig | fd | Signed integer (64 bits) | 3.2.0 to 3.6.0 |
sysdig | mode | Unsigned integer (32 bits) | 2.0.0 to 3.6.0 |
sysdig | name | Character string | 3.2.0 to 3.6.0 |
sysdig | dirfd | Signed integer (64 bits) | 3.6.1 to 4.0.8 |
sysdig | fd | Signed integer (64 bits) | 3.6.1 to 4.0.8 |
sysdig | flags | Byte sequence | 3.6.1 to 4.0.8 |
sysdig | mode | Unsigned integer (32 bits) | 3.6.1 to 4.0.8 |
sysdig | name | Byte sequence | 3.6.1 to 4.0.8 |
sysdig | resolve | Byte sequence | 3.6.1 to 4.0.8 |
sysdig | addr | Unsigned integer (64 bits) | 3.2.0 to 4.0.8 |
sysdig | error | Byte sequence | 3.2.0 to 4.0.8 |
sysdig | ip | Unsigned integer (64 bits) | 3.2.0 to 4.0.8 |
sysdig | fd1 | Signed integer (64 bits) | 2.0.0 to 4.0.8 |
sysdig | fd2 | Signed integer (64 bits) | 2.0.0 to 4.0.8 |
sysdig | ino | Unsigned integer (64 bits) | 2.0.0 to 4.0.8 |
sysdig | event_data | Byte sequence | 3.6.1 to 4.0.8 |
sysdig | plugin_ID | Unsigned integer (32 bits) | 3.6.1 to 4.0.8 |
sysdig | timeout | Signed integer (64 bits) | 2.0.0 to 4.0.8 |
sysdig | fds | Byte sequence | 2.0.0 to 4.0.8 |
sysdig | sigmask | Byte sequence | 2.0.0 to 4.0.8 |
sysdig | timeout | Byte sequence | 2.0.0 to 4.0.8 |
sysdig | newcur | Signed integer (64 bits) | 2.0.0 to 4.0.8 |
sysdig | newmax | Signed integer (64 bits) | 2.0.0 to 4.0.8 |
sysdig | oldcur | Signed integer (64 bits) | 2.0.0 to 4.0.8 |
sysdig | oldmax | Signed integer (64 bits) | 2.0.0 to 4.0.8 |
sysdig | resource | Byte sequence | 2.0.0 to 4.0.8 |
sysdig | core | Unsigned integer (8 bits) | 3.6.1 to 4.0.8 |
sysdig | ret | Byte sequence | 3.6.1 to 4.0.8 |
sysdig | status | Byte sequence | 2.0.0 to 4.0.8 |
sysdig | cpu_sys | Unsigned integer (64 bits) | 2.0.0 to 4.0.8 |
sysdig | cpu_usr | Unsigned integer (64 bits) | 2.0.0 to 4.0.8 |
sysdig | addr | Byte sequence | 2.0.0 to 4.0.8 |
sysdig | data | Byte sequence | 2.0.0 to 4.0.8 |
sysdig | request | Byte sequence | 2.0.0 to 4.0.8 |
sysdig | pos | Unsigned integer (64 bits) | 2.0.0 to 4.0.8 |
sysdig | size | Unsigned integer (32 bits) | 2.0.0 to 4.0.8 |
sysdig | dqb_bhardlimit | Unsigned integer (64 bits) | 2.0.0 to 4.0.8 |
sysdig | dqb_bsoftlimit | Unsigned integer (64 bits) | 2.0.0 to 4.0.8 |
sysdig | dqb_btime | Byte sequence | 2.0.0 to 4.0.8 |
sysdig | dqb_curspace | Unsigned integer (64 bits) | 2.0.0 to 4.0.8 |
sysdig | dqb_ihardlimit | Unsigned integer (64 bits) | 2.0.0 to 4.0.8 |
sysdig | dqb_isoftlimit | Unsigned integer (64 bits) | 2.0.0 to 4.0.8 |
sysdig | dqb_itime | Byte sequence | 2.0.0 to 4.0.8 |
sysdig | dqi_bgrace | Byte sequence | 2.0.0 to 4.0.8 |
sysdig | dqi_flags | Byte sequence | 2.0.0 to 4.0.8 |
sysdig | dqi_igrace | Byte sequence | 2.0.0 to 4.0.8 |
sysdig | id | Unsigned integer (32 bits) | 2.0.0 to 4.0.8 |
sysdig | quota_fmt | Byte sequence | 2.0.0 to 4.0.8 |
sysdig | quota_fmt_out | Byte sequence | 2.0.0 to 4.0.8 |
sysdig | quotafilepath | Character string | 2.0.0 to 4.0.8 |
sysdig | special | Character string | 2.0.0 to 4.0.8 |
sysdig | type | Byte sequence | 2.0.0 to 4.0.8 |
sysdig | newdirfd | Signed integer (64 bits) | 2.0.0 to 3.6.0 |
sysdig | newpath | Character string | 2.0.0 to 3.0.14 |
sysdig | olddirfd | Signed integer (64 bits) | 2.0.0 to 3.6.0 |
sysdig | oldpath | Character string | 2.0.0 to 3.0.14 |
sysdig | newdirfd | Signed integer (64 bits) | 3.6.1 to 4.0.8 |
sysdig | newpath | Byte sequence | 3.6.1 to 4.0.8 |
sysdig | olddirfd | Signed integer (64 bits) | 3.6.1 to 4.0.8 |
sysdig | oldpath | Byte sequence | 3.6.1 to 4.0.8 |
sysdig | op | Unsigned integer (64 bits) | 3.2.0 to 4.0.8 |
sysdig | cmd | Byte sequence | 2.0.0 to 4.0.8 |
sysdig | semid | Signed integer (32 bits) | 2.0.0 to 4.0.8 |
sysdig | semnum | Signed integer (32 bits) | 2.0.0 to 4.0.8 |
sysdig | val | Signed integer (32 bits) | 2.0.0 to 4.0.8 |
sysdig | key | Signed integer (32 bits) | 3.2.0 to 4.0.8 |
sysdig | nsems | Signed integer (32 bits) | 3.2.0 to 4.0.8 |
sysdig | semflg | Byte sequence | 3.2.0 to 4.0.8 |
sysdig | nsops | Unsigned integer (32 bits) | 2.0.0 to 4.0.8 |
sysdig | sem_flg_0 | Byte sequence | 2.0.0 to 4.0.8 |
sysdig | sem_flg_1 | Byte sequence | 2.0.0 to 4.0.8 |
sysdig | sem_num_0 | Unsigned integer (16 bits) | 2.0.0 to 4.0.8 |
sysdig | sem_num_1 | Unsigned integer (16 bits) | 2.0.0 to 4.0.8 |
sysdig | sem_op_0 | Signed integer (16 bits) | 2.0.0 to 4.0.8 |
sysdig | sem_op_1 | Signed integer (16 bits) | 2.0.0 to 4.0.8 |
sysdig | in_fd | Signed integer (64 bits) | 2.0.0 to 4.0.8 |
sysdig | offset | Unsigned integer (64 bits) | 2.0.0 to 4.0.8 |
sysdig | out_fd | Signed integer (64 bits) | 2.0.0 to 4.0.8 |
sysdig | size | Unsigned integer (64 bits) | 2.0.0 to 4.0.8 |
sysdig | nstype | Byte sequence | 2.0.0 to 4.0.8 |
sysdig | pgid | Byte sequence | 3.2.0 to 4.0.8 |
sysdig | pid | Byte sequence | 3.2.0 to 4.0.8 |
sysdig | cur | Signed integer (64 bits) | 2.0.0 to 4.0.8 |
sysdig | max | Signed integer (64 bits) | 2.0.0 to 4.0.8 |
sysdig | how | Byte sequence | 2.0.0 to 4.0.8 |
sysdig | dpid | Byte sequence | 2.0.0 to 4.0.8 |
sysdig | sig | Byte sequence | 2.0.0 to 4.0.8 |
sysdig | spid | Byte sequence | 2.0.0 to 4.0.8 |
sysdig | mask | Unsigned integer (32 bits) | 2.0.0 to 4.0.8 |
sysdig | domain | Byte sequence | 2.0.0 to 4.0.8 |
sysdig | peer | Unsigned integer (64 bits) | 2.0.0 to 4.0.8 |
sysdig | proto | Unsigned integer (32 bits) | 2.0.0 to 4.0.8 |
sysdig | source | Unsigned integer (64 bits) | 2.0.0 to 4.0.8 |
sysdig | fd_in | Signed integer (64 bits) | 2.0.0 to 4.0.8 |
sysdig | fd_out | Signed integer (64 bits) | 2.0.0 to 4.0.8 |
sysdig | next | Byte sequence | 2.0.0 to 4.0.8 |
sysdig | linkpath | Character string | 3.6.1 to 4.0.8 |
sysdig | linkdirfd | Signed integer (64 bits) | 2.0.0 to 4.0.8 |
sysdig | linkpath | Byte sequence | 2.0.0 to 4.0.8 |
sysdig | target | Character string | 2.0.0 to 4.0.8 |
sysdig | ID | Byte sequence | 2.0.0 to 4.0.8 |
sysdig | nativeID | Unsigned integer (16 bits) | 2.0.0 to 4.0.8 |
sysdig | event_data | Unsigned integer (64 bits) | 2.0.0 to 4.0.8 |
sysdig | event_type | Unsigned integer (32 bits) | 2.0.0 to 4.0.8 |
sysdig | clockid | Unsigned integer (8 bits) | 2.0.0 to 4.0.8 |
sysdig | id | Signed integer (64 bits) | 3.2.0 to 4.0.8 |
sysdig | tags | Byte sequence | 3.2.0 to 4.0.8 |
sysdig | flags | Byte sequence | 2.0.0 to 3.0.14 |
sysdig | name | Character string | 2.0.0 to 3.0.14 |
sysdig | res | Byte sequence | 2.0.0 to 3.0.14 |
sysdig | path | Character string | 2.0.0 to 3.0.14, 3.6.1 to 4.0.8 |
sysdig | dirfd | Signed integer (64 bits) | 2.0.0 to 3.0.14 |
sysdig | res | Byte sequence | 3.6.1 to 4.0.8 |
sysdig | fdlimit | Signed integer (64 bits) | 2.0.0 to 4.0.8 |
sysdig | gid | Unsigned integer (32 bits) | 2.0.0 to 4.0.8 |
sysdig | uid | Unsigned integer (32 bits) | 2.0.0 to 4.0.8 |
sysdig | vpid | Byte sequence | 2.0.0 to 4.0.8 |
sysdig | vtid | Byte sequence | 2.0.0 to 4.0.8 |
sysdig | Thread ID | Unsigned integer (64 bits) | 2.0.0 to 4.0.8 |