New Relic data dictionary

This data dictionary defines some of our default-reported data stored in NRDB and queryable via NRQL. This includes events like Transaction, MobileRequest, and BrowserInteraction, and our Metric, Log, and Span data types. These definitions are also available from our query builder UI by mousing over applicable data type and attribute names.

This dictionary doesn't contain:

  • Data from our infrastructure integrations (for that, see docs for a specific integration)
  • Custom data
  • Detailed integration-specific attributes for Metric data

ProcessSample

Data source:

ProcessSample event gathers detailed resource usage information from programs running on a single system. New Relic samples the data every 20 seconds for every active process and packages it into a ProcessSample event, which then sends the raw data to New Relic's collectors.

Attribute nameDefinitionData types
agentName

The name of the agent (Infrastructure).

agentVersion

The version of the New Relic Infrastructure agent.

commandLine

The full command line for the current process. This command line will be sanitized by default to strip options and arguments from the command line to prevent accidental leakage of private information.

commandName

The command name of the process corresponds, in most cases, to the base name of the command line's path to the form of the process.

In Linux, this attribute is retrieved from `/proc/PID/stat`, in which strings longer than 16 characters are silently truncated. Internally, linux command names can be up to 16 bytes long. More information can be found in the [proc manual pages](https://man7.org/linux/man-pages/man5/proc.5.html).
contained

Returns true if the process is running inside a container; false if not inside a container.

containerId
ID

For processes running inside a Docker container, the unique Docker container ID for this process.

containerImage
ID

For processes running inside a Docker container, the Docker image ID for the image this process is based on.

containerImageName

For processes running inside a Docker container, the Docker image name for this process.

containerLabel_KEY

For processes running inside a Docker container, the Docker label associated with this process.

Docker labels consist of key/value pairs. The key is captured in the attribute name as containerLabel_KEY, and the returned stringtype value is then associated with that attribute.

For example, to query a owner label for containers maintained by Test User:

SELECT cpuPercent FROM ProcessSample WHERE containerLabel_owner = 'Test User'

containerName

For processes running inside a Docker container, the Docker container name for this process

cpuPercent
percentage (%)

The combined CPU usage (of all types, including system, user, I/O, depending on platform), by CPU core, for this process at a single point in time. For systems with more than one CPU core, this percentage may be greater than 100%.

cpuSystemPercent
percentage (%)

The system-time CPU usage component used by the process.

cpuUserPercent
percentage (%)

The user-time CPU usage component used by the process.

criticalViolationCount
count

The number of times that alert conditions violated critical thresholds, causing critical violations and opening incidents. If this attribute does not exist on the sample, it has zero violations.

entityID
ID

New Relic's unique ID number for the entity that is reporting data. This is used by New Relic to distinguish between customers and their entities.

fullHostname

The fully qualified (DNS) hostname.

hostname

The short version of the entity's name.

ioReadBytesPerSecond
rate

The number of bytes read from all storage devices per second.

ioReadCountPerSecond
rate

The number of disk read operations by the process per second.

ioTotalReadBytes
count

Counts bytes that the process caused to be fetched from the storage layer.

Count of bytes that the process caused to be fetched from the storage layer. Done at submit_bio() level, so it's accurate for block-backed filesystems. Read from the /proc/PID/io file, where PID is the ID of the process being monitored.

ioTotalReadCount
count

Cumulative number of disk read operations by this process.

ioTotalWriteBytes
count

Counts bytes that the process caused to be sent to the storage layer.

Counts bytes that the process caused to be sent to the storage layer. This is done at page-dirtying time. Read from the /proc/PID/io file, where PID is the ID of the process being monitored.

ioTotalWriteCount
count

Cumulative number of disk write operations by this process.

ioWriteBytesPerSecond
rate

The number of bytes written by this process per second.

ioWriteCountPerSecond
rate

The number of disk write operations by the process per second.

kernelVersion

The Linux kernel version, in string format.

This attribute is available only for systems on a Linux platform.

linuxDistribution

The name of the Linux distribution the server is using.

This attribute is available only for systems on a Linux platform.

memoryResidentSizeBytes
bytes (B)

The total amount of physical memory in use for the process, in bytes.

memoryVirtualSizeBytes
bytes (B)

The total amount of virtual memory reserved for the process, in bytes.

operatingSystem

The operating system on which the agent is installed.

parentProcessId
ID

The unique parent identification number (PID) for this process.

processDisplayName

The display name (friendly name) of the process.

This is derived from the command name by default, but if it can be determined that the process is associated with a service from the inventory system, New Relic uses the service name. Another source of the name may be a parsed component of the command line, if it is a known command line format (for example, Java app).

processId
ID

The unique process identification number for this process.

state

The current process status as a platform-specific state name. For example: running or sleeping.

threadCount
count

The number of threads active for this process.

timestamp

The time (date, hour, minute, second) at which the interaction occurred.

userId
ID

The user identifier under which the process is running.

userName

The username of the owner of the process; for example, root or ubuntu.

warningViolationCount
count

The number of times that alert conditions violated warning thresholds, causing warning violations.

windowsFamily

The Windows family indicates whether the OS is a server or desktop targeted system.

This attribute is available only for systems on a Windows platform.

windowsPlatform

The full product name of the installed version of Windows.

This attribute is available only for systems on a Windows platform.

windowsVersion

The combined Windows version and build-number string of the OS.

This attribute is available only for systems on a Windows platform.