##
## apps.plugin process grouping
##
## Documentation at:
## https://github.com/netdata/netdata/blob/master/src/collectors/apps.plugin/README.md
##
## -----------------------------------------------------------------------------
## Subprocesses of process managers are monitored individually.
## (uncomment to add or edit - the default is also hardcoded into the plugin)

## Clear all the managers, to set yours, otherwise append to the internal list.
#managers: clear

## Linux process managers
#managers: init systemd containerd-shim-runc-v2 dumb-init gnome-shell docker-init tini
#managers: spawn-plugins openrc-run.sh crond plasmashell xfwm4
#managers: *python3*bin/yugabyted*

## FreeBSD process managers
#managers: init spawn-plugins

## MacOS process managers
#managers: launchd sshd-session spawn-plugins

## Windows process managers
#managers: wininit services explorer System netdata

## -----------------------------------------------------------------------------
## Interpreters to search for the actual command name in command line.
## (uncomment to add or edit - the default is also hardcoded into the plugin)

## Clear all the interpreters, to set yours, otherwise append to the internal list.
#interpreters: clear

#interpreters: python python2 python3
#interpreters: sh bash zsh dash csh tcsh ksh
#interpreters: node perl awk

## -----------------------------------------------------------------------------
## Processes of interest
## Grouping and/or rename individual processes.
## (there is no internal default for this section)
##
## Pattern matching rules:
## - All matches are CASE INSENSITIVE (case sensitive in v2.5.2 and earlier)
## - Use quotes for process names with spaces: "Process Name"
## - Patterns work on both Unix-like systems and Windows:
##   - Exact match: firefox (matches process named firefox)
##   - Prefix match: firefox* (matches firefox, firefox.exe, firefox-bin, etc.)
##   - Suffix match: *fox (matches firefox, icefox, etc.)
##   - Substring match: *firefox* (searches in full command line/path)
##
## Windows-specific notes:
## - Process names work without .exe extension (automatically handled)
## - Substring patterns (*pattern*) search within the full command line including arguments
## - No backslash escaping needed for Windows paths
## - The 'name' field (friendly name) is used for default categories when no pattern matches
## - v2.5.3+: Patterns also match against the 'name' field (friendly name)

## NETDATA processes accounting
netdata: netdata

## NETDATA agent-service-discovery (kubernetes)
agent_sd: agent_sd

## -----------------------------------------------------------------------------

oracledb: ora_* oracle_* *runOracle.sh*
unicorn: *unicorn*
puma: *puma*
couchdb: *couchdb*
graphite: *carbon-cache.py* *carbon-aggregator.py* *graphite/manage.py*
opentsdb: *net.opentsdb.tools.TSDMain*
imapd: *imapd
pop3d: *pop3d
popd: *popd
camo: *camo*
vicidial: *vicidial*
vines: *vines*
prosody: *prosody*
azure: mdsd *waagent* *omiserver* *omiagent* hv_kvp_daemon hv_vss_daemon *auoms* *omsagent*
datadog: *datadog*
newrelic: newrelic*
google-agent: *google_guest_agent* *google_osconfig_agent*
aws-s3: '*aws s3*' s3cmd s5cmd
proxmox-ve: pve* spiceproxy
libvirt: virtlogd virtqemud virtstoraged virtnetworkd virtlockd virtinterfaced
libvirt: virtnodedevd virtproxyd virtsecretd libvirtd
guest-agent: qemu-ga spice-vdagent cloud-init*
dhcp: dhcp* dhclient

build: cc1 cc1plus as gcc* cppcheck ld make cmake automake autoconf autoreconf
build: cargo rustc bazel buck git gdb valgrind* rpmbuild dpkg-buildpackage
packagemanager: apt* dpkg* dselect dnf yum rpm zypp* yast* pacman xbps* swupd*
packagemanager: packagekitd pkgin pkg apk snapd slackpkg slapt-get emerge*
clam: clam* *clam
backup: rsync lsyncd bacula* borg rclone
cron: cron* atd anacron *systemd-cron* incrond
ups: upsmon upsd */nut/* apcupsd

rabbitmq: *rabbitmq*
sidekiq: *sidekiq*
vernemq: *beam.smp*vernemq* *start_vernemq* *run_erl*vernemq* *vernemq*epmd*
erlang: beam.smp
postfix: *postfix*

dagster: *dagster*

## -----------------------------------------------------------------------------
## java applications

hdfsdatanode: *org.apache.hadoop.hdfs.server.datanode.DataNode*
hdfsnamenode: *org.apache.hadoop.hdfs.server.namenode.NameNode*
hdfsjournalnode: *org.apache.hadoop.hdfs.qjournal.server.JournalNode*
hdfszkfc: *org.apache.hadoop.hdfs.tools.DFSZKFailoverController*
yarnnode: *org.apache.hadoop.yarn.server.nodemanager.NodeManager*
yarnmgr: *org.apache.hadoop.yarn.server.resourcemanager.ResourceManager*
yarnproxy: *org.apache.hadoop.yarn.server.webproxy.WebAppProxyServer*
sparkworker: *org.apache.spark.deploy.worker.Worker*
sparkmaster: *org.apache.spark.deploy.master.Master*
hbaseregion: *org.apache.hadoop.hbase.regionserver.HRegionServer*
hbaserest: *org.apache.hadoop.hbase.rest.RESTServer*
hbasethrift: *org.apache.hadoop.hbase.thrift.ThriftServer*
hbasemaster: *org.apache.hadoop.hbase.master.HMaster*
zookeeper: *org.apache.zookeeper.server.quorum.QuorumPeerMain*
hive2: *org.apache.hive.service.server.HiveServer2*
hivemetastore: *org.apache.hadoop.hive.metastore.HiveMetaStore*
solr: *solr.install.dir*
airflow: *airflow*
kafka: *kafka.Kafka*

## -----------------------------------------------------------------------------
## Kernel / System
## The following are interesting kernel threads and related processes to
## monitor individually, mainly for their CPU utilization.

## These kernel threads switch tasks all the time, so they should never be
## categorized as anything specific.
kernel: kworker/*

## Kernel Samepage Merging (KSM) daemon that looks for identical memory pages
## across processes and merges them to save memory.
ksmd: ksmd

## Handles migration of processes between CPU cores to balance load.
kmigration: migration/*

## Manages memory compaction, moving memory pages around to reduce
## fragmentation.
kcompactd: kcompactd*

## Responsible for freeing up memory by swapping pages to disk when needed.
kswapd: kswapd*

## DAMON is a mechanism designed to efficiently monitor the memory access
## patterns of running processes or the system itself.
kdamond: kdamond

## Manages ballooning in virtualized environments.
vballoon: vballoon*

## virtio - Handles or I/O (storage and network) on virtual machines.
kvirtio: virtio-* vhost-*

## Layer 4 (transport layer) load balancing
ipvs: ipvsd ipvs_* ip_vs_*

## Hugepages
## Scans memory regions and tries to promote regular-sized pages (4KB) into
## hugepages (2MB) where possible. Merge smaller contiguous 4KB pages into 2MB
## pages. Hugepages also use: kswapd, kcompactd, and migration.
khugepaged: khugepaged

## Note about zswap:
## zswap does not introduce its own dedicated kernel threads. Instead, it
## operates within the existing memory management and swapping framework of the
## kernel:
## - kswapd: swaps pages in/out of memory, using compression in the process.
## - kcompactd: compacts memory when pages are compressed or moved around.

## -----------------------------------------------------------------------------
## Block Devices

## Handles deferred block I/O operations for block devices.
kblockd: kblockd

## Device Mapper (DM)
device-mapper: kcopyd/* kcryptd/* kdmflush/* dm_bufio_cache
device-mapper: raid1/* raid5/* raid10/* multipathd bioset/*

## Software RAID (MD)
md-raid: md*_raid* md*_resync md*_reshape md*_recovery md_thread
md-raid: flush_md* raid*_sync

## iSCSI
iscsi: iscsid iscsiadm iscsi_eh/* iscsi_xmit/* iscsi_ttx/* iscsi_rx/* iscsi_trx/*

## SCSI
scsi: scsi_eh/* scsi_tmf/* scsi_wq/*

## BCACHE
bcache: bcache* bch_btree_io bch_journal

## SAS
sas: sas_task/* mpt*

## Fibre Channel (FC)
fc: fc_transport qla2xxx*

## loop devices
loop: loop* flush-loop*

## -----------------------------------------------------------------------------
## Filesystems

## Ext4
ext4: ext4-* jbd2/*

## XFS
xfs: xfs*

## BTRFS
btrfs: btrfs*

## NFS
nfs: rpcbind rpc.* nfs* rpciod

## ZFS
zfs: spl_* z_* txg_* zil_* arc_* l2arc* zfs* zed zdb zpool*

## CEPH
ceph: ceph-* ceph_* radosgw* rbd-* cephfs-*
ceph: ceph cephadm osdmaptool crushtool rados rbd

## CIFS & Samba
cifs: smbd nmbd winbindd ctdbd ctdb-* ctdb_*
cifs: cifsd cifscreds cifs.upcall

## Apple Filling Protocol (AFP)
afp: netatalk afpd cnid_dbd cnid_metad

## -----------------------------------------------------------------------------
## Desktops

systemd-journald: systemd-journald systemd-journal-remote systemd-journal-upload systemd-journal-gatewayd
systemd: systemd systemd-*

## GNOME
desktop: gnome-* gsd-* gjs goa-* gcr-* gvfs-* *xdg-*-gnome* passimd gvfsd*
desktop: at-spi-* at-spi2-* dconf-service gcr-*

## KDE
desktop: plasmashell kwin-* kde* *-kde-* klauncher kactivitymanagerd krunner
desktop: kdeconnectd ksmserver kglobalaccel5 plasma-* *org.kde.*
desktop: sddm* kwalletd5 knotify5 kmix kscreen kwayland-*

## XFCE4
desktop: xfce4-* xfwm4 xfdesktop xfce4-panel xfsettingsd xfconfd
desktop: lightdm lightdm-*

## Generic tools related to desktop
desktop: gdm gdm-* dbus-* xdg-* ibus-* evolution-* accounts-daemon colord
desktop: geoclue pulse* pipewire* wireplumber jack* touchegg pulseaudio
desktop: Xwayland Xorg

## -----------------------------------------------------------------------------
## MacOS system components of interest
##
## On MacOS, processes not matched by this file are grouped automatically by
## their executable path: applications keep their own group, Apple framework
## helpers are aggregated into 'system-frameworks', Apple standalone daemons
## into 'system-daemons', and driver extensions into 'driver-extensions'.
##
## The entries below re-expose famous, long-stable components that would
## otherwise be hidden inside those buckets. All names are unique to MacOS.

## The display compositor - usually the top CPU consumer on a Mac.
windowserver: WindowServer

## Spotlight indexing and search.
spotlight: mds mds_stores mdworker* corespotlightd spotlightknowledged* mdbulkimport

## Photo and media content analysis (face recognition, object detection).
media-analysis: photoanalysisd photolibraryd mediaanalysisd*

## CoreAudio daemons.
coreaudio: coreaudiod audiomxd systemsoundserverd

## Filesystem events notification daemon.
fseventsd: fseventsd

## iCloud synchronization.
icloud: cloudd cloudphotod

## Background network transfers (App Store, iCloud, software updates).
nsurlsessiond: nsurlsessiond

## Time Machine backups.
timemachine: backupd backupd-helper

## Hardware-accelerated video encoding/decoding services.
videotoolbox: VTDecoderXPCService* VTEncoderXPCService*
