{"componentChunkName":"component---src-components-mark-down-block-js","path":"/docs/what-do-with-scope/","result":{"data":{"markdownRemark":{"html":"<h1 id=\"cool-but-what-can-i-do-with-it\" style=\"position:relative;\"><a href=\"#cool-but-what-can-i-do-with-it\" aria-label=\"cool but what can i do with it permalink\" class=\"anchor before\"><svg aria-hidden=\"true\" focusable=\"false\" height=\"16\" version=\"1.1\" viewBox=\"0 0 16 16\" width=\"16\"><path fill-rule=\"evenodd\" d=\"M4 9h1v1H4c-1.5 0-3-1.69-3-3.5S2.55 3 4 3h4c1.45 0 3 1.69 3 3.5 0 1.41-.91 2.72-2 3.25V8.59c.58-.45 1-1.27 1-2.09C10 5.22 8.98 4 8 4H4c-.98 0-2 1.22-2 2.5S3 9 4 9zm9-3h-1v1h1c1 0 2 1.22 2 2.5S13.98 12 13 12H9c-.98 0-2-1.22-2-2.5 0-.83.42-1.64 1-2.09V6.25c-1.09.53-2 1.84-2 3.25C6 11.31 7.55 13 9 13h4c1.45 0 3-1.69 3-3.5S14.5 6 13 6z\"></path></svg></a>Cool, but What Can I Do with It?</h1>\n<p>AppScope offers APM-like, black-box instrumentation of any unmodified Linux executable and application. You can use AppScope in single-user troubleshooting, or in a distributed production deployment, with little extra tooling infrastructure. Especially when paired with <a href=\"https://cribl.io/edge/\">Cribl Edge</a> or <a href=\"https://cribl.io/stream/\">Cribl Stream</a>, AppScope can deliver just the data you need to your existing tools.</p>\n<h2 id=\"instrument-collect-and-observe\" style=\"position:relative;\"><a href=\"#instrument-collect-and-observe\" aria-label=\"instrument collect and observe permalink\" class=\"anchor before\"><svg aria-hidden=\"true\" focusable=\"false\" height=\"16\" version=\"1.1\" viewBox=\"0 0 16 16\" width=\"16\"><path fill-rule=\"evenodd\" d=\"M4 9h1v1H4c-1.5 0-3-1.69-3-3.5S2.55 3 4 3h4c1.45 0 3 1.69 3 3.5 0 1.41-.91 2.72-2 3.25V8.59c.58-.45 1-1.27 1-2.09C10 5.22 8.98 4 8 4H4c-.98 0-2 1.22-2 2.5S3 9 4 9zm9-3h-1v1h1c1 0 2 1.22 2 2.5S13.98 12 13 12H9c-.98 0-2-1.22-2-2.5 0-.83.42-1.64 1-2.09V6.25c-1.09.53-2 1.84-2 3.25C6 11.31 7.55 13 9 13h4c1.45 0 3-1.69 3-3.5S14.5 6 13 6z\"></path></svg></a>Instrument, Collect, and Observe</h2>\n<ul>\n<li>Metrics about process and application performance.</li>\n<li>Logs emitted from an application – with zero configuration – delivered to log files or to the console.</li>\n<li>Network flow logs, metrics, and all DNS requests.</li>\n<li>File open and close operations, with I/O consumption per file.</li>\n<li>HTTP requests to and from an application, including URI endpoint, HTTP header, and full payload visibility.</li>\n<li>HTTPS too :)</li>\n</ul>\n<p>AppScope works with static or dynamic binaries, and can instrument anything running in Linux. The CLI makes it easy to inspect any application without needing a man-in-the-middle proxy. Once you've gained familiarity, you can use the AppScope library independently of the CLI, with even more fine-grained configuration options.</p>\n<p>AppScope collects and forwards StatsD-style metrics about running applications. With HTTP-level visibility, any web server or application can be instantly observable. AppScope's output allows you to use general-purpose tools instead of specialized APM tools and agents.</p>\n<h2 id=\"use-cases\" style=\"position:relative;\"><a href=\"#use-cases\" aria-label=\"use cases permalink\" class=\"anchor before\"><svg aria-hidden=\"true\" focusable=\"false\" height=\"16\" version=\"1.1\" viewBox=\"0 0 16 16\" width=\"16\"><path fill-rule=\"evenodd\" d=\"M4 9h1v1H4c-1.5 0-3-1.69-3-3.5S2.55 3 4 3h4c1.45 0 3 1.69 3 3.5 0 1.41-.91 2.72-2 3.25V8.59c.58-.45 1-1.27 1-2.09C10 5.22 8.98 4 8 4H4c-.98 0-2 1.22-2 2.5S3 9 4 9zm9-3h-1v1h1c1 0 2 1.22 2 2.5S13.98 12 13 12H9c-.98 0-2-1.22-2-2.5 0-.83.42-1.64 1-2.09V6.25c-1.09.53-2 1.84-2 3.25C6 11.31 7.55 13 9 13h4c1.45 0 3-1.69 3-3.5S14.5 6 13 6z\"></path></svg></a>Use Cases</h2>\n<p>You could do any of the following with AppScope (see <a href=\"/docs/examples-use-cases\">Further Examples</a> for details):</p>\n<ul>\n<li>Send HTTP events from Slack to a specified Splunk server.</li>\n<li>Send metrics from nginx to a specified Datadog server.</li>\n<li>Send metrics from a Go static application to a specified Datadog server.</li>\n<li>For any of the above examples, substitute your analytics tool of choice. Optimize the data flow by mediating it through <a href=\"https://cribl.io/product/\">Cribl Stream</a>.</li>\n<li>Run <code>scope service sshd</code> in the AppScope CLI, so that the next time the <code>sshd</code> service starts, it will be scoped.</li>\n<li>Run Firefox from the AppScope CLI, and view results on a terminal-based dashboard.</li>\n<li>Run Google Chrome from the AppScope CLI, and view results on a terminal-based dashboard. And be surprised.</li>\n<li>Monitor multiple Apache instances in a server farm, running the data <a href=\"/docs/cribl-integration#scaling-scoped-processes\">through Cribl Edge to Cribl Stream</a>.</li>\n</ul>\n<p>People in different roles can solve different problems with AppScope. Consider the following use cases, explored in depth in blog posts by the AppScope team:</p>\n<ul>\n<li>An SRE/developer who needs <a href=\"https://cribl.io/blog/appscope-1-0-changing-the-game-for-sres-and-devs/\">application-specific visibility</a>.</li>\n<li>An Infosec practitioner who needs to <a href=\"https://cribl.io/blog/appscope-1-0-changing-the-game-for-infosec-part-1/\">vet an app for security</a> before deployment in an enterprise environment.</li>\n<li>An Infosec practitioner who wants to <a href=\"https://cribl.io/blog/appscope-1-0-changing-the-game-for-infosec-part-2/\">investigate how apps interact</a> in an enterprise environment.</li>\n</ul>","frontmatter":{"title":"Cool, but What Can I do with It?"}}},"pageContext":{"slug":"/what-do-with-scope/","id":"ba38d183-6b42-548e-8d69-33cebad3b435"}},"staticQueryHashes":["2787008656","306729481","625673991","640077088"]}