Operational Metrics

This section describes the configuration and management of operational and usage metrics, of which there are three categories:

Both resource usage trends and instrumentation metrics are set to true by default. Prometheus metrics can be configured using the information outlined in the Prometheus Metrics section below.

Resource Metrics

Posit Connect uses a separate rserver-monitor process to record resource (CPU, memory, etc.) usage over time. These metrics are collected by default, but the customization settings described in the remainder of this section have no effect when Metrics.Enabled is off.

Resource Metrics Settings

Metrics data is written by default to a set of RRD files. This data is stored by default at /var/lib/rstudio-connect/metrics. You can specify an alternate data path by using the Metrics.DataPath setting.

The rserver-monitor process runs (by default) with the same user account Connect uses to run its processes associated with deployed content. By default, this user account is rstudio-connect (see the Applications.RunAs setting). You can specify an alternate user account for the rserver-monitor process by modifying the Metrics.User setting.

Posit Connect also supports logging of metrics to Graphite, and it supports disabling its default behavior of logging to RRD. Please see the Metrics configuration appendix for more options for configuring the resource metrics in Connect.

Resource Metrics Process Management

Connect automatically spawns a process (rserver-monitor) to help maintain resource data. If this process exits, Connect will restart it in an attempt to record as much resource information as possible. Connect will delay restarting rserver-monitor if it observes rapid, repeated failures.

Since the rserver-monitor needs permission to write data to the metrics data directory, Connect attempts to ensure the necessary permissions at startup. When Connect starts, it grants ownership of the metrics data directory to the user account that will be used to start rserver-monitor.

Resource Metrics Process Logging

The rserver-monitor process logs its output to syslog. If the process is unable to run, you can check the system log (e.g., /var/log/messages or /var/log/syslog) for messages.

Usage Events

Posit Connect can record event-style usage information which is intended to answer questions like, “Who used my Shiny app and for how long?” This information is stored in dedicated tables in the database. When using SQLite, this is handled automatically by creating a second database file named connect-instrumentation. For PostgreSQL, a second, full database URL can be provided in the Postgres.InstrumentationURL setting. If it is not specified, it will default to the value of Postgres.URL. This allows you to store the event data in the same place as the rest of the Connect information, in a different schema, or even a different database, whichever meets your needs best. Please see the PostgreSQL section for more details about using PostgreSQL.

Note

There is currently no data retention policy so all data will always be kept. Data retention controls will be added in a future release.

Shiny Application Events

When a user opens a Shiny application, an event containing their user information and the length of their session will be logged to the instrumentation database. It’s important to note that some configuration settings may affect how the ending time for a session is set.

These events may be retrieved by making use of the “Get Shiny Application Usage” API. The API returns information in pages and provides URLs in each response that may be used as-is to request the next or previous page of information. All data may be retrieved by first invoking the endpoint without next or previous parameters to return the first page of results and then repeatedly following the next link in each response until that link becomes null.

The API may only be used by administrators and publishers. Additionally, publishers may only retrieve information about the Shiny apps that they own.

Optional filters within the request may be used to limit what usage records are returned with each response. Filters are “ANDed” together (i.e. data returned will satisfy all filters).

Application GUIDs may be provided to limit responses to particular applications. A publisher will be implicitly limited to only applications he or she owns. If a publisher asks for information about other content (content owned by someone else), the result will not contain data for that application and will not be reported as an error.

Timestamps may be provided to limit usage information to a more narrow time window of interest. By using the from or to filters, either independently or together, the information returned will be limited to applications that were being accessed within that window of time. It’s worth noting that information for an app will be included in such a request if any portion of its usage by a user falls within the specified time window.

The data returned for a Shiny application session includes a version number. As the Connect software has evolved, issues have been identified with how data is recorded. The version number provides an indication of any known issues and are described below.

Version Issue
0 Extraneous records were recorded under some conditions, notably when protocols other than websockets were used. These can be identified by the same value for started and ended. This may adversely affect analyses involving counts or session lengths.
1 No known issues.

The min_data_version filter may be used to control what data to return. The default minimum data version to return is 1.

Code examples showing how to access this data are in the User Activity API Cookbook recipes. The Connect Server API Reference documents each of the Instrumentation endpoints used by these recipes.

Content Visit Events

When a user visits any content type other than a Shiny application, an event will be logged to the instrumentation database noting the time of the visit, the visitor and the content visited.

Requests made to APIs are also recorded as content visit events. Dashboard and open solo visits to APIs may record a hit for the content visit as well as the serving of documentation, depending on how your API is configured. For example, open solo visits to Plumber Swagger documentation and Plumber Swagger example executions are not recorded, but FastAPI serving documentation when a root GET / is not provided counts as a valid visit.

Visit events are written to the database when the number of hits reaches the configured value of Metrics.InstrumentationBatchSize (default 200) or the elapsed time reaches the configured value of Metrics.InstrumentationInterval (default 2s). In the event the Connect process exits or is terminated, those values bound the amount of queued instrumentation data that will not be stored. If needed, you can restore the old immediate-write behavior by configuring Metrics.InstrumentationBatchSize = 1.

These events may be retrieved by making use of the “Get Content Visits” API. The API returns information in pages and provides URLs in each response that may be used as-is to request the next or previous page of information. All data may be retrieved by first invoking the endpoint without next or previous parameters to return the first page of results and then repeatedly following the next link in each response until that link becomes null.

The API may only be used by administrators and publishers. Additionally, publishers may only retrieve information about the content that they own.

Optional filters within the request may be used to limit what visit records are returned with each response. Filters are “ANDed” together (i.e. data returned will satisfy all filters).

Application GUIDs may be provided to limit responses to particular content. A publisher will be implicitly limited to only content he or she owns. If a publisher asks for information about other content (content owned by someone else), the result will not contain data for that content and will not be reported as an error.

Timestamps may be provided to limit visit information to a more narrow time window of interest. By using the from or to filters, either independently or together, the information returned will be limited to content that was visited within that window of time.

The data returned for a visit to content includes a version number. As the Connect software has evolved, issues have been identified with how data is recorded. The version number provides an indication of any known issues and are described below.

Version Issue
0 Extraneous records were recorded under some conditions, notably when content is not rendered to a self-contained page and refers to images, CSS, JavaScript, and the like as files external to the page but within the content.
1 Activity to Plumber APIs and Python applications and APIs was under-counted. Visits were not recorded when the content was hosted within the Posit Connect dashboard.
2 Dashboard visits to Plumber, Voila, Dash, Streamlit, and Bokeh content were over-counted.
3 No known issues.

The min_data_version filter may be used to control what data to return. The default minimum data version to return is 3.

Code examples showing how to access this data are in the User Activity API Cookbook recipes. The Connect Server API Reference documents each of the Instrumentation endpoints used by these recipes.

Prometheus Metrics

Posit Connect supports the use of the monitoring and alerting system Prometheus via a publicly available metrics endpoint. The Prometheus listen port is configurable via the Metrics.PrometheusListen setting.

Example configuration:

[Metrics]
PrometheusListen = ":3232"

To explicitly turn Prometheus metrics off, set Metrics.PrometheusListen to an empty string:

[Metrics]
PrometheusListen = ""

Included Metrics

The following metrics are exposed publicly at <your-connect-server>:<prometheus-port>/metrics. See the Prometheus documentation for more information on metric types.

Label Type Description
connect_content_app_sessions_current gauge Active content sessions are totalled and returned per user. The content and user identifiers are in GUID format. Content being accessed anonymously has a user value of unknown.
connect_content_hits_total counter Visits to all content items are totalled and returned per user. The content and user identifiers are in GUID format. Shiny content being accessed anonymously has a user value of unknown.
connect_jobs_queue_total_jobs_in_queue gauge The total number of jobs (scheduled reports render, jobs finalizer, LDAP membership updater, and Git updater) in the jobs queue.
connect_jobs_queue_oldest_job_age_seconds gauge The age of the oldest job in the jobs queue.
connect_jobs_queue_active_job_duration_seconds gauge The duration that an active job from the queue has been running for.

Here is an example response received from the /metrics endpoint:

# HELP connect_jobs_queue_active_job_duration_seconds The duration, in seconds, that an active job from the queue has been running for.
# TYPE connect_jobs_queue_active_job_duration_seconds gauge
connect_jobs_queue_active_job_duration_seconds{job_hostname="connect",queue_name="default"} 46.803664925
connect_jobs_queue_active_job_duration_seconds{job_hostname="connect",queue_name="git"} 47.190667134
connect_jobs_queue_active_job_duration_seconds{job_hostname="connect",queue_name="job-finalizer"} 0
connect_jobs_queue_active_job_duration_seconds{job_hostname="connect",queue_name="memberships"} 0
# HELP connect_jobs_queue_oldest_job_age_seconds The age in seconds of the oldest job currently in the queue
# TYPE connect_jobs_queue_oldest_job_age_seconds gauge
connect_jobs_queue_oldest_job_age_seconds{queue_name="default"} 195.45201792699999
connect_jobs_queue_oldest_job_age_seconds{queue_name="git"} 50.452857052
connect_jobs_queue_oldest_job_age_seconds{queue_name="job-finalizer"} 0
connect_jobs_queue_oldest_job_age_seconds{queue_name="memberships"} 0
# HELP connect_jobs_queue_total_jobs_in_queue The total number of active jobs in the queue.
# TYPE connect_jobs_queue_total_jobs_in_queue gauge
connect_jobs_queue_total_jobs_in_queue{queue_name="default"} 4
connect_jobs_queue_total_jobs_in_queue{queue_name="git"} 1
connect_jobs_queue_total_jobs_in_queue{queue_name="job-finalizer"} 0
connect_jobs_queue_total_jobs_in_queue{queue_name="memberships"} 0

Adding a Posit Connect target to Prometheus

Within your Prometheus configuration YAML, add your Posit Connect server to the scrape_configs section:

scrape_configs:
# The job name is added as a label `job=<job_name>` to any timeseries scraped from this config.
- job_name: "prometheus"

  # metrics_path defaults to '/metrics'
  # scheme defaults to 'http'.

  static_configs:
    - targets: ["connectexample.com:3232"]

In the above example our Connect host has configured a Server.Address of connectexample.com and a Metrics.PrometheusListen of :3232.

Note

Connect currently only supports HTTP connections to the Prometheus endpoint.

After making the configuration change you can send a SIGHUP to the Prometheus process in order to reload the configuration. You should then see the endpoint being consumed on your Prometheus dashboard:

Prometheus dashboard showing Prometheus' consumption of Connect metrics.

Connect data can be visualized by executing queries from the Graph tab within the Prometheus dashboard. For example, searching for connect_content_app_sessions_current displays a graph of active sessions over time:

Prometheus dashboard showing a graph of Connect content session data.

See the Prometheus documentation for more query examples.