Patent attributes
Provided is a process, including: obtaining a plurality of network-traffic pattern specifications; obtaining network traffic data captured as the network traffic data is leaving from, arriving to, or looping back at a network interface of a computing device; comparing the plurality of network-traffic pattern specifications to the network traffic data; detecting based on the comparing, a match between at least a portion of the network traffic data and a matching network-traffic pattern specification among the plurality of network-traffic pattern specifications; and causing adding or adjusting one or more instances of one or more monitoring agents monitoring the instance of a service based on the detected match and the respective monitoring agent or monitoring agent configuration setting associated with the matching network-traffic pattern specification.