Monitoring Overview

Plans and Pricing

DigitalOcean Monitoring is provided at no additional cost.

Regional Availability

Monitoring is available in all regions. The DigitalOcean Agent must be installed on all participating Droplets.

Features

  • Graphed metrics: System and user CPU usage, memory usage, disk read, disk write, disk usage, incoming and outgoing public bandwidth, incoming and outgoing private bandwidth, top processes by CPU and memory
  • Alert-capable metrics: CPU, incoming bandwidth, outgoing bandwidth, disk read, disk write, memory usage, disk usage
  • Notification methods: Email and Slack

What is the DigitalOcean Agent?

The DigitalOcean Agent is an open-source Go utility that forwards basic metrics about your Droplet to the DigitalOcean metrics backend.

Without the Agent, Droplet Graphs display information about:

  • Public and private bandwidth usage
  • CPU activity
  • Disk I/O

With the Agent, DigitalOcean Monitoring features like alert policies are available, and Droplet Graphs can additionally show:

  • Memory Usage
  • Disk Usage
  • Top processes sorted by CPU and Memory

The Agent currently supports Ubuntu 14.04 and higher, CentOS 6 and higher, Debian 8, and Fedora 28.

Visit the DigitalOcean Agent repository on GitHub to check out the code itself.

What Can the Agent Access?

The Agent service runs as an unprivileged user with access to only three directories:

  • /proc: Where the Agent collects data about the current state of the system
  • /var/opt: Where the Agent writes its authentication information
  • /opt/digitalocean: The binary’s home directory

The Agent reports the top process names to the metrics endpoint. It does not report on environmental variables or process arguments to avoid exposing potentially sensitive information.

How Does the Agent Send Metrics?

The DigitalOcean Agent uses ports 80 and 443 for outgoing data. Inbound access is not required. Since the Agent only uses the ports for outbound data, you can safely run a web server without interference.

Port 80 is used to contact the DigitalOcean metadata service to obtain an authentication token. The Agent uses this token to authenticate to the metrics backend and encrypt its transmissions.

Limitations

  • It is not possible to revert to the original graphs once the Agent has been enabled.
  • You cannot add or change the alert email address for an individual account.