/usr/share/sysdig/chisels/topprocs_file.lua is in sysdig 0.8.0-1.
This file is owned by root:root, with mode 0o644.
The actual contents of the file can be viewed below.
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 | --[[
Copyright (C) 2013-2014 Draios inc.
This program is free software: you can redistribute it and/or modify
it under the terms of the GNU General Public License version 2 as
published by the Free Software Foundation.
This program is distributed in the hope that it will be useful,
but WITHOUT ANY WARRANTY; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
GNU General Public License for more details.
You should have received a copy of the GNU General Public License
along with this program. If not, see <http://www.gnu.org/licenses/>.
--]]
-- Chisel description
description = "Shows the top processes in terms of total (in+out) bytes to disk. This chisel is compatable with containers using the sysdig -pc or -pcontainer argument, otherwise no container information will be shown."
short_description = "Top processes by R+W disk bytes"
category = "I/O"
-- Chisel argument list
args = {}
-- The number of items to show
TOP_NUMBER = 10
-- Argument notification callback
function on_set_arg(name, val)
return false
end
-- Initialization callback
function on_init()
-- The -pc or -pcontainer options was supplied on the cmd line
print_container = sysdig.is_print_container_data()
if print_container then
chisel.exec("table_generator",
"proc.name,proc.pid,thread.vtid,container.name",
"Process,Host_pid,Container_pid,container.name",
"evt.rawarg.res",
"Bytes",
"fd.type=file and evt.is_io=true",
"" .. TOP_NUMBER,
"bytes")
else
chisel.exec("table_generator",
"proc.name,proc.pid",
"Process,PID",
"evt.rawarg.res",
"Bytes",
"fd.type=file and evt.is_io=true",
"" .. TOP_NUMBER,
"bytes")
end
return true
end
|