stackrox/collector

Investigate Amplitude integration

Opened this issue · 0 comments

After custom CO-RE BPF rollout it would be hard to get visibility into its
adoption with the current data we have. Investigate if we could use Amplitude
integration to get better understanding how collection methods are used. There
are following questions to cover:

  • What would be the easiest implementation? Proposed options to evaluate are
    integrating Collector directly with Amplitude, or pass the necessary
    information via Sensor and let it report everything.

  • What data should be exposed? Proposed bits if information regarding
    collection method are:

    1. Effective collection method (in case if it was changed by collector at
      runtime and differs from what was configured).
    2. Kernel version Collector is running on.
    3. Cases where a collection method has failed.

    The last one is the trickiest one, as it brings the most valuable information,
    but at the same time we would like to get only a single error pair (collection
    method, kernel version), which is hard as Collector will be in a crash loop.

Part of #1426