Install
The agent is installed on each DB server: read-only, outbound-only, a single static binary. You don’t need to expose your server.
systemd · amd64 / arm64
service · amd64 (MSSQL)
sidecar on each DB server
A single static binary, no dependencies. The agent runs on the same host as the database — not a central collector connecting remotely.
curl -fsSL https://get.dbgaze.com | sh
The agent connects with read-only access. The connection password is stored with AES-256-GCM on the backend and delivered to the agent end-to-end encrypted via an X25519 sealed box.
CREATE USER dbgaze WITH PASSWORD '***'; GRANT pg_monitor TO dbgaze;
Paste the agent token into the onboarding wizard. Metrics start flowing within seconds; dashboard, health score and alerts are ready.
dbgaze connect --token <agent-token>
The agent only opens outbound HTTPS connections — it never opens an inbound port. Raw SQL text is never collected. Connection secrets are end-to-end encrypted and masked as *** in logs.