Concepts¶

Includes TrueWatch components, features, clients, mobile ends, versions, billing, and other term explanations.

Components¶

TrueWatch components include the front-end console Studio, the data gateway DataWay, the data collection Agent DataKit, and the extensible programming platform Func.

Component	Description
Studio	Studio is TrueWatch's console, supporting comprehensive querying and analysis of collected data.
DataWay	DataWay is TrueWatch's data gateway, mainly used to receive data sent by DataKit, then report it to DataFlux for storage.
DataKit	DataKit is TrueWatch's real-time data collection Agent, supporting hundreds of data collections. After DataKit collects data, it sends it to the DataWay data gateway, then DataWay reports it to the center for storage and analysis. DataKit needs to be deployed in the user's own IT environment and supports multiple operating systems. Default collection frequency: 5 minutes
Func	Func is DataFlux Func, TrueWatch's extensible programming platform, used for function development, management, and execution. It is simple to use; just write and publish code, automatically generating an HTTP API interface for the function. The official provides various ready-to-use script libraries, easily allowing TrueWatch to call them.

Features¶

Includes scenarios, events, infrastructure, metrics, logs, application performance, user access, availability monitoring, security checks, etc., providing full-chain-level data analysis and insight capabilities for the collected data.

Feature	Description
Integrations	TrueWatch supports over a hundred data collectors, including HOSTs, CONTAINERS, logs, Nginx, APM, RUM, etc. Just install DataKit to start real-time data collection and report it to TrueWatch workspace for data analysis. You can see how to install DataKit, Func, DCA, and MOBILE endpoints in the integrations section.
Scenarios	In scenarios, you can visualize the collected data through charts. Currently, three display methods are supported: Dashboards, Notes, and Explorers. Dashboards: Dashboards consist of multiple visualized charts, used for viewing and analyzing various data related to the subject simultaneously, obtaining comprehensive information. You can freely adjust layouts and chart sizes; Notes: Notes consist of text documents and other visualized charts, with fixed layouts from top to bottom. They allow combining text and images for data analysis and summary reports; Explorers: Here, you can quickly set up a LOG explorer, supporting custom adding statistical charts, setting default display properties and filter conditions, customizing your LOG viewing needs. Built-in Views: Includes System Views and User Views. System views are templates provided officially, while user views are created and saved as templates by users. Views support cloning from system views and can be bound to scene and explorer details.
Events	Events are generated by monitors, intelligent inspections, SLOs, system operations, and Open APIs. They support real-time monitoring, unified queries, unresolved event statistics, and data export based on event data to trace abnormal situations that occurred during a past time period.
Infrastructure	Physical infrastructure for data collection, currently supporting HOSTs, CONTAINERS, processes, K8s entities, etc.
Metrics	Measurements: Collections of the same type of Metrics. Generally, Metric labels in the same Measurement are the same, and one Measurement can contain multiple Metrics. Metrics: Metrics help understand the overall availability of the system, such as server CPU usage, website loading times, remaining disk space, etc. Metrics consist of Metric names and Metric values. The Metric name is an alias identifying the Metric, and the Metric value refers to the specific numerical value when the Metric is collected. Tags: Sets of attributes identifying a data point’s collection object. Tags are divided into tag names and tag values, and one data point can have multiple tags. For example, when collecting the Metric `CPU Usage`, it identifies `host`, `os`, `product` and other attribute information, which are collectively referred to as tags. Time Series: Based on tags, all possible combinations of reported Metric data in the current workspace. In TrueWatch, Time Series is composed of Metrics, tags (fields), and data storage duration, where the combination of "Metrics" and "tags (fields)" serves as the primary key for data storage.
Logs	Used to record real-time operation or behavior data produced by systems or software, supporting front-end visualization, filtering, and analysis.
APM	Tracks statistics on the time services spend handling requests, request status, and other attribute information, used for monitoring application performance.
RUM	User access monitoring refers to collecting data related to real experiences and behaviors of users interacting with your websites and applications. TrueWatch supports four types of user access monitoring: Web, MOBILE (Android & IOS), and mini-programs.
Synthetic Tests	Using distributed probing nodes worldwide, it periodically monitors websites, domains, API interfaces, etc., via protocols such as HTTP, TCP, ICMP. It supports analyzing site quality through available rate and delay trend changes.
Security Check	Conducts inspections on systems, software, and logs using new security scripts, supporting real-time data output and synchronization of abnormal issues. It helps grasp device operation status and surrounding environmental changes, discover facility defects and safety hazards, and take effective measures promptly.
CI	TrueWatch supports visualizing Gitlab's built-in CI process and results. You can view all CI visualized Pipelines and their success rates, failure reasons, specific failed stages in TrueWatch, helping ensure code updates.
Monitoring	Monitors: By configuring detection rules, trigger conditions, and event notifications, you receive alert notifications immediately, timely discovering and solving problems. Includes threshold detection, mutation detection, interval detection, outlier detection, log detection, process anomaly detection, infrastructure survival detection, application performance metric detection, user access metric detection, security check anomaly detection, synthetic testing anomaly detection, and network data detection. Intelligent Inspection: Based on TrueWatch's intelligent algorithms, it automatically detects and predicts infrastructure and application issues, helping users find problems occurring during IT system operation. Through root cause analysis, it quickly locates abnormal problem causes. SLO: SLO monitoring revolves around DevOps-related metrics, testing whether the system service availability meets target needs. It not only helps users monitor the quality of services provided by vendors but also protects vendors from SLA violations.
Workspaces	TrueWatch's collaborative space for data insights, each workspace being mutually independent. Users can query and analyze data within workspaces and join one or more workspaces via creation or invitation.
DQL	DQL (Debug Query Language) is TrueWatch's data query language. Users can use DQL query syntax in TrueWatch to query Metrics or Logs data and then visualize the data in charts.
Pipeline	Pipeline is TrueWatch's data processing tool. By defining parsing rules, it supports segmenting Metrics, Logs, user access, application performance, base objects, resource catalogs, NETWORKs, security checks, etc., into required structured data.

Client DCA¶

Client DCA (DataKit Control App) is the online management platform for DataKit, supporting viewing DataKit's running status and managing configurations for collectors, blacklists, and Pipelines uniformly.

Mobile APP¶

TrueWatch Mobile APP supports receiving alert notifications for events on mobile devices, viewing all scene views and LOG data in the workspace, completing data analysis and insights anytime and anywhere effortlessly.

Versions¶

TrueWatch offers Free Plan, Commercial Plan, and Deployment Plan versions.

Version	Description
Free Plan	Register to experience TrueWatch feature modules.
Commercial Plan	Cloud-based SaaS public version, pay-as-you-go, ready-to-use, just install DataKit and configure relevant data collectors to complete observability access. For billing rules, refer to Billing Method.
Deployment Plan	Independent deployment on SaaS cloud and local PaaS deployment, requiring users to prepare service resources themselves, with the highest data security level and more service support.

Billing¶

TrueWatch provides a dedicated billing account management platform Billing Center, where you can recharge accounts, view account balances and bill details, bind workspaces, change settlement methods, etc.

For explanations of billing methods and items, refer to the document Billing Method.

Feature	Description
Settlement Methods	TrueWatch fee settlement method, supporting TrueWatch enterprise accounts, cloud accounts, and other settlement methods. TrueWatch enterprise account: TrueWatch Billing Center is specifically used to manage billing-related independent accounts for using TrueWatch products. One enterprise account can associate billing for multiple workspaces. Cloud accounts: TrueWatch Billing Center supports Amazon cloud accounts, Alibaba Cloud accounts, and Huawei Cloud accounts. Users can choose to bind cloud accounts for fee settlement.
Account Management	TrueWatch Billing Center account management, including account profile changes, password modifications, real-name authentication, and cloud account management.
Workspace Management	TrueWatch Billing Center account-bound workspace management. One account can bind multiple TrueWatch workspaces. In workspace management, you can modify the settlement method for TrueWatch workspaces.
Bill Management	TrueWatch Billing Center bill management, including monthly bills, consumption details, income and expenditure details, voucher details, and package detail management.
Support Center	TrueWatch Support Center, where users can submit and manage tickets. TrueWatch technical expert teams will contact users promptly after receiving tickets to solve problems.