Vault
Rapport de recherche Datadog : Bilan sur l'adoption de l'informatique sans serveur Rapport : Bilan sur l'adoption de l'informatique sans serveur

Vault

Agent Check Check de l'Agent

Supported OS: Linux Mac OS Windows

Présentation

Ce check surveille la santé du cluster Vault et les changements de leader.

Configuration

Installation

Le check Vault est inclus avec le paquet de l’Agent Datadog. Vous n’avez donc rien d’autre à installer sur votre serveur.

Prérequis

Pour garantir le bon fonctionnement du check Vault, vous devez : a) activer l’accès non authentifié aux métriques Vault ; ou b) fournir un token client Vault.

a) Définissez le paramètre de configuration Vault unauthenticated_metrics_access sur true.

Cela autorise l’accès non authentifié au endpoint /v1/sys/metrics.

b) Utilisez un token client Vault.

Vous trouverez ci-dessous un exemple reposant sur la méthode d’authentification JWT. Vous pouvez toutefois utiliser d’autres méthodes d’authentification.

Voici les fonctionnalités requises pour que l’intégration Vault fonctionne correctement :

Contenu de metrics_policy.hcl :

path "sys/metrics*" {
  capabilities = ["read", "list"]
}

Rôle et stratégie de configuration :

$ vault policy write metrics /chemin/vers/strategie_metriques.hcl
$ vault auth enable jwt
$ vault write auth/jwt/config jwt_supported_algs=RS256 jwt_validation_pubkeys=@<CHEMIN_VERS_PEM_PUBLIC>
$ vault write auth/jwt/role/datadog role_type=jwt bound_audiences=<AUDIENCE> user_claim=name token_policies=metrics
$ vault agent -config=/chemin/vers/config_agent.hcl

Contenu de agent_config.hcl :

exit_after_auth = true
pid_file = "/tmp/agent_pid"

auto_auth {
  method "jwt" {
    config = {
      path = "<CHEMIN_REVENDICATION_JWT>"
      role = "datadog"
    }
  }

  sink "file" {
    config = {
      path = "<CHEMIN_TOKEN_CLIENT>"
    }
  }
}

vault {
  address = "http://0.0.0.0:8200"
}

Configuration

Host

Suivez les instructions ci-dessous pour configurer ce check lorsque l’Agent est exécuté sur un host. Consultez la section Environnement conteneurisé pour en savoir plus sur les environnements conteneurisés.

  1. Modifiez le fichier vault.d/conf.yaml dans le dossier conf.d/ à la racine du répertoire de configuration de votre Agent pour commencer à recueillir vos données de performance Vault. Consultez le fichier d’exemple vault.d/conf.yaml pour découvrir toutes les options de configuration disponibles.

    Configuration pour faire fonctionner l’intégration sans token (avec le paramètre de configuration Vault unauthenticated_metrics_access défini sur true) :

    init_config:
    
    instances:
        ## @param api_url - string - required
        ## URL of the Vault to query.
        #
      - api_url: http://localhost:8200/v1
    
        ## @param no_token - boolean - optional - default: false
        ## Attempt metric collection without a token.
        #
        no_token: true

    Configuration pour faire fonctionner l’intégration avec un token client :

    init_config:
    
    instances:
        ## @param api_url - string - required
        ## URL of the Vault to query.
        #
      - api_url: http://localhost:8200/v1
    
        ## @param client_token - string - optional
        ## Client token necessary to collect metrics.
        #
        client_token: <CLIENT_TOKEN>
    
        ## @param client_token_path - string - optional
        ## Path to a file containing the client token. Overrides `client_token`.
        ## The token will be re-read after every authorization error.
        #
        # client_token_path: <CLIENT_TOKEN_PATH>
  2. Redémarrez l’Agent.

Environnement conteneurisé

Consultez la documentation relative aux modèles d’intégration Autodiscovery pour découvrir comment appliquer les paramètres ci-dessous à un environnement conteneurisé.

ParamètreValeur
<NOM_INTÉGRATION>vault
<CONFIG_INIT>vide ou {}
<CONFIG_INSTANCE>{"api_url": "http://%%host%%:8200/v1"}

INSTANCE_CONFIG doit être personnalisé en fonction de votre configuration d’authentification Vault. Pour consulter un exemple de configuration, reportez-vous à la section Host ci-dessus.

Collecte de logs

Disponible à partir des versions > 6.0 de l’Agent

  1. La collecte de logs est désactivée par défaut dans l’Agent Datadog. Vous devez l’activer dans datadog.yaml :

    logs_enabled: true
  2. Configurez Vault de façon à activer les logs d’audit et serveur.

    • Les logs d’audit doivent être activés par un utilisateur disposant des privilèges et des stratégies nécessaires. Consultez la section Enabling audit devices (en anglais) de la documentation Vault pour en savoir plus.

      vault audit enable file file_path=/vault/vault-audit.log
    • Assurez-vous que les logs serveur sont écrits dans un fichier. Vous pouvez configurer les logs serveur statiques dans le script de lancement systemd de Vault. Le script suivant permet d’écrire les logs dans /var/log/vault.log.

      ...
      [Service]
      ...
      ExecStart=/bin/sh -c '/home/vagrant/bin/vault server -config=/home/vagrant/vault_nano/config/vault -log-level="trace" > /var/log/vault.log
      ...
  3. Ajoutez ce bloc de configuration à votre fichier vault.d/conf.yaml pour commencer à recueillir vos logs Vault :

    logs:
     - type: file
       path: /vault/vault-audit.log
       source: vault
       service: "<SERVICE_NAME>"
     - type: file
       path: /var/log/vault.log
       source: vault
       service: "<SERVICE_NAME>"

Validation

Lancez la sous-commande status de l’Agent et cherchez vault dans la section Checks.

Données collectées

Métriques

vault.go.gc.duration.seconds.count
(count)
GC invocation durations count.
vault.go.gc.duration.seconds.quantile
(gauge)
GC invocation duration quantile.
Shown as second
vault.go.gc.duration.seconds.sum
(gauge)
GC invocation duration total.
Shown as second
vault.go.goroutines
(gauge)
Number of goroutines that currently exist.
vault.go.info
(gauge)
Information about the Go environment.
vault.go.memstats.alloc.bytes
(gauge)
Number of bytes allocated and still in use.
vault.go.memstats.alloc.bytes.total
(count)
Total number of bytes allocated, even if freed.
vault.go.memstats.buck_hash.sys.bytes
(gauge)
Number of bytes used by the profiling bucket hash table.
vault.go.memstats.frees.total
(count)
Total number of frees.
vault.go.memstats.gc.cpu.fraction
(gauge)
The fraction of this program's available CPU time used by the GC since the program started.
vault.go.memstats.gc.sys.bytes
(gauge)
Number of bytes used for garbage collection system metadata.
vault.go.memstats.heap.alloc.bytes
(gauge)
Number of heap bytes allocated and still in use.
vault.go.memstats.heap.idle.bytes
(gauge)
Number of heap bytes waiting to be used.
vault.go.memstats.heap.inuse.bytes
(gauge)
Number of heap bytes that are in use.
vault.go.memstats.heap.objects
(gauge)
Number of allocated objects.
vault.go.memstats.heap.released.bytes
(gauge)
Number of heap bytes released to OS.
vault.go.memstats.heap.sys.bytes
(gauge)
Number of heap bytes obtained from system.
vault.go.memstats.last.gc.time.seconds
(gauge)
Number of seconds since 1970 of last garbage collection.
vault.go.memstats.lookups.total
(count)
Total number of pointer lookups.
vault.go.memstats.mallocs.total
(count)
Total number of mallocs.
vault.go.memstats.mcache.inuse.bytes
(gauge)
Number of bytes in use by mcache structures.
vault.go.memstats.mcache.sys.bytes
(gauge)
Number of bytes used for mcache structures obtained from system.
vault.go.memstats.mspan.inuse.bytes
(gauge)
Number of bytes in use by mspan structures.
vault.go.memstats.mspan.sys.bytes
(gauge)
Number of bytes used for mspan structures obtained from system.
vault.go.memstats.next.gc.bytes
(gauge)
Number of heap bytes when next garbage collection will take place.
vault.go.memstats.other.sys.bytes
(gauge)
Number of bytes used for other system allocations.
vault.go.memstats.stack.inuse.bytes
(gauge)
Number of bytes in use by the stack allocator.
vault.go.memstats.stack.sys.bytes
(gauge)
Number of bytes obtained from system for stack allocator.
vault.go.memstats.sys.bytes
(gauge)
Number of bytes obtained from system.
vault.go.threads
(gauge)
Number of OS threads created.
vault.is_leader
(gauge)
1 if leader 0 otherwise
vault.process.cpu.seconds.total
(count)
Total user and system CPU time spent in seconds.
vault.process.max.fds
(gauge)
Maximum number of open file descriptors.
vault.process.open.fds
(gauge)
Number of open file descriptors.
vault.process.resident_memory.bytes
(gauge)
Resident memory size in bytes.
vault.process.start_time.seconds
(gauge)
Start time of the process since unix epoch in seconds.
vault.process.virtual_memory.bytes
(gauge)
Virtual memory size in bytes.
vault.process.virtual_memory.max.bytes
(gauge)
Maximum amount of virtual memory available in bytes.
vault.vault.audit.log.request.count
(count)
Duration of time taken by all audit log requests across all audit log devices count
vault.vault.audit.log.request.quantile
(gauge)
Duration of time taken by all audit log requests across all audit log devices sum
Shown as millisecond
vault.vault.audit.log.request.sum
(gauge)
Duration of time taken by all audit log requests across all audit log devices
Shown as millisecond
vault.vault.audit.log.response.count
(count)
Duration of time taken by audit log responses across all audit log devices count
vault.vault.audit.log.response.quantile
(gauge)
Duration of time taken by audit log responses across all audit log devices quantile
Shown as millisecond
vault.vault.audit.log.response.sum
(gauge)
Duration of time taken by audit log responses across all audit log devices sum
Shown as millisecond
vault.vault.audit.log.request.failure
(count)
Number of audit log request failures
Shown as unit
vault.vault.audit.log.response.failure
(count)
Number of audit log response failures
Shown as unit
vault.vault.barrier.delete.count
(count)
Duration of time taken by DELETE operations at the barrier count
vault.vault.barrier.delete.quantile
(gauge)
Duration of time taken by DELETE operations at the barrier quantile
Shown as millisecond
vault.vault.barrier.delete.sum
(gauge)
Duration of time taken by DELETE operations at the barrier sum
Shown as millisecond
vault.vault.barrier.get.count
(count)
Duration of time taken by GET operations at the barrier count
vault.vault.barrier.get.quantile
(gauge)
Duration of time taken by GET operations at the barrier quantile
Shown as millisecond
vault.vault.barrier.get.sum
(gauge)
Duration of time taken by GET operations at the barrier sum
Shown as millisecond
vault.vault.barrier.put.count
(count)
Duration of time taken by PUT operations at the barrier count
vault.vault.barrier.put.quantile
(gauge)
Duration of time taken by PUT operations at the barrier quantile
Shown as millisecond
vault.vault.barrier.put.sum
(gauge)
Duration of time taken by PUT operations at the barrier sum
Shown as millisecond
vault.vault.barrier.list.count
(count)
Duration of time taken by LIST operations at the barrier count
vault.vault.barrier.list.quantile
(gauge)
Duration of time taken by LIST operations at the barrier quantile
Shown as millisecond
vault.vault.barrier.list.sum
(gauge)
Duration of time taken by LIST operations at the barrier sum
Shown as millisecond
vault.vault.core.check.token.count
(count)
Duration of time taken by token checks handled by Vault core count
vault.vault.core.check.token.quantile
(gauge)
Duration of time taken by token checks handled by Vault core quantile
Shown as millisecond
vault.vault.core.check.token.sum
(gauge)
Duration of time taken by token checks handled by Vault core sum
Shown as millisecond
vault.vault.core.fetch.acl_and_token.count
(count)
Duration of time taken by ACL and corresponding token entry fetches handled by Vault core count
vault.vault.core.fetch.acl_and_token.quantile
(gauge)
Duration of time taken by ACL and corresponding token entry fetches handled by Vault core quantile
Shown as millisecond
vault.vault.core.fetch.acl_and_token.sum
(gauge)
Duration of time taken by ACL and corresponding token entry fetches handled by Vault core sum
Shown as millisecond
vault.vault.core.handle.request.count
(count)
Duration of time taken by requests handled by Vault core count
vault.vault.core.handle.request.quantile
(gauge)
Duration of time taken by requests handled by Vault core quantile
Shown as millisecond
vault.vault.core.handle.request.sum
(gauge)
Duration of time taken by requests handled by Vault core sum
Shown as millisecond
vault.vault.core.handle.login_request.count
(count)
Duration of time taken by login requests handled by Vault core count
vault.vault.core.handle.login_request.quantile
(gauge)
Duration of time taken by login requests handled by Vault core quantile
Shown as millisecond
vault.vault.core.handle.login_request.sum
(gauge)
Duration of time taken by login requests handled by Vault core sum
Shown as millisecond
vault.vault.core.leadership.setup_failed.count
(count)
Duration of time taken by cluster leadership setup failures which have occurred in a highly available Vault cluster count
vault.vault.core.leadership.setup_failed.quantile
(gauge)
Duration of time taken by cluster leadership setup failures which have occurred in a highly available Vault cluster quantile
Shown as millisecond
vault.vault.core.leadership.setup_failed.sum
(gauge)
Duration of time taken by cluster leadership setup failures which have occurred in a highly available Vault cluster sum
Shown as millisecond
vault.vault.core.leadership.lost.count
(count)
Duration of time taken by cluster leadership losses which have occurred in a highly available Vault cluster count
vault.vault.core.leadership.lost.quantile
(gauge)
Duration of time taken by cluster leadership losses which have occurred in a highly available Vault cluster quantile
Shown as millisecond
vault.vault.core.leadership.lost.sum
(gauge)
Duration of time taken by cluster leadership losses which have occurred in a highly available Vault cluster sum
Shown as millisecond
vault.vault.core.post_unseal
(gauge)
Duration of time taken by post-unseal operations handled by Vault core
Shown as millisecond
vault.vault.core.pre_seal
(gauge)
Duration of time taken by pre-seal operations
Shown as millisecond
vault.vault.core.seal_with_request
(gauge)
Duration of time taken by requested seal operations
Shown as millisecond
vault.vault.core.seal
(gauge)
Duration of time taken by seal operations
Shown as millisecond
vault.vault.core.seal_internal
(gauge)
Duration of time taken by internal seal operations
Shown as millisecond
vault.vault.core.step_down.count
(count)
Duration of time taken by cluster leadership step downs count
vault.vault.core.step_down.quantile
(gauge)
Duration of time taken by cluster leadership step downs quantile
Shown as millisecond
vault.vault.core.step_down.sum
(gauge)
Duration of time taken by cluster leadership step downs sum
Shown as millisecond
vault.vault.core.unseal.count
(count)
Duration of time taken by unseal operations count
vault.vault.core.unseal.quantile
(gauge)
Duration of time taken by unseal operations quantile
Shown as millisecond
vault.vault.core.unseal.sum
(gauge)
Duration of time taken by unseal operations sum
Shown as millisecond
vault.vault.expire.fetch.lease.times.count
(count)
Time taken to fetch lease times count
vault.vault.expire.fetch.lease.times.quantile
(gauge)
Time taken to fetch lease times quantile
Shown as millisecond
vault.vault.expire.fetch.lease.times.sum
(gauge)
Time taken to fetch lease times sum
Shown as millisecond
vault.vault.expire.fetch.lease.times.by_token.count
(count)
Time taken to fetch lease times by token count
vault.vault.expire.fetch.lease.times.by_token.quantile
(gauge)
Time taken to fetch lease times by token quantile
Shown as millisecond
vault.vault.expire.fetch.lease.times.by_token.sum
(gauge)
Time taken to fetch lease times by token sum
Shown as millisecond
vault.vault.expire.num_leases
(gauge)
vault_expire_num_leases
Shown as unit
vault.vault.expire.revoke.count
(count)
Time taken to revoke a token count
vault.vault.expire.revoke.quantile
(gauge)
Time taken to revoke a token quantile
Shown as millisecond
vault.vault.expire.revoke.sum
(gauge)
Time taken to revoke a token sum
Shown as millisecond
vault.vault.expire.revoke.force.count
(count)
Time taken to forcibly revoke a token count
vault.vault.expire.revoke.force.quantile
(gauge)
Time taken to forcibly revoke a token quantile
Shown as millisecond
vault.vault.expire.revoke.force.sum
(gauge)
Time taken to forcibly revoke a token sum
Shown as millisecond
vault.vault.expire.revoke.prefix.count
(count)
Time taken to revoke tokens on a prefix count
vault.vault.expire.revoke.prefix.quantile
(gauge)
Time taken to revoke tokens on a prefix quantile
Shown as millisecond
vault.vault.expire.revoke.prefix.sum
(gauge)
Time taken to revoke tokens on a prefix sum
Shown as millisecond
vault.vault.expire.revoke.by_token.count
(count)
Time taken to revoke all secrets issued with a given token count
vault.vault.expire.revoke.by_token.quantile
(gauge)
Time taken to revoke all secrets issued with a given token quantile
Shown as millisecond
vault.vault.expire.revoke.by_token.sum
(gauge)
Time taken to revoke all secrets issued with a given token sum
Shown as millisecond
vault.vault.expire.renew.count
(count)
Time taken to renew a lease count
vault.vault.expire.renew.quantile
(gauge)
Time taken to renew a lease quantile
Shown as millisecond
vault.vault.expire.renew.sum
(gauge)
Time taken to renew a lease sum
Shown as millisecond
vault.vault.expire.renew_token.count
(count)
Time taken to renew a token which does not need to invoke a logical backend count
vault.vault.expire.renew_token.quantile
(gauge)
Time taken to renew a token which does not need to invoke a logical backend quantile
Shown as millisecond
vault.vault.expire.renew_token.sum
(gauge)
Time taken to renew a token which does not need to invoke a logical backend sum
Shown as millisecond
vault.vault.expire.register.count
(count)
Time taken for register operations count
vault.vault.expire.register.quantile
(gauge)
Time taken for register operations quantile
Shown as millisecond
vault.vault.expire.register.sum
(gauge)
Time taken for register operations sum
Shown as millisecond
vault.vault.expire.register.auth.count
(count)
Time taken for register authentication operations which create lease entries without lease ID count
vault.vault.expire.register.auth.quantile
(gauge)
Time taken for register authentication operations which create lease entries without lease ID quantile
Shown as millisecond
vault.vault.expire.register.auth.sum
(gauge)
Time taken for register authentication operations which create lease entries without lease ID sum
Shown as millisecond
vault.vault.policy.get_policy.count
(count)
Time taken to get a policy count
vault.vault.policy.get_policy.quantile
(gauge)
Time taken to get a policy quantile
Shown as millisecond
vault.vault.policy.get_policy.sum
(gauge)
Time taken to get a policy sum
Shown as millisecond
vault.vault.policy.list_policies.count
(count)
Time taken to list policies count
vault.vault.policy.list_policies.quantile
(gauge)
Time taken to list policies quantile
Shown as millisecond
vault.vault.policy.list_policies.sum
(gauge)
Time taken to list policies sum
Shown as millisecond
vault.vault.policy.delete_policy.count
(count)
Time taken to delete policy count
vault.vault.policy.delete_policy.quantile
(gauge)
Time taken to delete policy quantile
Shown as millisecond
vault.vault.policy.delete_policy.sum
(gauge)
Time taken to delete policy sum
Shown as millisecond
vault.vault.policy.set_policy.count
(count)
Time to set a policy count
vault.vault.policy.set_policy.quantile
(gauge)
Time to set a policy quantile
Shown as millisecond
vault.vault.policy.set_policy.sum
(gauge)
Time to set a policy sum
Shown as millisecond
vault.vault.token.create.count
(count)
Time taken to create a token count
vault.vault.token.create.quantile
(gauge)
Time taken to create a token quantile
Shown as millisecond
vault.vault.token.create.sum
(gauge)
Time taken to create a token sum
Shown as millisecond
vault.vault.token.createAccessor.count
(count)
Time taken create a token accessor count
vault.vault.token.createAccessor.quantile
(gauge)
Time taken create a token accessor quantile
Shown as millisecond
vault.vault.token.createAccessor.sum
(gauge)
Time taken create a token accessor sum
Shown as millisecond
vault.vault.token.lookup.count
(count)
The time taken to look up a token count
vault.vault.token.lookup.quantile
(gauge)
The time taken to look up a token quantile
Shown as millisecond
vault.vault.token.lookup.sum
(gauge)
The time taken to look up a token sum
Shown as millisecond
vault.vault.token.revoke.count
(count)
The time taken to revoke a token count
vault.vault.token.revoke.quantile
(gauge)
The time taken to revoke a token quantile
Shown as millisecond
vault.vault.token.revoke.sum
(gauge)
The time taken to revoke a token sum
Shown as millisecond
vault.vault.token.revoke.tree.count
(count)
The time taken to revoke a token tree count
vault.vault.token.revoke.tree.quantile
(gauge)
The time taken to revoke a token tree quantile
Shown as millisecond
vault.vault.token.revoke.tree.sum
(gauge)
The time taken to revoke a token tree sum
Shown as millisecond
vault.vault.token.store.count
(count)
The time taken to store an updated token entry without writing to the secondary index count
vault.vault.token.store.quantile
(gauge)
The time taken to store an updated token entry without writing to the secondary index quantile
Shown as millisecond
vault.vault.token.store.sum
(gauge)
The time taken to store an updated token entry without writing to the secondary index sum
Shown as millisecond
vault.vault.rollback.attempt.auth.jwt.count
(count)
Time taken to perform a rollback operation for the JWT auth method count
vault.vault.rollback.attempt.auth.jwt.quantile
(gauge)
Time taken to perform a rollback operation for the JWT auth method quantile
Shown as millisecond
vault.vault.rollback.attempt.auth.jwt.sum
(gauge)
Time taken to perform a rollback operation for the JWT auth method sum
Shown as millisecond
vault.vault.rollback.attempt.auth.ldap.count
(count)
Time taken to perform a rollback operation for the LDAP auth method count
vault.vault.rollback.attempt.auth.ldap.quantile
(gauge)
Time taken to perform a rollback operation for the LDAP auth method quantile
Shown as millisecond
vault.vault.rollback.attempt.auth.ldap.sum
(gauge)
Time taken to perform a rollback operation for the LDAP auth method sum
Shown as millisecond
vault.vault.rollback.attempt.cubbyhole.count
(count)
Time taken to perform a rollback operation for the Cubbyhole secret backend count
vault.vault.rollback.attempt.cubbyhole.quantile
(gauge)
Time taken to perform a rollback operation for the Cubbyhole secret backend quantile
Shown as millisecond
vault.vault.rollback.attempt.cubbyhole.sum
(gauge)
Time taken to perform a rollback operation for the Cubbyhole secret backend sum
Shown as millisecond
vault.vault.rollback.attempt.secret.count
(count)
Time taken to perform a rollback operation for the K/V secret backend count
vault.vault.rollback.attempt.secret.quantile
(gauge)
Time taken to perform a rollback operation for the K/V secret backend quantile
Shown as millisecond
vault.vault.rollback.attempt.secret.sum
(gauge)
Time taken to perform a rollback operation for the K/V secret backend sum
Shown as millisecond
vault.vault.rollback.attempt.sys.count
(count)
Time taken to perform a rollback operation for the system backend count
vault.vault.rollback.attempt.sys.quantile
(gauge)
Time taken to perform a rollback operation for the system backend quantile
Shown as millisecond
vault.vault.rollback.attempt.sys.sum
(gauge)
Time taken to perform a rollback operation for the system backend sum
Shown as millisecond
vault.vault.rollback.attempt.auth.token.count
(count)
Time taken to perform a rollback operation for the token auth method count
vault.vault.rollback.attempt.auth.token.quantile
(gauge)
Time taken to perform a rollback operation for the token auth method quantile
Shown as millisecond
vault.vault.rollback.attempt.auth.token.sum
(gauge)
Time taken to perform a rollback operation for the token auth method sum
Shown as millisecond
vault.vault.rollback.attempt.identity.count
(count)
Time taken to perform a rollback operation for the identity backend count
vault.vault.rollback.attempt.identity.quantile
(gauge)
Time taken to perform a rollback operation for the identity backend quantile
Shown as millisecond
vault.vault.rollback.attempt.identity.sum
(gauge)
Time taken to perform a rollback operation for the identity backend sum
Shown as millisecond
vault.vault.route.rollback.auth.jwt.count
(count)
Time taken to perform a rollback operation for the JWT auth method count
vault.vault.route.rollback.auth.jwt.quantile
(gauge)
Time taken to perform a rollback operation for the JWT auth method quantile
Shown as millisecond
vault.vault.route.rollback.auth.jwt.sum
(gauge)
Time taken to perform a rollback operation for the JWT auth method sum
Shown as millisecond
vault.vault.route.rollback.auth.ldap.count
(count)
Time taken to perform a rollback operation for the LDAP auth method count
vault.vault.route.rollback.auth.ldap.quantile
(gauge)
Time taken to perform a rollback operation for the LDAP auth method quantile
Shown as millisecond
vault.vault.route.rollback.auth.ldap.sum
(gauge)
Time taken to perform a rollback operation for the LDAP auth method sum
Shown as millisecond
vault.vault.route.rollback.auth.token.count
(count)
Time taken to perform a route rollback operation for the token auth method count
vault.vault.route.rollback.auth.token.quantile
(gauge)
Time taken to perform a route rollback operation for the token auth method quantile
Shown as millisecond
vault.vault.route.rollback.auth.token.sum
(gauge)
Time taken to perform a route rollback operation for the token auth method sum
Shown as millisecond
vault.vault.route.rollback.cubbyhole.count
(count)
Time taken to perform a route rollback operation for the Cubbyhole secret backend count
vault.vault.route.rollback.cubbyhole.quantile
(gauge)
Time taken to perform a route rollback operation for the Cubbyhole secret backend quantile
Shown as millisecond
vault.vault.route.rollback.cubbyhole.sum
(gauge)
Time taken to perform a route rollback operation for the Cubbyhole secret backend sum
Shown as millisecond
vault.vault.route.rollback.identity.count
(count)
Time taken to perform a route rollback operation for the identity backend count
vault.vault.route.rollback.identity.quantile
(gauge)
Time taken to perform a route rollback operation for the identity backend quantile
Shown as millisecond
vault.vault.route.rollback.identity.sum
(gauge)
Time taken to perform a route rollback operation for the identity backend sum
Shown as millisecond
vault.vault.route.rollback.sys.count
(count)
Time taken to perform a route rollback operation for the system backend count
vault.vault.route.rollback.sys.quantile
(gauge)
Time taken to perform a route rollback operation for the system backend quantile
Shown as millisecond
vault.vault.route.rollback.sys.sum
(gauge)
Time taken to perform a route rollback operation for the system backend sum
Shown as millisecond
vault.vault.route.rollback.secret.count
(count)
Time taken to perform a route rollback operation for the K/V secret backend count
vault.vault.route.rollback.secret.quantile
(gauge)
Time taken to perform a route rollback operation for the K/V secret backend quantile
Shown as millisecond
vault.vault.route.rollback.secret.sum
(gauge)
Time taken to perform a route rollback operation for the K/V secret backend sum
Shown as millisecond
vault.vault.merkle.flushdirty.count
(count)
Time taken flush any dirty pages to cold storage count
vault.vault.merkle.flushdirty.quantile
(gauge)
Time taken flush any dirty pages to cold storage quantile
Shown as millisecond
vault.vault.merkle.flushdirty.sum
(gauge)
Time taken flush any dirty pages to cold storage sum
Shown as millisecond
vault.vault.merkle.savecheckpoint.count
(count)
Time taken to save the checkpoint count
vault.vault.merkle.savecheckpoint.quantile
(gauge)
Time taken to save the checkpoint quantile
Shown as millisecond
vault.vault.merkle.savecheckpoint.sum
(gauge)
Time taken to save the checkpoint sum
Shown as millisecond
vault.vault.wal.deletewals.count
(count)
Time taken to delete a Write Ahead Log (WAL) count
vault.vault.wal.deletewals.quantile
(gauge)
Time taken to delete a Write Ahead Log (WAL) quantile
Shown as millisecond
vault.vault.wal.deletewals.sum
(gauge)
Time taken to delete a Write Ahead Log (WAL) sum
Shown as millisecond
vault.vault.wal.gc.deleted
(count)
Number of Write Ahead Logs (WAL) deleted during each garbage collection run
Shown as unit
vault.vault.wal.gc.total
(count)
Total Number of Write Ahead Logs (WAL) on disk
Shown as unit
vault.vault.wal.loadWAL.count
(count)
Time taken to load a Write Ahead Log (WAL) count
vault.vault.wal.loadWAL.quantile
(gauge)
Time taken to load a Write Ahead Log (WAL) quantile
Shown as millisecond
vault.vault.wal.loadWAL.sum
(gauge)
Time taken to load a Write Ahead Log (WAL) sum
Shown as millisecond
vault.vault.wal.persistwals.count
(count)
Time taken to persist a Write Ahead Log (WAL) count
vault.vault.wal.persistwals.quantile
(gauge)
Time taken to persist a Write Ahead Log (WAL) quantile
Shown as millisecond
vault.vault.wal.persistwals.sum
(gauge)
Time taken to persist a Write Ahead Log (WAL) sum
Shown as millisecond
vault.vault.wal.flushready.count
(count)
Time taken to flush a ready Write Ahead Log (WAL) to storage count
vault.vault.wal.flushready.quantile
(gauge)
Time taken to flush a ready Write Ahead Log (WAL) to storage quantile
Shown as millisecond
vault.vault.wal.flushready.sum
(gauge)
Time taken to flush a ready Write Ahead Log (WAL) to storage sum
Shown as millisecond
vault.vault.runtime.alloc.bytes
(gauge)
Number of bytes allocated by the Vault process
Shown as byte
vault.vault.runtime.free.count
(gauge)
Number of freed objects
Shown as object
vault.vault.runtime.heap.objects
(gauge)
Number of objects on the heap
Shown as object
vault.vault.runtime.malloc.count
(gauge)
Cumulative count of allocated heap objects
Shown as object
vault.vault.runtime.num_goroutines
(gauge)
Number of goroutines
Shown as unit
vault.vault.runtime.sys.bytes
(gauge)
Number of bytes allocated to Vault
Shown as byte
vault.vault.runtime.gc.pause_ns.count
(count)
The garbage collector pause time since Vault was last started count
vault.vault.runtime.gc.pause_ns.quantile
(gauge)
The garbage collector pause time since Vault was last started quantile
Shown as millisecond
vault.vault.runtime.gc.pause_ns.sum
(gauge)
The garbage collector pause time since Vault was last started sum
Shown as millisecond
vault.vault.runtime.total.gc.pause_ns
(gauge)
The total garbage collector pause time since Vault was last started
Shown as millisecond
vault.vault.runtime.total.gc.runs
(gauge)
Total number of garbage collection runs since Vault was last started
Shown as operation
vault.logshipper.streamWALs.missing_guard
(count)
Number of incidences where the starting Merkle Tree index used to begin streaming WAL entries is not matched/found
Shown as unit
vault.logshipper.streamWALs.guard_found
(count)
Number of incidences where the starting Merkle Tree index used to begin streaming WAL entries is matched/found
Shown as unit
vault.replication.fetchRemoteKeys.count
(count)
Time taken to fetch keys from a remote cluster participating in replication prior to Merkle Tree based delta generation count
vault.replication.fetchRemoteKeys.quantile
(gauge)
Time taken to fetch keys from a remote cluster participating in replication prior to Merkle Tree based delta generation quantile
Shown as millisecond
vault.replication.fetchRemoteKeys.sum
(gauge)
Time taken to fetch keys from a remote cluster participating in replication prior to Merkle Tree based delta generation sum
Shown as millisecond
vault.replication.merkleDiff.count
(count)
Time taken to perform a Merkle Tree based delta generation between the clusters participating in replication count
vault.replication.merkleDiff.quantile
(gauge)
Time taken to perform a Merkle Tree based delta generation between the clusters participating in replication quantile
Shown as millisecond
vault.replication.merkleDiff.sum
(gauge)
Time taken to perform a Merkle Tree based delta generation between the clusters participating in replication sum
Shown as millisecond
vault.replication.merkleSync.count
(count)
Time taken to perform a Merkle Tree based synchronization using the last delta generated between the clusters participating in replication count
vault.replication.merkleSync.quantile
(gauge)
Time taken to perform a Merkle Tree based synchronization using the last delta generated between the clusters participating in replication quantile
Shown as millisecond
vault.replication.merkleSync.sum
(gauge)
Time taken to perform a Merkle Tree based synchronization using the last delta generated between the clusters participating in replication sum
Shown as millisecond
vault.replication.merkle.commit_index
(gauge)
The last committed index in the Merkle Tree
Shown as index
vault.replication.wal.last_wal
(gauge)
The index of the last WAL
Shown as index
vault.replication.wal.last_dr_wal
(gauge)
The index of the last DR WAL
Shown as index
vault.replication.wal.last_performance_wal
(gauge)
The index of the last Performance WAL
Shown as index
vault.replication.fsm.last_remote_wal
(gauge)
The index of the last remote WAL
Shown as index
vault.replication.rpc.server.auth_request.count
(count)
Duration of time taken by auth request count
vault.replication.rpc.server.auth_request.quantile
(gauge)
Duration of time taken by auth request quantile
Shown as millisecond
vault.replication.rpc.server.auth_request.sum
(gauge)
Duration of time taken by auth request sum
Shown as millisecond
vault.replication.rpc.server.bootstrap_request.count
(count)
Duration of time taken by bootstrap request count
vault.replication.rpc.server.bootstrap_request.quantile
(gauge)
Duration of time taken by bootstrap request quantile
Shown as millisecond
vault.replication.rpc.server.bootstrap_request.sum
(gauge)
Duration of time taken by bootstrap request sum
Shown as millisecond
vault.replication.rpc.server.conflicting_pages_request.count
(count)
Duration of time taken by conflicting pages request count
vault.replication.rpc.server.conflicting_pages_request.quantile
(gauge)
Duration of time taken by conflicting pages request quantile
Shown as millisecond
vault.replication.rpc.server.conflicting_pages_request.sum
(gauge)
Duration of time taken by conflicting pages request sum
Shown as millisecond
vault.replication.rpc.server.echo.count
(count)
Duration of time taken by echo count
vault.replication.rpc.server.echo.quantile
(gauge)
Duration of time taken by echo quantile
Shown as millisecond
vault.replication.rpc.server.echo.sum
(gauge)
Duration of time taken by echo sum
Shown as millisecond
vault.replication.rpc.server.forwarding_request.count
(count)
Duration of time taken by forwarding request count
vault.replication.rpc.server.forwarding_request.quantile
(gauge)
Duration of time taken by forwarding request quantile
Shown as millisecond
vault.replication.rpc.server.forwarding_request.sum
(gauge)
Duration of time taken by forwarding request sum
Shown as millisecond
vault.replication.rpc.server.guard_hash_request.count
(count)
Duration of time taken by guard hash request count
vault.replication.rpc.server.guard_hash_request.quantile
(gauge)
Duration of time taken by guard hash request quantile
Shown as millisecond
vault.replication.rpc.server.guard_hash_request.sum
(gauge)
Duration of time taken by guard hash request sum
Shown as millisecond
vault.replication.rpc.server.persist_alias_request.count
(count)
Duration of time talen by persist alias request count
vault.replication.rpc.server.persist_alias_request.quantile
(gauge)
Duration of time talen by persist alias request quantile
Shown as millisecond
vault.replication.rpc.server.persist_alias_request.sum
(gauge)
Duration of time talen by persist alias request sum
Shown as millisecond
vault.replication.rpc.server.persist_persona_request.count
(count)
Duration of time taken by persist persona request count
vault.replication.rpc.server.persist_persona_request.quantile
(gauge)
Duration of time taken by persist persona request quantile
Shown as millisecond
vault.replication.rpc.server.persist_persona_request.sum
(gauge)
Duration of time taken by persist persona request sum
Shown as millisecond
vault.replication.rpc.server.stream_wals_request.count
(count)
Duration of time taken by stream wals request count
vault.replication.rpc.server.stream_wals_request.quantile
(gauge)
Duration of time taken by stream wals request quantile
Shown as millisecond
vault.replication.rpc.server.stream_wals_request.sum
(gauge)
Duration of time taken by stream wals request sum
Shown as millisecond
vault.replication.rpc.server.sub_page_hashes_request.count
(count)
Duration of time taken by sub page hashes request count
vault.replication.rpc.server.sub_page_hashes_request.quantile
(gauge)
Duration of time taken by sub page hashes request quantile
Shown as millisecond
vault.replication.rpc.server.sub_page_hashes_request.sum
(gauge)
Duration of time taken by sub page hashes request sum
Shown as millisecond
vault.replication.rpc.server.sync_counter_request.count
(count)
Duration of time taken by sync counter request count
vault.replication.rpc.server.sync_counter_request.quantile
(gauge)
Duration of time taken by sync counter request quantile
Shown as millisecond
vault.replication.rpc.server.sync_counter_request.sum
(gauge)
Duration of time taken by sync counter request sum
Shown as millisecond
vault.replication.rpc.server.upsert_group_request.count
(count)
Duration of time taken by upsert group request count
vault.replication.rpc.server.upsert_group_request.quantile
(gauge)
Duration of time taken by upsert group request quantile
Shown as millisecond
vault.replication.rpc.server.upsert_group_request.sum
(gauge)
Duration of time taken by upsert group request sum
Shown as millisecond
vault.replication.rpc.client.conflicting_pages.count
(count)
Duration of time taken by client conflicting pages request count
vault.replication.rpc.client.conflicting_pages.quantile
(gauge)
Duration of time taken by client conflicting pages request quantile
Shown as millisecond
vault.replication.rpc.client.conflicting_pages.sum
(gauge)
Duration of time taken by client conflicting pages request sum
Shown as millisecond
vault.replication.rpc.client.fetch_keys.count
(count)
Duration of time taken by client fetch keys request count
vault.replication.rpc.client.fetch_keys.quantile
(gauge)
Duration of time taken by client fetch keys request quantile
Shown as millisecond
vault.replication.rpc.client.fetch_keys.sum
(gauge)
Duration of time taken by client fetch keys request sum
Shown as millisecond
vault.replication.rpc.client.forward.count
(count)
Duration of time taken by client forward request count
vault.replication.rpc.client.forward.quantile
(gauge)
Duration of time taken by client forward request quantile
Shown as millisecond
vault.replication.rpc.client.forward.sum
(gauge)
Duration of time taken by client forward request sum
Shown as millisecond
vault.replication.rpc.client.guard_hash.count
(count)
Duration of time taken by client guard hash request count
vault.replication.rpc.client.guard_hash.quantile
(gauge)
Duration of time taken by client guard hash request quantile
Shown as millisecond
vault.replication.rpc.client.guard_hash.sum
(gauge)
Duration of time taken by client guard hash request sum
Shown as millisecond
vault.replication.rpc.client.persist_alias.count
(count)
Duration of time taken by client persist alias request count
vault.replication.rpc.client.persist_alias.quantile
(gauge)
Duration of time taken by client persist alias request quantile
Shown as millisecond
vault.replication.rpc.client.persist_alias.sum
(gauge)
Duration of time taken by client persist alias request sum
Shown as millisecond
vault.replication.rpc.client.register_auth.count
(count)
Duration of time taken by client register auth request count
vault.replication.rpc.client.register_auth.quantile
(gauge)
Duration of time taken by client register auth request quantile
Shown as millisecond
vault.replication.rpc.client.register_auth.sum
(gauge)
Duration of time taken by client register auth request sum
Shown as millisecond
vault.replication.rpc.client.register_lease.count
(count)
Duration of time taken by client register lease request count
vault.replication.rpc.client.register_lease.quantile
(gauge)
Duration of time taken by client register lease request quantile
Shown as millisecond
vault.replication.rpc.client.register_lease.sum
(gauge)
Duration of time taken by client register lease request sum
Shown as millisecond
vault.replication.rpc.client.stream_wals.count
(count)
Duration of time taken by client stream wals request count
vault.replication.rpc.client.stream_wals.quantile
(gauge)
Duration of time taken by client stream wals request quantile
Shown as millisecond
vault.replication.rpc.client.stream_wals.sum
(gauge)
Duration of time taken by client stream wals request sum
Shown as millisecond
vault.replication.rpc.client.sub_page_hashes.count
(count)
Duration of time taken by client sub page hashes request count
vault.replication.rpc.client.sub_page_hashes.quantile
(gauge)
Duration of time taken by client sub page hashes request quantile
Shown as millisecond
vault.replication.rpc.client.sub_page_hashes.sum
(gauge)
Duration of time taken by client sub page hashes request sum
Shown as millisecond
vault.replication.rpc.client.sync_counter.count
(count)
Duration of time taken by client sync counter request count
vault.replication.rpc.client.sync_counter.quantile
(gauge)
Duration of time taken by client sync counter request quantile
Shown as millisecond
vault.replication.rpc.client.sync_counter.sum
(gauge)
Duration of time taken by client sync counter request sum
Shown as millisecond
vault.replication.rpc.client.upsert_group.count
(count)
Duration of time taken by client upsert group request count
vault.replication.rpc.client.upsert_group.quantile
(gauge)
Duration of time taken by client upsert group request quantile
Shown as millisecond
vault.replication.rpc.client.upsert_group.sum
(gauge)
Duration of time taken by client upsert group request sum
Shown as millisecond
vault.replication.rpc.client.wrap_in_cubbyhole.count
(count)
Duration of time taken by client wrap in cubbyhole request
vault.replication.rpc.client.wrap_in_cubbyhole.quantile
(gauge)
Duration of time taken by client wrap in cubbyhole request
Shown as millisecond
vault.replication.rpc.client.wrap_in_cubbyhole.sum
(gauge)
Duration of time taken by client wrap in cubbyhole request
Shown as millisecond
vault.replication.rpc.dr.server.echo.count
(count)
Duration of time taken by DR echo request count
vault.replication.rpc.dr.server.echo.quantile
(gauge)
Duration of time taken by DR echo request quantile
Shown as millisecond
vault.replication.rpc.dr.server.echo.sum
(gauge)
Duration of time taken by DR echo request sum
Shown as millisecond
vault.replication.rpc.dr.server.fetch_keys_request.count
(count)
Duration of time taken by DR fetch keys request count
vault.replication.rpc.dr.server.fetch_keys_request.quantile
(gauge)
Duration of time taken by DR fetch keys request quantile
Shown as millisecond
vault.replication.rpc.dr.server.fetch_keys_request.sum
(gauge)
Duration of time taken by DR fetch keys request sum
Shown as millisecond
vault.replication.rpc.standby.server.echo.count
(count)
Duration of time taken by standby echo request count
vault.replication.rpc.standby.server.echo.quantile
(gauge)
Duration of time taken by standby echo request quantile
Shown as millisecond
vault.replication.rpc.standby.server.echo.sum
(gauge)
Duration of time taken by standby echo request sum
Shown as millisecond
vault.replication.rpc.standby.server.register_auth_request.count
(count)
Duration of time taken by standby register auth request count
vault.replication.rpc.standby.server.register_auth_request.quantile
(gauge)
Duration of time taken by standby register auth request quantile
Shown as millisecond
vault.replication.rpc.standby.server.register_auth_request.sum
(gauge)
Duration of time taken by standby register auth request sum
Shown as millisecond
vault.replication.rpc.standby.server.register_lease_request.count
(count)
Duration of time taken by standby register lease request count
vault.replication.rpc.standby.server.register_lease_request.quantile
(gauge)
Duration of time taken by standby register lease request quantile
Shown as millisecond
vault.replication.rpc.standby.server.register_lease_request.sum
(gauge)
Duration of time taken by standby register lease request sum
Shown as millisecond
vault.replication.rpc.standby.server.wrap_token_request.count
(count)
Duration of time taken by standby wrap token request count
vault.replication.rpc.standby.server.wrap_token_request.quantile
(gauge)
Duration of time taken by standby wrap token request quantile
Shown as millisecond
vault.replication.rpc.standby.server.wrap_token_request.sum
(gauge)
Duration of time taken by standby wrap token request sum
Shown as millisecond
vault.database.Initialize.count
(count)
Time taken to initialize a database secret engine across all database secrets engines count
vault.database.Initialize.quantile
(gauge)
Time taken to initialize a database secret engine across all database secrets engines quantile
Shown as millisecond
vault.database.Initialize.sum
(gauge)
Time taken to initialize a database secret engine across all database secrets engines sum
Shown as millisecond
vault.database.Initialize.error
(count)
Number of databases secrets engine initialization operation errors across all database secrets engines
Shown as error
vault.database.Close.count
(count)
Time taken to close a database secret engine across all database secrets engines count
vault.database.Close.quantile
(gauge)
Time taken to close a database secret engine across all database secrets engines quantile
Shown as millisecond
vault.database.Close.sum
(gauge)
Time taken to close a database secret engine across all database secrets engines sum
Shown as millisecond
vault.database.Close.error
(count)
Number of database secrets engine close operation errors across all database secrets engines
Shown as error
vault.database.CreateUser.count
(count)
Time taken to create a user across all database secrets engine count
vault.database.CreateUser.quantile
(gauge)
Time taken to create a user across all database secrets engine quantile
Shown as millisecond
vault.database.CreateUser.sum
(gauge)
Time taken to create a user across all database secrets engine sum
Shown as millisecond
vault.database.CreateUser.error
(count)
Number of user creation operation errors across all database secrets engines
Shown as error
vault.database.RenewUser.count
(count)
Time taken to renew a user across all database secrets engines count
vault.database.RenewUser.quantile
(gauge)
Time taken to renew a user across all database secrets engines quantile
Shown as millisecond
vault.database.RenewUser.sum
(gauge)
Time taken to renew a user across all database secrets engines sum
Shown as millisecond
vault.database.RenewUser.error
(count)
Number of user renewal operation errors across all database secrets engines
Shown as error
vault.database.RevokeUser.count
(count)
Time taken to revoke a user across all database secrets engines count
vault.database.RevokeUser.quantile
(gauge)
Time taken to revoke a user across all database secrets engines quantile
Shown as millisecond
vault.database.RevokeUser.sum
(gauge)
Time taken to revoke a user across all database secrets engines sum
Shown as millisecond
vault.database.RevokeUser.error
(count)
Number of user revocation operation errors across all database secrets engines
Shown as error
vault.vault.azure.put.count
(count)
Duration of a PUT operation against Azure storage backend count
vault.vault.azure.put.quantile
(gauge)
Duration of a PUT operation against Azure storage backend quantile
Shown as millisecond
vault.vault.azure.put.sum
(gauge)
Duration of a PUT operation against Azure storage backend sum
Shown as millisecond
vault.vault.azure.get.count
(count)
Duration of a GET operation against the Azure storage backend count
vault.vault.azure.get.quantile
(gauge)
Duration of a GET operation against the Azure storage backend quantile
Shown as millisecond
vault.vault.azure.get.sum
(gauge)
Duration of a GET operation against the Azure storage backend sum
Shown as millisecond
vault.vault.azure.delete.count
(count)
Duration of a DELETE operation against the Azure storage backend count
vault.vault.azure.delete.quantile
(gauge)
Duration of a DELETE operation against the Azure storage backend quantile
Shown as millisecond
vault.vault.azure.delete.sum
(gauge)
Duration of a DELETE operation against the Azure storage backend sum
Shown as millisecond
vault.vault.azure.list.count
(count)
Duration of a LIST operation against the Azure storage backend count
vault.vault.azure.list.quantile
(gauge)
Duration of a LIST operation against the Azure storage backend quantile
Shown as millisecond
vault.vault.azure.list.sum
(gauge)
Duration of a LIST operation against the Azure storage backend sum
Shown as millisecond
vault.vault.cassandra.put.count
(count)
Duration of a PUT operation against the Cassandra storage backend count
vault.vault.cassandra.put.quantile
(gauge)
Duration of a PUT operation against the Cassandra storage backend quantile
Shown as millisecond
vault.vault.cassandra.put.sum
(gauge)
Duration of a PUT operation against the Cassandra storage backend sum
Shown as millisecond
vault.vault.cassandra.get.count
(count)
Duration of a GET operation against the Cassandra storage backend
vault.vault.cassandra.get.quantile
(gauge)
Duration of a GET operation against the Cassandra storage backend
Shown as millisecond
vault.vault.cassandra.get.sum
(gauge)
Duration of a GET operation against the Cassandra storage backend
Shown as millisecond
vault.vault.cassandra.delete.count
(count)
Duration of a DELETE operation against the Cassandra storage backend count
vault.vault.cassandra.delete.quantile
(gauge)
Duration of a DELETE operation against the Cassandra storage backend quantile
Shown as millisecond
vault.vault.cassandra.delete.sum
(gauge)
Duration of a DELETE operation against the Cassandra storage backend sum
Shown as millisecond
vault.vault.cassandra.list.count
(count)
Duration of a LIST operation against the Cassandra storage backend count
vault.vault.cassandra.list.quantile
(gauge)
Duration of a LIST operation against the Cassandra storage backend quantile
Shown as millisecond
vault.vault.cassandra.list.sum
(gauge)
Duration of a LIST operation against the Cassandra storage backend sum
Shown as millisecond
vault.vault.cockroachdb.put.count
(count)
Duration of a PUT operation against the CockroachDB storage backend count
vault.vault.cockroachdb.put.quantile
(gauge)
Duration of a PUT operation against the CockroachDB storage backend quantile
Shown as millisecond
vault.vault.cockroachdb.put.sum
(gauge)
Duration of a PUT operation against the CockroachDB storage backend sum
Shown as millisecond
vault.vault.cockroachdb.get.count
(count)
Duration of a GET operation against the CockroachDB storage backend count
vault.vault.cockroachdb.get.quantile
(gauge)
Duration of a GET operation against the CockroachDB storage backend quantile
Shown as millisecond
vault.vault.cockroachdb.get.sum
(gauge)
Duration of a GET operation against the CockroachDB storage backend sum
Shown as millisecond
vault.vault.cockroachdb.delete.count
(count)
Duration of a DELETE operation against the CockroachDB storage backend count
vault.vault.cockroachdb.delete.quantile
(gauge)
Duration of a DELETE operation against the CockroachDB storage backend quantile
Shown as millisecond
vault.vault.cockroachdb.delete.sum
(gauge)
Duration of a DELETE operation against the CockroachDB storage backend sum
Shown as millisecond
vault.vault.cockroachdb.list.count
(count)
Duration of a LIST operation against the CockroachDB storage backend count
vault.vault.cockroachdb.list.quantile
(gauge)
Duration of a LIST operation against the CockroachDB storage backend quantile
Shown as millisecond
vault.vault.cockroachdb.list.sum
(gauge)
Duration of a LIST operation against the CockroachDB storage backend sum
Shown as millisecond
vault.vault.consul.put.count
(count)
Duration of a PUT operation against the Consul storage backend count
vault.vault.consul.put.sum
(gauge)
Duration of a PUT operation against the Consul storage backend sum
Shown as millisecond
vault.vault.consul.get.count
(count)
Duration of a GET operation against the Consul storage backend count
vault.vault.consul.get.quantile
(gauge)
Duration of a GET operation against the Consul storage backend quantile
Shown as millisecond
vault.vault.consul.get.sum
(gauge)
Duration of a GET operation against the Consul storage backend sum
Shown as millisecond
vault.vault.consul.delete.count
(count)
Duration of DELETE operation against the Consul storage backend count
vault.vault.consul.delete.quantile
(gauge)
Duration of DELETE operation against the Consul storage backend quantile
Shown as millisecond
vault.vault.consul.delete.sum
(gauge)
Duration of DELETE operation against the Consul storage backend sum
Shown as millisecond
vault.vault.consul.list.count
(count)
Duration of a LIST operation against the Consul storage backend count
vault.vault.consul.list.quantile
(gauge)
Duration of a LIST operation against the Consul storage backend quantile
Shown as millisecond
vault.vault.consul.list.sum
(gauge)
Duration of a LIST operation against the Consul storage backend sum
Shown as millisecond
vault.vault.couchdb.put.count
(count)
Duration of a PUT operation against the CouchDB storage backend count
vault.vault.couchdb.put.quantile
(gauge)
Duration of a PUT operation against the CouchDB storage backend quantile
Shown as millisecond
vault.vault.couchdb.put.sum
(gauge)
Duration of a PUT operation against the CouchDB storage backend sum
Shown as millisecond
vault.vault.couchdb.get.count
(count)
Duration of a GET operation against the CouchDB storage backend count
vault.vault.couchdb.get.quantile
(gauge)
Duration of a GET operation against the CouchDB storage backend quantile
Shown as millisecond
vault.vault.couchdb.get.sum
(gauge)
Duration of a GET operation against the CouchDB storage backend sum
Shown as millisecond
vault.vault.couchdb.delete.count
(count)
Duration of a DELETE operation against the CouchDB storage backend count
vault.vault.couchdb.delete.quantile
(gauge)
Duration of a DELETE operation against the CouchDB storage backend quantile
Shown as millisecond
vault.vault.couchdb.delete.sum
(gauge)
Duration of a DELETE operation against the CouchDB storage backend sum
Shown as millisecond
vault.vault.couchdb.list.count
(count)
Duration of a LIST operation against the CouchDB storage backend count
vault.vault.couchdb.list.quantile
(gauge)
Duration of a LIST operation against the CouchDB storage backend quantile
Shown as millisecond
vault.vault.couchdb.list.sum
(gauge)
Duration of a LIST operation against the CouchDB storage backend sum
Shown as millisecond
vault.vault.dynamodb.put.count
(count)
Duration of a PUT operation against the DynamoDB storage backend count
vault.vault.dynamodb.put.quantile
(gauge)
Duration of a PUT operation against the DynamoDB storage backend quantile
Shown as millisecond
vault.vault.dynamodb.put.sum
(gauge)
Duration of a PUT operation against the DynamoDB storage backend sum
Shown as millisecond
vault.vault.dynamodb.get.count
(count)
Duration of a GET operation against the DynamoDB storage backend count
vault.vault.dynamodb.get.quantile
(gauge)
Duration of a GET operation against the DynamoDB storage backend quantile
Shown as millisecond
vault.vault.dynamodb.get.sum
(gauge)
Duration of a GET operation against the DynamoDB storage backend sum
Shown as millisecond
vault.vault.dynamodb.delete.count
(count)
Duration of a DELETE operation against the DynamoDB storage backend count
vault.vault.dynamodb.delete.quantile
(gauge)
Duration of a DELETE operation against the DynamoDB storage backend quantile
Shown as millisecond
vault.vault.dynamodb.delete.sum
(gauge)
Duration of a DELETE operation against the DynamoDB storage backend sum
Shown as millisecond
vault.vault.dynamodb.list.count
(count)
Duration of a LIST operation against the DynamoDB storage backend count
vault.vault.dynamodb.list.quantile
(gauge)
Duration of a LIST operation against the DynamoDB storage backend quantile
Shown as millisecond
vault.vault.dynamodb.list.sum
(gauge)
Duration of a LIST operation against the DynamoDB storage backend sum
Shown as millisecond
vault.vault.etcd.put.count
(count)
Duration of a PUT operation against the etcd storage backend
vault.vault.etcd.put.quantile
(gauge)
Duration of a PUT operation against the etcd storage backend
Shown as millisecond
vault.vault.etcd.put.sum
(gauge)
Duration of a PUT operation against the etcd storage backend
Shown as millisecond
vault.vault.etcd.get.count
(count)
Duration of a GET operation against the etcd storage backend count
vault.vault.etcd.get.quantile
(gauge)
Duration of a GET operation against the etcd storage backend quantile
Shown as millisecond
vault.vault.etcd.get.sum
(gauge)
Duration of a GET operation against the etcd storage backend sum
Shown as millisecond
vault.vault.etcd.delete.count
(count)
Duration of a DELETE operation against the etcd storage backend count
vault.vault.etcd.delete.quantile
(gauge)
Duration of a DELETE operation against the etcd storage backend quantile
Shown as millisecond
vault.vault.etcd.delete.sum
(gauge)
Duration of a DELETE operation against the etcd storage backend sum
Shown as millisecond
vault.vault.etcd.list.count
(count)
Duration of a LIST operation against the etcd storage backend count
vault.vault.etcd.list.quantile
(gauge)
Duration of a LIST operation against the etcd storage backend quantile
Shown as millisecond
vault.vault.etcd.list.sum
(gauge)
Duration of a LIST operation against the etcd storage backend sum
Shown as millisecond
vault.vault.gcs.put.count
(count)
Duration of a PUT operation against the Google Cloud Storage storage backend count
vault.vault.gcs.put.quantile
(gauge)
Duration of a PUT operation against the Google Cloud Storage storage backend quantile
Shown as millisecond
vault.vault.gcs.put.sum
(gauge)
Duration of a PUT operation against the Google Cloud Storage storage backend sum
Shown as millisecond
vault.vault.gcs.get.count
(count)
Duration of a GET operation against the Google Cloud Storage storage backend count
vault.vault.gcs.get.quantile
(gauge)
Duration of a GET operation against the Google Cloud Storage storage backend quantile
Shown as millisecond
vault.vault.gcs.get.sum
(gauge)
Duration of a GET operation against the Google Cloud Storage storage backend sum
Shown as millisecond
vault.vault.gcs.delete.count
(count)
Duration of a DELETE operation against the Google Cloud Storage storage backend count
vault.vault.gcs.delete.quantile
(gauge)
Duration of a DELETE operation against the Google Cloud Storage storage backend quantile
Shown as millisecond
vault.vault.gcs.delete.sum
(gauge)
Duration of a DELETE operation against the Google Cloud Storage storage backend sum
Shown as millisecond
vault.vault.gcs.list.count
(count)
Duration of a LIST operation against the Google Cloud Storage storage backend count
vault.vault.gcs.list.quantile
(gauge)
Duration of a LIST operation against the Google Cloud Storage storage backend quantile
Shown as millisecond
vault.vault.gcs.list.sum
(gauge)
Duration of a LIST operation against the Google Cloud Storage storage backend sum
Shown as millisecond
vault.vault.gcs.lock.unlock.count
(count)
Duration of an UNLOCK operation against the Google Cloud Storage storage backend in HA mode count
vault.vault.gcs.lock.unlock.quantile
(gauge)
Duration of an UNLOCK operation against the Google Cloud Storage storage backend in HA mode quantile
Shown as millisecond
vault.vault.gcs.lock.unlock.sum
(gauge)
Duration of an UNLOCK operation against the Google Cloud Storage storage backend in HA mode sum
Shown as millisecond
vault.vault.gcs.lock.lock.count
(count)
Duration of a LOCK operation against the Google Cloud Storage storage backend in HA mode count
vault.vault.gcs.lock.lock.quantile
(gauge)
Duration of a LOCK operation against the Google Cloud Storage storage backend in HA mode quantile
Shown as millisecond
vault.vault.gcs.lock.lock.sum
(gauge)
Duration of a LOCK operation against the Google Cloud Storage storage backend in HA mode sum
Shown as millisecond
vault.vault.gcs.lock.value.count
(count)
Duration of a VALUE operation against the Google Cloud Storage storage backend in HA mode count
vault.vault.gcs.lock.value.quantile
(gauge)
Duration of a VALUE operation against the Google Cloud Storage storage backend in HA mode quantile
Shown as millisecond
vault.vault.gcs.lock.value.sum
(gauge)
Duration of a VALUE operation against the Google Cloud Storage storage backend in HA mode sum
Shown as millisecond
vault.vault.mssql.put.count
(count)
Duration of a PUT operation against the MS-SQL storage backend count
vault.vault.mssql.put.quantile
(gauge)
Duration of a PUT operation against the MS-SQL storage backend quantile
Shown as millisecond
vault.vault.mssql.put.sum
(gauge)
Duration of a PUT operation against the MS-SQL storage backend sum
Shown as millisecond
vault.vault.mssql.get.count
(count)
Duration of a GET operation against the MS-SQL storage backend count
vault.vault.mssql.get.quantile
(gauge)
Duration of a GET operation against the MS-SQL storage backend quantile
Shown as millisecond
vault.vault.mssql.get.sum
(gauge)
Duration of a GET operation against the MS-SQL storage backend sum
Shown as millisecond
vault.vault.mssql.delete.count
(count)
Duration of a GET operation against the MS-SQL storage backend count
vault.vault.mssql.delete.quantile
(gauge)
Duration of a GET operation against the MS-SQL storage backend quantile
Shown as millisecond
vault.vault.mssql.delete.sum
(gauge)
Duration of a GET operation against the MS-SQL storage backend sum
Shown as millisecond
vault.vault.mssql.list.count
(count)
Duration of a LIST operation against the MS-SQL storage backend count
vault.vault.mssql.list.quantile
(gauge)
Duration of a LIST operation against the MS-SQL storage backend quantile
Shown as millisecond
vault.vault.mssql.list.sum
(gauge)
Duration of a LIST operation against the MS-SQL storage backend sum
Shown as millisecond
vault.vault.mysql.put.count
(count)
Duration of a PUT operation against the MySQL storage backend count
vault.vault.mysql.put.quantile
(gauge)
Duration of a PUT operation against the MySQL storage backend quantile
Shown as millisecond
vault.vault.mysql.put.sum
(gauge)
Duration of a PUT operation against the MySQL storage backend sum
Shown as millisecond
vault.vault.mysql.get.count
(count)
Duration of a GET operation against the MySQL storage backend count
vault.vault.mysql.get.quantile
(gauge)
Duration of a GET operation against the MySQL storage backend quantile
Shown as millisecond
vault.vault.mysql.get.sum
(gauge)
Duration of a GET operation against the MySQL storage backend sum
Shown as millisecond
vault.vault.mysql.delete.count
(count)
Duration of a DELETE operation against the MySQL storage backend count
vault.vault.mysql.delete.quantile
(gauge)
Duration of a DELETE operation against the MySQL storage backend quantile
Shown as millisecond
vault.vault.mysql.delete.sum
(gauge)
Duration of a DELETE operation against the MySQL storage backend sum
Shown as millisecond
vault.vault.mysql.list.count
(count)
Duration of a LIST operation against the MySQL storage backend count
vault.vault.mysql.list.quantile
(gauge)
Duration of a LIST operation against the MySQL storage backend quantile
Shown as millisecond
vault.vault.mysql.list.sum
(gauge)
Duration of a LIST operation against the MySQL storage backend sum
Shown as millisecond
vault.vault.postgres.put.count
(count)
Duration of a PUT operation against the PostgreSQL storage backend count
vault.vault.postgres.put.quantile
(gauge)
Duration of a PUT operation against the PostgreSQL storage backend quantile
Shown as millisecond
vault.vault.postgres.put.sum
(gauge)
Duration of a PUT operation against the PostgreSQL storage backend sum
Shown as millisecond
vault.vault.postgres.get.count
(count)
Duration of a GET operation against the PostgreSQL storage backend count
vault.vault.postgres.get.quantile
(gauge)
Duration of a GET operation against the PostgreSQL storage backend quantile
Shown as millisecond
vault.vault.postgres.get.sum
(gauge)
Duration of a GET operation against the PostgreSQL storage backend sum
Shown as millisecond
vault.vault.postgres.delete.count
(count)
Duration of a DELETE operation against the PostgreSQL storage backend count
vault.vault.postgres.delete.quantile
(gauge)
Duration of a DELETE operation against the PostgreSQL storage backend quantile
Shown as millisecond
vault.vault.postgres.delete.sum
(gauge)
Duration of a DELETE operation against the PostgreSQL storage backend sum
Shown as millisecond
vault.vault.postgres.list.count
(count)
Duration of a LIST operation against the PostgreSQL storage backend count
vault.vault.postgres.list.quantile
(gauge)
Duration of a LIST operation against the PostgreSQL storage backend quantile
Shown as millisecond
vault.vault.postgres.list.sum
(gauge)
Duration of a LIST operation against the PostgreSQL storage backend sum
Shown as millisecond
vault.vault.raft.put.count
(count)
Duration of a PUT operation against the CouchDB storage backend count
vault.vault.raft.put.quantile
(gauge)
Duration of a PUT operation against the CouchDB storage backend quantile
Shown as millisecond
vault.vault.raft.put.sum
(gauge)
Duration of a PUT operation against the Raft storage backend sum
Shown as millisecond
vault.vault.raft.get.count
(count)
Duration of a GET operation against the Raft storage backend count
vault.vault.raft.get.quantile
(gauge)
Duration of a GET operation against the Raft storage backend quantile
Shown as millisecond
vault.vault.raft.get.sum
(gauge)
Duration of a GET operation against the Raft storage backend sum
Shown as millisecond
vault.vault.raft.delete.count
(count)
Duration of DELETE operation against the Raft storage backend count
vault.vault.raft.delete.quantile
(gauge)
Duration of DELETE operation against the Raft storage backend quantile
Shown as millisecond
vault.vault.raft.delete.sum
(gauge)
Duration of DELETE operation against the Raft storage backend sum
Shown as millisecond
vault.vault.raft.list.count
(count)
Duration of a LIST operation against the Raft storage backend count
vault.vault.raft.list.quantile
(gauge)
Duration of a LIST operation against the Raft storage backend quantile
Shown as millisecond
vault.vault.raft.list.sum
(gauge)
Duration of a LIST operation against the Raft storage backend sum
Shown as millisecond
vault.vault.s3.put.count
(count)
Duration of a PUT operation against the Amazon S3 storage backend count
vault.vault.s3.put.quantile
(gauge)
Duration of a PUT operation against the Amazon S3 storage backend quantile
Shown as millisecond
vault.vault.s3.put.sum
(gauge)
Duration of a PUT operation against the Amazon S3 storage backend sum
Shown as millisecond
vault.vault.s3.get.count
(count)
Duration of a GET operation against the Amazon S3 storage backend count
vault.vault.s3.get.quantile
(gauge)
Duration of a GET operation against the Amazon S3 storage backend quantile
Shown as millisecond
vault.vault.s3.get.sum
(gauge)
Duration of a GET operation against the Amazon S3 storage backend sum
Shown as millisecond
vault.vault.s3.delete.count
(count)
Duration of a DELETE operation against the Amazon S3 storage backend count
vault.vault.s3.delete.quantile
(gauge)
Duration of a DELETE operation against the Amazon S3 storage backend quantile
Shown as millisecond
vault.vault.s3.delete.sum
(gauge)
Duration of a DELETE operation against the Amazon S3 storage backend sum
Shown as millisecond
vault.vault.s3.list.count
(count)
Duration of a LIST operation against the Amazon S3 storage backend count
vault.vault.s3.list.quantile
(gauge)
Duration of a LIST operation against the Amazon S3 storage backend quantile
Shown as millisecond
vault.vault.s3.list.sum
(gauge)
Duration of a LIST operation against the Amazon S3 storage backend sum
Shown as millisecond
vault.vault.spanner.put.count
(count)
Duration of a PUT operation against the Google Cloud Spanner storage backend count
vault.vault.spanner.put.quantile
(gauge)
Duration of a PUT operation against the Google Cloud Spanner storage backend quantile
Shown as millisecond
vault.vault.spanner.put.sum
(gauge)
Duration of a PUT operation against the Google Cloud Spanner storage backend sum
Shown as millisecond
vault.vault.spanner.get.count
(count)
Duration of a GET operation against the Google Cloud Spanner storage backend count
vault.vault.spanner.get.quantile
(gauge)
Duration of a GET operation against the Google Cloud Spanner storage backend quantile
Shown as millisecond
vault.vault.spanner.get.sum
(gauge)
Duration of a GET operation against the Google Cloud Spanner storage backend sum
Shown as millisecond
vault.vault.spanner.delete.count
(count)
Duration of a DELETE operation against the Google Cloud Spanner storage backend count
vault.vault.spanner.delete.quantile
(gauge)
Duration of a DELETE operation against the Google Cloud Spanner storage backend quantile
Shown as millisecond
vault.vault.spanner.delete.sum
(gauge)
Duration of a DELETE operation against the Google Cloud Spanner storage backend sum
Shown as millisecond
vault.vault.spanner.list.count
(count)
Duration of a LIST operation against the Google Cloud Spanner storage backend count
vault.vault.spanner.list.quantile
(gauge)
Duration of a LIST operation against the Google Cloud Spanner storage backend quantile
Shown as millisecond
vault.vault.spanner.list.sum
(gauge)
Duration of a LIST operation against the Google Cloud Spanner storage backend sum
Shown as millisecond
vault.vault.spanner.lock.unlock.count
(count)
Duration of an UNLOCK operation against the Google Cloud Spanner storage backend in HA mode
vault.vault.spanner.lock.unlock.quantile
(gauge)
Duration of an UNLOCK operation against the Google Cloud Spanner storage backend in HA mode
Shown as millisecond
vault.vault.spanner.lock.unlock.sum
(gauge)
Duration of an UNLOCK operation against the Google Cloud Spanner storage backend in HA mode
Shown as millisecond
vault.vault.spanner.lock.lock.count
(count)
Duration of an LOCK operation against the Google Cloud Spanner storage backend in HA mode count
vault.vault.spanner.lock.lock.quantile
(gauge)
Duration of an LOCK operation against the Google Cloud Spanner storage backend in HA mode quantile
Shown as millisecond
vault.vault.spanner.lock.lock.sum
(gauge)
Duration of an LOCK operation against the Google Cloud Spanner storage backend in HA mode sum
Shown as millisecond
vault.vault.spanner.lock.value.count
(count)
Duration of a VALUE operation against the Google Cloud Spanner backend in HA mode count
vault.vault.spanner.lock.value.quantile
(gauge)
Duration of a VALUE operation against the Google Cloud Spanner backend in HA mode quantile
Shown as millisecond
vault.vault.spanner.lock.value.sum
(gauge)
Duration of a VALUE operation against the Google Cloud Spanner backend in HA mode sum
Shown as millisecond
vault.vault.swift.put.count
(count)
Duration of a PUT operation against the Swift storage backend count
vault.vault.swift.put.quantile
(gauge)
Duration of a PUT operation against the Swift storage backend quantile
Shown as millisecond
vault.vault.swift.put.sum
(gauge)
Duration of a PUT operation against the Swift storage backend sum
Shown as millisecond
vault.vault.swift.get.count
(count)
Duration of a GET operation against the Swift storage backend count
vault.vault.swift.get.quantile
(gauge)
Duration of a GET operation against the Swift storage backend quantile
Shown as millisecond
vault.vault.swift.get.sum
(gauge)
Duration of a GET operation against the Swift storage backend sum
Shown as millisecond
vault.vault.swift.delete.count
(count)
Duration of a DELETE operation against the Swift storage backend count
vault.vault.swift.delete.quantile
(gauge)
Duration of a DELETE operation against the Swift storage backend quantile
Shown as millisecond
vault.vault.swift.delete.sum
(gauge)
Duration of a DELETE operation against the Swift storage backend sum
Shown as millisecond
vault.vault.swift.list.count
(count)
Duration of a LIST operation against the Swift storage backend count
vault.vault.swift.list.quantile
(gauge)
Duration of a LIST operation against the Swift storage backend quantile
Shown as millisecond
vault.vault.swift.list.sum
(gauge)
Duration of a LIST operation against the Swift storage backend sum
Shown as millisecond
vault.vault.zookeeper.put.count
(count)
Duration of a PUT operation against the ZooKeeper storage backend count
vault.vault.zookeeper.put.quantile
(gauge)
Duration of a PUT operation against the ZooKeeper storage backend quantile
Shown as millisecond
vault.vault.zookeeper.put.sum
(gauge)
Duration of a PUT operation against the ZooKeeper storage backend sum
Shown as millisecond
vault.vault.zookeeper.get.count
(count)
Duration of a GET operation against the ZooKeeper storage backend count
vault.vault.zookeeper.get.quantile
(gauge)
Duration of a GET operation against the ZooKeeper storage backend quantile
Shown as millisecond
vault.vault.zookeeper.get.sum
(gauge)
Duration of a GET operation against the ZooKeeper storage backend sum
Shown as millisecond
vault.vault.zookeeper.delete.count
(count)
Duration of a DELETE operation against the ZooKeeper storage backend count
vault.vault.zookeeper.delete.quantile
(gauge)
Duration of a DELETE operation against the ZooKeeper storage backend quantile
Shown as millisecond
vault.vault.zookeeper.delete.sum
(gauge)
Duration of a DELETE operation against the ZooKeeper storage backend sum
Shown as millisecond
vault.vault.zookeeper.list.count
(count)
Duration of a LIST operation against the ZooKeeper storage backend count
vault.vault.zookeeper.list.quantile
(gauge)
Duration of a LIST operation against the ZooKeeper storage backend quantile
Shown as millisecond
vault.vault.zookeeper.list.sum
(gauge)
Duration of a LIST operation against the ZooKeeper storage backend sum
Shown as millisecond

Événements

vault.leader_change : Cet événement se déclenche en cas de changement de leader du cluster.

Checks de service

vault.can_connect : Renvoie CRITICAL si l’Agent ne parvient pas à se connecter à Vault. Si ce n’est pas le cas, renvoie OK.

vault.unsealed : Renvoie CRITICAL si Vault est scellé. Si ce n’est pas le cas, renvoie OK.

vault.initialized : Renvoie CRITICAL si Vault n’est pas encore initialisé. Si ce n’est pas le cas, renvoie OK.

vault.prometheus.health: Renvoie CRITICAL si le check ne parvient pas à se connecter à l’endpoint de métriques. Si ce n’est pas le cas, renvoie OK.

Dépannage

Besoin d’aide ? Contactez l’assistance Datadog.

Pour aller plus loin

Documentation, liens et articles supplémentaires utiles :