This reference covers the attributes that are unique to the New Relic eBPF agent for eBPF APM and eBPF network metrics. eBPF data flows into standard NRDB data types (Metric, Span, and Log), and these attributes are available for querying, faceting, and alerting in NRQL.
The eBPF agent also emits standard OpenTelemetry semantic convention attributes (for example, http.request.method, db.system, jvm.memory.usage) and standard OpenTelemetry span fields (trace_id, span_id, kind, and so on). Refer to the OpenTelemetry semantic conventions and the trace API specification for their definitions.
All eBPF telemetry carries the following scope attributes:
Attribute | Value |
|---|---|
|
|
|
|
| The reporting eBPF agent's version (for example, |
eBPF-specific attributes
The following attributes are unique to the New Relic eBPF agent. Expand each section to view the attributes.
These metrics capture TCP connection and packet-level telemetry in the network monitoring context.
Attribute | Definition | Data type |
|---|---|---|
| The amount of data transmitted in bytes. | Gauge |
| The amount of data received in bytes. | Gauge |
| The number of TCP packet retransmissions. | Gauge |
| The average TCP packet latency in nanoseconds. | Gauge |
| The number of TCP data packets sent. | Gauge |
| The number of TCP data packets received. | Gauge |
| The number of TCP packets dropped. | Gauge |
| The TCP three-way handshake latency in nanoseconds. | Gauge |
| The distribution of TCP connection durations in milliseconds. | Exponential histogram |
| The duration of TCP data transmission in milliseconds. | Gauge |
| The number of TCP connections opened. | Gauge |
| The number of TCP connections closed. | Gauge |
| The number of TCP connections closed due to an error. | Gauge |
| The number of TCP RST packets sent. | Gauge |
| The number of TCP SYN packets sent. | Gauge |
| The number of TCP ACK packets sent. | Gauge |
| The number of TCP SYN-ACK packets sent. | Gauge |
| The number of TCP FIN packets sent. | Gauge |
| The number of TCP RST packets received. | Gauge |
| The number of TCP SYN packets received. | Gauge |
| The number of TCP ACK packets received. | Gauge |
| The number of TCP SYN-ACK packets received. | Gauge |
| The number of TCP FIN packets received. | Gauge |
| The total number of file descriptor allocation errors. | Gauge |
| The soft limit ( | Gauge |
| The hard limit ( | Gauge |
| The number of open socket file descriptors. | Gauge |
These attributes provide connection context and are attached to TCP metrics and related network telemetry.
Attribute | Definition | Data type |
|---|---|---|
| The type of connection error. Only present on | String |
| The unique process ID, formatted as | String |
| The protocol name. In network context, always | String |
| The host name tag (New Relic specific). | String |
| Custom entity labels prefixed with | String |
| The local IP address of the connection. | String |
| The local port of the connection. Present on incoming connections only. | Integer |
| The remote IP address of the connection. | String |
| The remote port of the connection. | Integer |
| The resolved remote hostname, or | String |
| The direction of the connection, either | String |
| Whether the TCP connection is established. | Boolean |
| The file descriptor operation type, always | String |
| The file descriptor allocation error code. Only present on | Integer |
| The file descriptor type: | String |
| The trace role of the connection, either | String |
| The host machine's name. | String |
| The HTTP response status code. | Integer |
Attribute | Definition | Data type |
|---|---|---|
| The value of the | String |
| The value of the | String |
| The value of the | Integer |
| The value of the | String |
| The value of the | String |
| The value of the HTTP | String |
Attribute | Definition | Data type |
|---|---|---|
| The SQL table name targeted by the query. Applies to MySQL, PostgreSQL, Cassandra, and MSSQL. | String |
| The MongoDB response latency in milliseconds. | Gauge |
| The DynamoDB table name targeted by the operation. | String |
| The MongoDB command name. | String |
| Carries the database collection or table name. | String |
| Indicates if the span is part of a distributed trace. | Boolean |
| The SQL query string with sensitive values removed. | String |
| Flag indicating if the database operation failed. | Boolean |
| The specific MySQL protocol command performed. | String |
| The specific PostgreSQL protocol message type. | String |
| The Cassandra Query Language (CQL) text. | String |
| The specific Cassandra request opcode name. | String |
| The specific Redis command name. | String |
| The IP address of the remote database server. | String |
Attribute | Definition | Data type |
|---|---|---|
| The number of Kafka operations. | Gauge |
| The 50th percentile of Kafka operation latency in milliseconds. | Gauge |
| The 90th percentile of Kafka operation latency in milliseconds. | Gauge |
| The 99th percentile of Kafka operation latency in milliseconds. | Gauge |
| A summary of Kafka operation latency, including min and max quantiles, in milliseconds. | Gauge |
| The total number of bytes sent or received through Kafka. | Gauge |
For Kafka producer and consumer metrics, refer to the OpenTelemetry Kafka producer metrics and consumer metrics documentation.
Attribute | Definition | Data type |
|---|---|---|
| The name of the Kafka broker service. | String |
| The name of the Kafka broker pod. | String |
| The namespace the Kafka broker runs in. | String |
| The Kafka client identifier. | String |
| The Kafka client type, either | String |
| Whether the Kafka operation resulted in an error. | Boolean |
| The index of the Kafka partition. | Integer |
| The identifier of the Kafka partition for the message. | Integer |
| The name of the Kafka command in the request. | String |
| The name of the Kafka topic (per-partition only). | String |
Attribute | Definition | Data type |
|---|---|---|
| The name of the DNS server. | String |
| The namespace of the DNS server. | String |
| The cluster ID of the DNS server. | String |
Attribute | Definition | Data type |
|---|---|---|
| DNS query latency, in milliseconds. | Integer |
| The DNS query's request body. | String |
| The DNS query's response body. | String |
| The domain name being looked up. | String |
| The DNS return code of a query. | Integer |
| The DNS return code name of a query, as an alphanumeric label. | String |
| Whether the DNS query was resolved successfully. | Boolean |
| The DNS query status, either | String |
| The type of information requested, such as an IPv4 address ( | String |
Attribute | Definition | Data type |
|---|---|---|
| The number of AMQP operations. | Gauge |
| The 50th percentile of AMQP operation latency in milliseconds. | Gauge |
| The 90th percentile of AMQP operation latency in milliseconds. | Gauge |
| The 99th percentile of AMQP operation latency in milliseconds. | Gauge |
| A summary of AMQP operation latency, including min and max quantiles, in milliseconds. | Gauge |
| The total number of bytes sent and received through the AMQP protocol. | Gauge |
| The number of bytes sent in AMQP requests. | Gauge |
| The number of bytes received in AMQP responses. | Gauge |
Attribute | Definition | Data type |
|---|---|---|
| The name of the AMQP broker service. | String |
| The name of the AMQP broker pod. | String |
| The name of the AMQP broker node. | String |
| The name of the AMQP broker deployment. | String |
| The namespace the AMQP broker runs in. | String |
| The type of the AMQP frame. | String |
| The name of the AMQP request method. | String |
| The name of the AMQP response method. | String |
| The AMQP routing key used to route the message. | String |
| The AMQP consumer tag identifying the consumer. | String |
Attribute | Definition | Data type |
|---|---|---|
| Full raw request message JSON. | String |
| Full raw response message JSON. | String |
| True when span is linked to a distributed trace ( | Boolean |
| DNAT-translated broker hostname. Server spans only. | String |
| DNAT-translated local IP. Server spans only. | String |
| DNAT-translated local port. Server spans only. | Integer |
| Source pod name used as OTel service instance identifier. | String |
Attribute | Definition | Data type |
|---|---|---|
| The amount of JVM memory used in bytes. | Gauge |
| The amount of JVM memory committed in bytes. | Gauge |
| The maximum JVM memory obtainable in bytes. | Gauge |
| The duration of JVM garbage collection in milliseconds. | Gauge |
Attribute | Definition | Data type |
|---|---|---|
| The JVM memory type, either | String |
| The name of the JVM garbage collector. | String |
| The name of the JVM memory pool. | String |
Attribute | Definition | Data type |
|---|---|---|
| The JVM process ID. Present on JVM metrics only. | String |
| The cluster ID. Present on Kafka, DNS, and AMQP telemetry. | String |
eBPF APM
Learn how to use New Relic's eBPF APM for zero-code, language-agnostic application monitoring with automatic service discovery.
eBPF network metrics
Learn about eBPF network monitoring capabilities.
eBPF observability overview
Learn how New Relic eBPF observability provides zero-code monitoring for Linux hosts and Kubernetes clusters.