Sensobit agent

Lightweight host collector for metrics, logs, containers, security, and optional traces.

The Sensobit agent is a Go collector that runs on each host. It authenticates with an API key and writes batches to ingest.sensobit.com.

What it collects

Collector	Default	Notes
CPU, memory, disk, network	On	Interval 10–15s
Containers	On	Requires Docker socket access
Top processes	On	Top N by CPU
File and journal logs	Configurable	Syslog and auth logs by default
Service and API discovery	On	Reports discovered listeners to the API
Security	On	Auth log and file-integrity watches
Web security	Off	Nginx/Apache access-log attack patterns
OTLP traces	Off	Local receiver on port `4318`

Install paths

Linux

One-line installer from get.sensobit.com plus systemd.

Docker

Privileged container with host proc, sys, and Docker socket.

Kubernetes

DaemonSet that scrapes every node.

Identity

The agent tags every payload with:

API key — maps the host to your account and default namespace
Hostname — auto-detected unless you override it
Namespace — from the key, SENSOBIT_NAMESPACE, or agent.namespace in config
Tags — for example environment=production and region=us-east-1

Configuration file

Linux installs write /etc/sensobit/config.yaml. A minimal file:

ingestion:
  url: "https://ingest.sensobit.com"
  batch_size: 100
  timeout: 15s
  api_key: "YOUR_API_KEY"

collector:
  interval: 15s
  enabled:
    - cpu
    - memory
    - disk
    - network

agent:
  hostname: ""
  namespace: ""
  tags:
    environment: "production"

Environment variables override the file: SENSOBIT_API_KEY, INGESTION_URL, SENSOBIT_NAMESPACE, HOSTNAME, and COLLECTOR_INTERVAL.