Blog
Insights on observability, monitoring, and engineering best practices from the Coroot team.
The hard part of AI root cause analysis is no longer the model
We ran one real incident through eleven LLMs. The reasoning turned out to be the easy part; the real challenge is the harness that feeds the model the right context.
Nikolay Sivko
Observability on Windows, before eBPF is production-ready
Coroot's agent now runs on Windows. The story of building it on ETW instead of eBPF: what came easy, what was hard, and what we left for later.
Nikolay Sivko
Zero-config Go heap profiling
How we added continuous Go heap profiling to coroot-node-agent without requiring any code changes, pprof endpoints, or annotations, by reading runtime.mbuckets directly from process memory.
Nikolay Sivko
Profiling Java apps: breaking things to prove it works
We added async-profiler support to Coroot for Java CPU, memory, and lock contention profiling with no code changes—then broke things to prove it works.
Nikolay Sivko
Making encrypted Java traffic observable with eBPF
Learn how Coroot makes encrypted Java traffic observable by combining a lightweight Java agent with eBPF uprobes—no code changes, no sidecars.
Nikolay Sivko
Instrumenting Rust TLS with eBPF
Learn how to capture plaintext from rustls using eBPF uprobes—no code changes—and make encrypted Rust traffic fully observable with Coroot.
Nikolay Sivko
Let's make alerting great again
Coroot delivers preconfigured, symptom-based alerts from inspections, logs, Kubernetes events, and PromQL—with minimal noise and zero setup toil.
Nikolay Sivko
How to Reduce Your Cloud Costs with Coroot
Learn how Coroot maps raw infrastructure costs to individual applications so you can identify waste and cut your cloud bill.
Alexander Lamberton
Monitoring a Docker Homelab with Open Source
A community walkthrough of setting up Coroot on Rocky Linux to monitor a Docker homelab, using ClickHouse for storage and eBPF for telemetry.
Arie Van Den Heuvel
Memory stall: the agony before OOM
Learn how Linux PSI reveals the hidden slowdown before the OOM killer strikes, and how Coroot uses it to detect memory stalls in containers.
Nikolay Sivko
Instrumenting the Node.js event loop with eBPF
Learn how Coroot uses eBPF to instrument the Node.js event loop and detect hidden latency caused by event loop lag—no code changes required.
Nikolay Sivko
Using GreptimeDB as Prometheus Data Lake in Coroot
Learn how to use GreptimeDB as a Prometheus-compatible, cost-efficient long-term metrics backend in Coroot.
Yiran CuiTry Coroot Free
Get full-stack observability in minutes with zero code changes. eBPF-powered monitoring with AI-guided root cause analysis.