The Wireguard input plugin collects statistics on the local Wireguard server
wgctrl library. It
reports gauge metrics for Wireguard interface device(s) and its peers.
# Collect Wireguard server interface and peer statistics [[inputs.wireguard]] ## Optional list of Wireguard device/interface names to query. ## If omitted, all Wireguard interfaces are queried. # devices = ["wg0"]
operation not permitted
When the kernelspace implementation of Wireguard is in use (as opposed to its
userspace implementations), agent communicates with the module over netlink.
This requires agent to either run as root, or for the agent binary to
To add this capability to the agent binary (to allow this communication under
the default user
$ sudo setcap CAP_NET_ADMIN+epi $(which circonus-unified-agent)
N.B.: This capability is a filesystem attribute on the binary itself. The attribute needs to be re-applied if the agent binary is rotated (e.g. on installation of new a agent version from the system package manager).
error enumerating Wireguard devices
This usually happens when the device names specified in config are invalid.
sudo wg show succeeds, and that the device names in config match
those printed by this command.