Kong Event Gateway metrics

kong.keg.config.errors

Description: Count of errors when loading the config received from the control plane

Labels:

No labels documented.

kong.keg.config.loaded

Description: Version number of the configuration loaded from the control plane. Updated each time the control plane pushes a new config.

Labels:

No labels documented.

kong.keg.kafka.acl.attempts

Description: Counts the results of every ACL attempt

Labels:

• kong.keg.acl.resource_type: The type of Kafka resource being accessed (Possible values: transactional_id, group, topic, cluster)
• kong.keg.result: The result of the ACL check (allowed or denied) (Possible values: allowed, denied)
• kong.konnect.virtual_cluster.id: The Konnect virtual cluster identifier
• kong.konnect.virtual_cluster.name: The Konnect virtual cluster name
• kong.konnect.backend_cluster.id: The Konnect backend cluster identifier
• kong.konnect.backend_cluster.name: The Konnect backend cluster name
• kong.keg.component: The component name

kong.keg.kafka.auth.virtual_cluster.processing.duration

Description: The time spent validating client credentials against virtual cluster auth rules. Passthrough rules are always considered successful even if the backend cluster rejects the authentication

Labels:

• kong.keg.auth.mechanism: The authentication mechanism used by the client
• kong.keg.result: The result of the operation (success or failure) (Possible values: success, fail)
• kong.keg.auth.mediation: How the proxy mediates authentication between the client and the backend cluster. Empty when no rule matched the requested mechanism. (Possible values: passthrough, validate_forward, terminate, ``)
• kong.konnect.virtual_cluster.id: The Konnect virtual cluster identifier
• kong.konnect.virtual_cluster.name: The Konnect virtual cluster name
• kong.konnect.backend_cluster.id: The Konnect backend cluster identifier
• kong.konnect.backend_cluster.name: The Konnect backend cluster name
• kong.keg.component: The component name

kong.keg.kafka.backend.connection.errors

Description: The number of connection errors to the backend cluster

Labels:

• kong.keg.connection.error.origin: The origin of the connection error (Possible values: io, peer, local)

kong.keg.kafka.backend.roundtrip.duration

Description: The time spent communicating with backend cluster (send request and receive response)

Labels:

• kong.konnect.virtual_cluster.id: The Konnect virtual cluster identifier
• kong.konnect.virtual_cluster.name: The Konnect virtual cluster name
• kong.konnect.backend_cluster.id: The Konnect backend cluster identifier
• kong.konnect.backend_cluster.name: The Konnect backend cluster name
• kong.keg.component: The component name

kong.keg.kafka.connection.errors

Description: The number of proxied connections that resulted in an error

Labels:

• kong.konnect.virtual_cluster.id: The Konnect virtual cluster identifier
• kong.konnect.virtual_cluster.name: The Konnect virtual cluster name
• kong.konnect.listener.id: The Konnect listener identifier
• kong.konnect.listener.name: The Konnect listener name
• kong.konnect.backend_cluster.id: The Konnect backend cluster identifier
• kong.konnect.backend_cluster.name: The Konnect backend cluster name
• kong.keg.component: The component name

kong.keg.kafka.connections

Description: The number of active proxied connections

Labels:

• kong.konnect.virtual_cluster.id: The Konnect virtual cluster identifier
• kong.konnect.virtual_cluster.name: The Konnect virtual cluster name
• kong.konnect.listener.id: The Konnect listener identifier
• kong.konnect.listener.name: The Konnect listener name
• kong.konnect.backend_cluster.id: The Konnect backend cluster identifier
• kong.konnect.backend_cluster.name: The Konnect backend cluster name
• kong.keg.component: The component name

kong.keg.kafka.decrypt.attempts

Deprecated. Use kong.keg.kafka.policy.invocations instead.

Description: The number of attempts to decrypt records. This includes both successful and failed calls

Labels:

• kong.keg.result: The result of the operation (success or failure) (Possible values: success, fail)
• kong.konnect.virtual_cluster.id: The Konnect virtual cluster identifier
• kong.konnect.virtual_cluster.name: The Konnect virtual cluster name
• kong.konnect.backend_cluster.id: The Konnect backend cluster identifier
• kong.konnect.backend_cluster.name: The Konnect backend cluster name
• kong.keg.component: The component name

kong.keg.kafka.encrypt.attempts

Deprecated. Use kong.keg.kafka.policy.invocations instead.

Description: The number of attempts to encrypt records. This includes both successful and failed calls

Labels:

• kong.keg.result: The result of the operation (success or failure) (Possible values: success, fail)
• kong.konnect.virtual_cluster.id: The Konnect virtual cluster identifier
• kong.konnect.virtual_cluster.name: The Konnect virtual cluster name
• kong.konnect.backend_cluster.id: The Konnect backend cluster identifier
• kong.konnect.backend_cluster.name: The Konnect backend cluster name
• kong.keg.component: The component name

kong.keg.kafka.kscheme.attempts

Deprecated. Use kong.keg.kafka.policy.invocations instead.

Description: The number of attempts to run kscheme scripts. This includes both successful and failed calls

Labels:

• kong.keg.result: The result of the operation (success or failure) (Possible values: success, fail)
• kong.konnect.virtual_cluster.id: The Konnect virtual cluster identifier
• kong.konnect.virtual_cluster.name: The Konnect virtual cluster name
• kong.konnect.backend_cluster.id: The Konnect backend cluster identifier
• kong.konnect.backend_cluster.name: The Konnect backend cluster name
• kong.keg.component: The component name

kong.keg.kafka.metadata.update.duration

Description: The time to update the metadata from the backend broker

Labels:

• kong.konnect.backend_cluster.id: The Konnect backend cluster identifier
• kong.konnect.backend_cluster.name: The Konnect backend cluster name
• kong.keg.component: The component name

kong.keg.kafka.namespace.topic.conflict

Description: Indicates whether the namespace topic mapping encountered conflicts (1) or not (0).

Labels:

• kong.konnect.virtual_cluster.id: The Konnect virtual cluster identifier
• kong.konnect.virtual_cluster.name: The Konnect virtual cluster name

kong.keg.kafka.policy.condition.failures

Description: The number of times the policy condition failed to execute due to an error

Labels:

No labels documented.

kong.keg.kafka.policy.invocation.duration

Description: The time to process a policy

Labels:

• kong.keg.failure_mode: The configured policy failure mode (Possible values: error, reject, passthrough, mark, skip)
• kong.konnect.virtual_cluster.id: The Konnect virtual cluster identifier
• kong.konnect.virtual_cluster.name: The Konnect virtual cluster name
• kong.konnect.backend_cluster.id: The Konnect backend cluster identifier
• kong.konnect.backend_cluster.name: The Konnect backend cluster name
• kong.keg.component: The component name

kong.keg.kafka.policy.invocations

Description: The number of policy invocation for policies. This includes both successful and failed invocations

Labels:

• kong.keg.failure_mode: The configured policy failure mode (Possible values: error, reject, passthrough, mark, skip)
• kong.keg.result: The result of the operation (success or failure) (Possible values: success, fail)
• kong.konnect.virtual_cluster.id: The Konnect virtual cluster identifier
• kong.konnect.virtual_cluster.name: The Konnect virtual cluster name
• kong.konnect.backend_cluster.id: The Konnect backend cluster identifier
• kong.konnect.backend_cluster.name: The Konnect backend cluster name
• kong.keg.component: The component name

kong.keg.kafka.proxy.duration

Description: The end-to-end time for the entire proxy operation

Labels:

• kong.konnect.virtual_cluster.id: The Konnect virtual cluster identifier
• kong.konnect.virtual_cluster.name: The Konnect virtual cluster name
• kong.konnect.backend_cluster.id: The Konnect backend cluster identifier
• kong.konnect.backend_cluster.name: The Konnect backend cluster name
• kong.keg.component: The component name

kong.keg.kafka.request.processing.duration

Description: The time spent processing the received request before forwarding it to the backend cluster

Labels:

• kong.konnect.virtual_cluster.id: The Konnect virtual cluster identifier
• kong.konnect.virtual_cluster.name: The Konnect virtual cluster name
• kong.konnect.backend_cluster.id: The Konnect backend cluster identifier
• kong.konnect.backend_cluster.name: The Konnect backend cluster name
• kong.keg.component: The component name

kong.keg.kafka.request.received

Description: The number of requests coming from the client

Labels:

• kong.konnect.virtual_cluster.id: The Konnect virtual cluster identifier
• kong.konnect.virtual_cluster.name: The Konnect virtual cluster name
• kong.konnect.backend_cluster.id: The Konnect backend cluster identifier
• kong.konnect.backend_cluster.name: The Konnect backend cluster name
• kong.keg.component: The component name

kong.keg.kafka.request.sent

Description: The number of requests sent to the backend broker

Labels:

• kong.konnect.virtual_cluster.id: The Konnect virtual cluster identifier
• kong.konnect.virtual_cluster.name: The Konnect virtual cluster name
• kong.konnect.backend_cluster.id: The Konnect backend cluster identifier
• kong.konnect.backend_cluster.name: The Konnect backend cluster name
• kong.keg.component: The component name

kong.keg.kafka.response.processing.duration

Description: The time spent processing the received response before forwarding it to the client

Labels:

• kong.konnect.virtual_cluster.id: The Konnect virtual cluster identifier
• kong.konnect.virtual_cluster.name: The Konnect virtual cluster name
• kong.konnect.backend_cluster.id: The Konnect backend cluster identifier
• kong.konnect.backend_cluster.name: The Konnect backend cluster name
• kong.keg.component: The component name

kong.keg.kafka.response.received

Description: The number of responses received from the backend broker

Labels:

• kong.konnect.virtual_cluster.id: The Konnect virtual cluster identifier
• kong.konnect.virtual_cluster.name: The Konnect virtual cluster name
• kong.konnect.backend_cluster.id: The Konnect backend cluster identifier
• kong.konnect.backend_cluster.name: The Konnect backend cluster name
• kong.keg.component: The component name

kong.keg.kafka.response.received.errors

Description: The number of response messages received from the backend that contain at least one error. The error_code label represents the lowest error in the response

Labels:

• kong.keg.kafka.error_code: The lowest error code in the response
• kong.konnect.virtual_cluster.id: The Konnect virtual cluster identifier
• kong.konnect.virtual_cluster.name: The Konnect virtual cluster name
• kong.konnect.backend_cluster.id: The Konnect backend cluster identifier
• kong.konnect.backend_cluster.name: The Konnect backend cluster name
• kong.keg.component: The component name

kong.keg.kafka.response.sent

Description: The number of responses sent by the proxy to the client

Labels:

• kong.konnect.virtual_cluster.id: The Konnect virtual cluster identifier
• kong.konnect.virtual_cluster.name: The Konnect virtual cluster name
• kong.konnect.backend_cluster.id: The Konnect backend cluster identifier
• kong.konnect.backend_cluster.name: The Konnect backend cluster name
• kong.keg.component: The component name

kong.keg.kafka.response.sent.errors

Description: The number of response messages sent back to the client that contain at least one error.

Labels:

• kong.keg.kafka.error_code: The lowest error code in the response
• kong.konnect.virtual_cluster.id: The Konnect virtual cluster identifier
• kong.konnect.virtual_cluster.name: The Konnect virtual cluster name
• kong.konnect.backend_cluster.id: The Konnect backend cluster identifier
• kong.konnect.backend_cluster.name: The Konnect backend cluster name
• kong.keg.component: The component name

kong.keg.kafka.schema.validation.attempts

Deprecated. Use kong.keg.kafka.policy.invocations instead.

Description: The number of attempts to validate schema. This includes both successful and failed calls

Labels:

• kong.keg.record.part: The part of the record (key or value) (Possible values: key, value)
• kong.keg.result: The result of the operation (success or failure) (Possible values: success, fail)
• kong.konnect.virtual_cluster.id: The Konnect virtual cluster identifier
• kong.konnect.virtual_cluster.name: The Konnect virtual cluster name
• kong.konnect.backend_cluster.id: The Konnect backend cluster identifier
• kong.konnect.backend_cluster.name: The Konnect backend cluster name
• kong.keg.component: The component name

kong.keg.kafka.topic_alias.conflict

Description: Emitted (value=1) when a topic alias shadows a physical topic name.

Labels:

• kong.keg.kafka.topic_alias.name: The alias name that caused the conflict
• kong.keg.kafka.topic_alias.shadowed_topic: The physical topic name that is shadowed by the alias
• kong.konnect.virtual_cluster.id: The Konnect virtual cluster identifier
• kong.konnect.virtual_cluster.name: The Konnect virtual cluster name

kong.keg.konnect.analytics.bytes.sent

Deprecated. Use kong.keg.konnect.analytics.sent instead: the standard unit By belongs in metric metadata, not in the name.

Description: Total number of analytics bytes sent in binary websocket messages to the analytics endpoint

Labels:

No labels documented.

kong.keg.konnect.analytics.messages.sent

Description: Total number of analytics messages sent to the analytics endpoint

Labels:

No labels documented.

kong.keg.konnect.analytics.queue.dropped

Description: Number of events dropped from the queue because the max queue size was reached

Labels:

No labels documented.

kong.keg.konnect.analytics.queue.events

Description: Total number of events added to the queue

Labels:

No labels documented.

kong.keg.konnect.analytics.sent

Description: Total bytes sent in binary websocket messages to the analytics endpoint

Labels:

No labels documented.

kong.keg.konnect.analytics.websocket.errors

Description: Number of times an error occurred on the analytics websocket connection while sending or receiving messages

Labels:

No labels documented.

kong.keg.konnect.request.duration

Description: The time sending and receiving the response to a request to the upstream broker

Labels:

• kong.keg.konnect.api: The konnect api operation being performed (Possible values: fetch_config, update_dp_state)
• error.type: The error type encountered on executing http request. Absent if a request was successful. (Possible values: timeout, connect, unknown)
• http.response.status_code: The status code of an http response. Absent if a request did not succeed.

kong.keg.lifecycle.component.ready

Description: Is a specific component ready, the global service being ready implies that all its components are ready

Labels:

• kong.keg.component: The component name

kong.keg.lifecycle.service.healthy

Description: Is the service healthy

Labels:

No labels documented.

kong.keg.lifecycle.service.ready

Description: Is the service ready

Labels:

No labels documented.

kong.keg.listener.connections.limit

Description: The number of allowed connections to the listener

Labels:

No labels documented.

The following labels are commonly used across multiple metrics:

Resource Identification

• messaging.destination.name: Kafka topic name

  Konnect Integration

• kong.keg.policy.type: Policy type in Konnect
• kong.konnect.policy.id: Policy ID in Konnect
• kong.konnect.policy.name: Policy name in Konnect
• kong.konnect.listener.id: Listener ID in Konnect
• kong.konnect.listener.name: Listener name in Konnect

  Operations

• kong.keg.policy.chain_type: Type of policy chain (e.g., produce, consume)
• result: Result of operation (success, fail, allowed, denied)

• kong.keg.record.part: Part being processed (key, value)

• origin: Connection error origin (io, peer, local)

HTTP/Network

• status_code: HTTP status code
• error_code: Kafka error code
• api_key: Kafka API key