Fortinet, Inc.

Lacework Inc.

Prakash Jalan

Yijou Chen

Anil K Nanduri

Matti A Vanninen

Ammar G Ekbote

Alex Ramachandran Nirmala

Prashant Billore

Example systems and methods monitor a cloud compute environment. An example method includes: opening, by an agent deployed in a cloud environment, a communication channel between the agent and a kernel of an operating system of a node within the cloud environment; determining, by the agent and via the communication channel, an event associated with a namespace of the operating system; determining, by the agent and based on the event, a status of a container associated with the node; and providing, by the agent to a data platform, a message indicative of the status of the container.

Container event monitoring using kernel space communication

An illustrative data platform is disclosed that may receive, from an agent deployed in a cloud compute environment monitored by the data platform, data the agent has collected within the cloud compute environment in accordance with an agent operations ruleset. The data platform may determine, based on the data the agent has collected, an operational adjustment to the agent operations ruleset. Accordingly, the data platform may then direct the agent to implement the operational adjustment to the agent operations ruleset for use as the agent continues collecting data within the cloud compute environment in accordance with the agent operations ruleset. Corresponding methods, systems, and products are also disclosed.

Operational adjustment for an agent collecting data from a cloud compute environment monitored by a data platform

Example systems and methods monitor a cloud compute environment. An example method includes: determining, by an agent deployed in a cloud environment and based on a plurality of data packets transmitted over a plurality of network interfaces of the cloud environment, a set of data packets that are associated with a communication between a first container and a second container; determining, by the agent and based on the set of data packets, communication data associated with the communication; and providing, by the agent, the communication data to a data platform, wherein providing the communication data to the data platform uses less network resources than providing the set of data packets to the data platform.

Deduplication of monitored communications data in a cloud environment

Example systems and methods monitor a cloud compute environment. An example method includes an agent obtaining a data packet from an interface in the cloud compute environment, the data packet including a source address and a non-endpoint destination address; determining, based on the non-endpoint destination address and routing information for the data packet, an endpoint destination address associated with the non-endpoint destination address of the data packet; modifying the data packet by replacing the non-endpoint destination address with the endpoint destination address; and providing, based on the modified data packet, monitoring data to a data platform.

Growing community of inventors

Sunnyvale, CA, United States of America

Prakash Jalan