Guides
Metrics reference
Every series Relic exports on its metrics port, with its labels.
Relic serves these series at /metrics on its metrics port
(RELIC_METRICS_LISTEN_ADDRESS, default :8091), besides the Go runtime (go_*) and
process (process_*) collectors. Label values are bounded: routes are the
router's patterns, formats and classes come from fixed lists, and anything
unknown is other. A repository label marked (opt-in) appears only with
RELIC_METRICS_REPOSITORY_LABEL=true; the replication gauges carry it always,
one series per configured replication. Histograms also export _bucket,
_sum and _count, and latency histograms carry the trace ID as an exemplar.
See Monitoring for the dashboards and alerts.
| Series | Type | Labels | Meaning |
|---|---|---|---|
relic_artifact_bytes_total | counter | direction, format, repository (opt-in) | File bytes deployed (direction up) and downloaded (down), by format. |
relic_artifact_downloads_total | counter | format, class, source, repository (opt-in) | Full file downloads by format, class of the repository that served them, and source (local, cache, upstream). |
relic_artifact_uploads_total | counter | format, class, repository (opt-in) | Files deployed into local repositories, by format and repository class. |
relic_audit_events_total | counter | outcome, result | Audit events by outcome (success, denied, failure), and whether recording them failed (result). |
relic_auth_attempts_total | counter | method, result | Authentication attempts by credential method and result (success, failure, throttled, error). |
relic_blob_integrity_failures_total | counter | problem | Reads that found a blob missing from object storage, or stored content that does not match its digest or size. |
relic_build_info | gauge | version, revision, component | Relic's version and source revision; always 1. |
relic_builds | gauge | Build names with published build info. | |
relic_builds_published_total | counter | result | Build info documents published, by result. |
relic_cache_lookups_total | counter | cache, result | Lookups of in-memory caches by cache (repository settings, SBOM components) and result (hit, miss). |
relic_cleanup_moved_total | counter | Items cleanup policies moved to the trash. | |
relic_cleanup_runs_total | counter | result | Cleanup policy runs by result. |
relic_cve_feed_age_seconds | gauge | feed | Time since each CVE feed (epss, kev) was last read. |
relic_db_pool_acquire_duration_seconds_total | counter | Time spent acquiring connections. | |
relic_db_pool_acquired | gauge | Connections in use. | |
relic_db_pool_acquires_total | counter | Connections acquired from the pool. | |
relic_db_pool_empty_acquire_total | counter | Acquires that had to wait because no connection was idle. | |
relic_db_pool_idle | gauge | Idle connections. | |
relic_db_pool_max | gauge | The pool's maximum size. | |
relic_db_query_duration_seconds | histogram | query | Database query duration by sqlc query name (other for dynamic and migration SQL). |
relic_db_sqlite_file_bytes | gauge | Size of the SQLite database, its write-ahead log included. | |
relic_db_transaction_retries_total | counter | reason | Transactions run again after a deadlock, a serialization failure, a busy SQLite database or a conflict. |
relic_deploy_checksum_hits_total | counter | format | Deploys satisfied by content Relic already stored (checksum deploys), by format. |
relic_deps_dev_lookups_total | counter | result | deps.dev lookups that missed the cache, by result (success, error). |
relic_disk_free_bytes | gauge | volume | Free space on the volume Relic keeps data on (SQLite, the filesystem object store). |
relic_disk_size_bytes | gauge | volume | Size of the volume Relic keeps data on (SQLite, the filesystem object store). |
relic_downloads_blocked_total | counter | reason | Downloads refused by a scan policy, by reason (unscanned, quarantine, policy). |
relic_downloads_not_held_total | counter | reason | Downloads served without a successful scan where quarantine or blockUnscanned would hold a package, by reason (unscanned, quarantine). |
relic_end_of_life_refreshes_total | counter | result | Reads of the end-of-life data by result (changed, unchanged, error). |
relic_findings | gauge | severity | Vulnerability findings on content stored in repositories, by severity. |
relic_gc_deleted_blobs_total | counter | Blobs removed by garbage collection. | |
relic_gc_deleted_bytes_total | counter | Bytes reclaimed by garbage collection (the drop in unreferenced bytes over a run). | |
relic_gc_deleted_temporary_files_total | counter | Expired uploads and staging files the filesystem object store's garbage collection deleted. | |
relic_gc_runs_total | counter | result | Garbage collection runs by result. |
relic_http_request_duration_seconds | histogram | family, route, method | Time from the request's arrival to the end of its response. |
relic_http_request_size_bytes | histogram | family | Request body bytes read, by API family. |
relic_http_requests_in_flight | gauge | family | Requests being served, by API family. |
relic_http_requests_total | counter | family, route, method, code | HTTP requests by API family, route pattern, method and status class. |
relic_http_response_size_bytes | histogram | family | Response body bytes written, by API family. |
relic_http_slow_requests_total | counter | family | Requests still being served 10 seconds after they arrived, by API family. |
relic_huggingface_xet_rebuilt_bytes_total | counter | Bytes of the files Relic rebuilt from Xet xorbs into repository items. | |
relic_huggingface_xet_shard_duration_seconds | histogram | result | Time to register a Xet shard, rebuilding the files it lists, by result (success, error). |
relic_huggingface_xet_upload_bytes_total | counter | object | Bytes of the Xet objects Hugging Face clients uploaded and Relic stored, by object (xorb, shard). |
relic_huggingface_xet_uploads_total | counter | object, result | Xet objects Hugging Face clients uploaded, by object (xorb, shard) and result (success, error). |
relic_index_build_duration_seconds | histogram | format, class, result | Time to generate a repository's indexes (Debian distributions, RPM repodata, Helm indexes), by format, repository class and result (success, error). |
relic_index_cache_bytes | gauge | format | Bytes the kept generated indexes take, by format. |
relic_index_cache_total | counter | format, result | Lookups of generated indexes: hit (served fresh), stale (served while a rebuild runs), miss (waited for a build). |
relic_inventory_timestamp_seconds | gauge | When the inventory series were last computed (Unix time). | |
relic_item_downloads_dropped_total | counter | Downloads left out of the per-item download counts because too many items were waiting for a database write. | |
relic_job_duration_seconds | histogram | kind | Background job duration by kind. |
relic_job_oldest_available_age_seconds | gauge | kind | Age of the oldest job available to run, by kind (0 when none waits). |
relic_jobs_queued | gauge | kind | Jobs available to run now, by kind. |
relic_jobs_retryable | gauge | kind | Jobs waiting to be retried after an error, by kind. |
relic_jobs_total | counter | kind, result | Background jobs worked, by kind and result (success, error, cancelled, snoozed). |
relic_ldap_request_duration_seconds | histogram | directory_op, result | LDAP operations (dial, bind, search) and their duration. |
relic_mcp_tool_calls_total | counter | tool, result | MCP tool calls by tool and result. |
relic_move_batch_duration_seconds | histogram | Duration of each transaction that moves part of a large folder (a delete into the trash can). | |
relic_move_batch_items_total | counter | Items moved by the transactions that move part of a large folder. | |
relic_object_storage_bytes_total | counter | op | Bytes written to (put) and read from (get) object storage. |
relic_object_storage_op_duration_seconds | histogram | op | Object storage operation duration (for get, to the start of the body). |
relic_object_storage_ops_total | counter | op, result | Object storage operations by operation and result (success, miss for a key that does not exist, error). |
relic_operational_risks_found_total | counter | kind | Operational risks found in scanned artifacts by kind (end_of_life, deprecated, unmaintained). |
relic_packument_cache_bytes | gauge | cache | Bytes held by the npm packument caches, by cache (index, document). |
relic_packument_cache_total | counter | cache, result | Lookups of npm packument caches, by cache (index, document) and result (hit, miss). |
relic_promotion_gate_decisions_total | counter | decision | Promotion gate decisions by decision (allowed, refused). |
relic_promotions_total | counter | kind, result | Build and release promotions by kind (build, release) and result. |
relic_registry_approvals_total | counter | decision | Agent registry approvals by decision (approved, revoked). |
relic_releases_total | counter | op, result | Release (release bundle) operations by operation (create, update, finalize, delete, export, import) and result. |
relic_remote_cache_total | counter | format, result, repository (opt-in) | Remote repository lookups: hit (served from the cache), miss (fetched), stale (cached metadata served because the upstream failed), absent (an upstream 404 remembered), uncached (fetched for a repository that keeps nothing), error. |
relic_replication_consecutive_failures | gauge | repository | Failed push replication runs in a row since the last success, per replicated repository (bounded by the configured replications). |
relic_replication_duration_seconds | histogram | Replication run duration. | |
relic_replication_events_total | counter | result | Files handled by replication, by result (pushed, pulled, skipped, deleted). |
relic_replication_lag_seconds | gauge | repository | Time since a replication last ran, per replicated repository. |
relic_replication_runs_total | counter | result, repository (opt-in) | Push replication runs by result. |
relic_repositories | gauge | format, class | Repositories by format and class. |
relic_rpc_duration_seconds | histogram | service, method | Relic API (Connect) call duration. |
relic_rpc_requests_total | counter | service, method, code | Relic API (Connect) calls by service, method and Connect code. |
relic_scan_backlog | gauge | Artifacts queued for Relic Scan. | |
relic_scan_duration_seconds | histogram | stage | Scanner run time by stage: catalog (Syft), match (Grype), secrets (gitleaks), misconfiguration (Trivy), license (ScanCode), model and reachability (govulncheck). |
relic_scanner_db_age_seconds | gauge | Age of the scanner's vulnerability database (from its build time). | |
relic_scanner_db_replacements_total | counter | Vulnerability databases deleted for failing their checksum and downloaded again. | |
relic_scans_total | counter | result | Artifact scans finished, by result (done, partial, failed, skipped, queued, error). |
relic_secret_validations_total | counter | provider, result | Secrets found in content checked with their provider, by provider and result (live, inactive, unknown, error). |
relic_storage_blobs | gauge | Blobs stored. | |
relic_storage_bytes | gauge | Bytes of content stored (each blob once). | |
relic_storage_check_findings_total | counter | finding | What storage checks found: objects no blob row named (adopted for garbage collection), and blobs missing, of the wrong size or corrupt. |
relic_storage_check_runs_total | counter | result | Storage checks by result. |
relic_storage_check_verified_bytes_total | counter | Bytes of stored content storage checks re-hashed. | |
relic_telemetry_errors_total | counter | Errors the OpenTelemetry SDK reported, such as a failed export of spans or log records. | |
relic_telemetry_spans_total | counter | outcome | Sampled spans by outcome: ended (queued for export), exported, or failed (the export returned an error). |
relic_tls_certificate_expiry_timestamp_seconds | gauge | source | When the certificate the server serves expires, in Unix seconds, by source (operator, generated). |
relic_tls_certificates_issued_total | counter | result | Server certificates issued by the certificate authority Relic generated, by result. |
relic_tokens_issued_total | counter | kind | Access tokens issued: new ones (access) and exchanges of a refresh token (refresh). |
relic_trash_items | gauge | Entries in the trash can. | |
relic_trash_purged_total | counter | Trash can entries purged after the retention period. | |
relic_unreferenced_bytes | gauge | Bytes of content no item references, which garbage collection will reclaim. | |
relic_upstream_duration_seconds | histogram | format, repository (opt-in) | Time to an upstream's response headers. |
relic_upstream_requests_total | counter | format, code, repository (opt-in) | Requests to remote repositories' upstreams, by format and status class (error when no response came). |
relic_users | gauge | User accounts. | |
relic_vex_exports_total | counter | format | VEX documents exported by format (openvex, cyclonedx). |
relic_webhook_deliveries_total | counter | result | Webhook delivery attempts by result: delivered, retry (failed, to be retried) or failed (given up). |
relic_webhook_delivery_duration_seconds | histogram | Time a webhook's receiver took to answer. |