Vault
セキュリティモニタリングが使用可能です セキュリティモニタリングが使用可能です

Vault

Agent Check Agentチェック

Supported OS: Linux Mac OS Windows

概要

このチェックは、Vault クラスターの健全性とリーダーの変更を監視します。

セットアップ

インストール

Vault チェックは Datadog Agent パッケージに含まれています。サーバーに追加でインストールする必要はありません。

前提条件

Vault チェックが正しく機能するには、a) Vault メトリクスへの未認証アクセスを有効にするか、b) Vault クライアントトークンを指定する必要があります。

a) Vault unauthenticated_metrics_access コンフィギュレーションを true に設定します。

これにより、/v1/sys/metrics エンドポイントへの未認証アクセスが許可されます。

b) Vault クライアントトークンを使用します。

以下は JWT 認証方法を使用した例ですが、他の認証方法を使用することもできます。

Vault インテグレーションが正しく機能するために必要な機能は次のとおりです。

metrics_policy.hcl のコンテンツ:

path "sys/metrics*" {
  capabilities = ["read", "list"]
}

セットアップポリシーとロール:

$ vault policy write metrics /path/to/metrics_policy.hcl
$ vault auth enable jwt
$ vault write auth/jwt/config jwt_supported_algs=RS256 jwt_validation_pubkeys=@<公開_PEM_へのパス>
$ vault write auth/jwt/role/datadog role_type=jwt bound_audiences=<オーディエンス> user_claim=name token_policies=metrics
$ vault agent -config=/path/to/agent_config.hcl

agent_config.hcl のコンテンツ:

exit_after_auth = true
pid_file = "/tmp/agent_pid"

auto_auth {
  method "jwt" {
    config = {
      path = "<JWT_クレームパス>"
      role = "datadog"
    }
  }

  sink "file" {
    config = {
      path = "<クライアントトークンパス>"
    }
  }
}

vault {
  address = "http://0.0.0.0:8200"
}

コンフィギュレーション

ホスト

ホストで実行中の Agent でこのチェックを構成する場合は、以下の手順に従ってください。コンテナ環境の場合は、コンテナ化セクションを参照してください。

  1. vault のパフォーマンスデータの収集を開始するには、Agent のコンフィギュレーションディレクトリのルートにある conf.d/ フォルダーの vault.d/conf.yaml ファイルを編集します。使用可能なすべてのコンフィギュレーションオプションの詳細については、サンプル vault.d/conf.yaml を参照してください。

トークンなしでインテグレーションを実行するためのコンフィギュレーション (vault コンフィギュレーション unauthenticated_metrics_access が true に設定されている場合):

```yaml
init_config:

instances:
    ## @param api_url - string - required
    ## URL of the Vault to query.
    #
  - api_url: http://localhost:8200/v1

    ## @param no_token - boolean - optional - default: false
    ## Attempt metric collection without a token.
    #
    no_token: true
```

クライアントトークンとのインテグレーションを実行するためのコンフィギュレーション:

```yaml
init_config:

instances:
    ## @param api_url - string - required
    ## URL of the Vault to query.
    #
  - api_url: http://localhost:8200/v1

    ## @param client_token - string - optional
    ## Client token necessary to collect metrics.
    #
    client_token: <CLIENT_TOKEN>

    ## @param client_token_path - string - optional
    ## Path to a file containing the client token. Overrides `client_token`.
    ## The token will be re-read after every authorization error.
    #
    # client_token_path: <CLIENT_TOKEN_PATH>
```
  1. Agent を再起動します

コンテナ化

コンテナ環境の場合は、オートディスカバリーのインテグレーションテンプレートのガイドを参照して、次のパラメーターを適用してください。

パラメーター
<インテグレーション名>vault
<初期コンフィギュレーション>空白または {}
<インスタンスコンフィギュレーション>{"api_url": "http://%%host%%:8200/v1"}

Vault の認証コンフィギュレーションに応じて、INSTANCE_CONFIG をカスタマイズする必要があります。上記のホストセクションの例を参照してください。

ログの収集

Agent バージョン 6.0 以降で利用可能

  1. Datadog Agent で、ログの収集はデフォルトで無効になっています。以下のように、datadog.yaml ファイルでこれを有効にします。

    logs_enabled: true
  2. Vault を構成し、監査とサーバーログを有効にします。

    • 監査ログは、適切なポリシーを持つ特権ユーザーが有効にする必要があります。詳細は、監査デバイスの有効化を参照してください。

      vault audit enable file file_path=/vault/vault-audit.log
    • サーバーログがファイルに必ず書き込まれるようにしてください。Vault systemd 起動スクリプトで静的サーバーログを構成することができます。 以下のスクリプトは、/var/log/vault.logへログを出力します。

      ...
      [Service]
      ...
      ExecStart=/bin/sh -c '/home/vagrant/bin/vault server -config=/home/vagrant/vault_nano/config/vault -log-level="trace" > /var/log/vault.log
      ...
  3. 次の構成ブロックを vault.d/conf.yaml ファイルに追加し、Vault ログの収集を始めます。

    logs:
     - type: file
       path: /vault/vault-audit.log
       source: vault
       service: "<SERVICE_NAME>"
     - type: file
       path: /var/log/vault.log
       source: vault
       service: "<SERVICE_NAME>"

検証

Agent の status サブコマンドを実行し、Checks セクションで vault を探します。

収集データ

メトリクス

vault.go.gc.duration.seconds.count
(count)
GC invocation durations count.
vault.go.gc.duration.seconds.quantile
(gauge)
GC invocation duration quantile.
Shown as second
vault.go.gc.duration.seconds.sum
(gauge)
GC invocation duration total.
Shown as second
vault.go.goroutines
(gauge)
Number of goroutines that currently exist.
vault.go.info
(gauge)
Information about the Go environment.
vault.go.memstats.alloc.bytes
(gauge)
Number of bytes allocated and still in use.
vault.go.memstats.alloc.bytes.total
(count)
Total number of bytes allocated, even if freed.
vault.go.memstats.buck_hash.sys.bytes
(gauge)
Number of bytes used by the profiling bucket hash table.
vault.go.memstats.frees.total
(count)
Total number of frees.
vault.go.memstats.gc.cpu.fraction
(gauge)
The fraction of this program's available CPU time used by the GC since the program started.
vault.go.memstats.gc.sys.bytes
(gauge)
Number of bytes used for garbage collection system metadata.
vault.go.memstats.heap.alloc.bytes
(gauge)
Number of heap bytes allocated and still in use.
vault.go.memstats.heap.idle.bytes
(gauge)
Number of heap bytes waiting to be used.
vault.go.memstats.heap.inuse.bytes
(gauge)
Number of heap bytes that are in use.
vault.go.memstats.heap.objects
(gauge)
Number of allocated objects.
vault.go.memstats.heap.released.bytes
(gauge)
Number of heap bytes released to OS.
vault.go.memstats.heap.sys.bytes
(gauge)
Number of heap bytes obtained from system.
vault.go.memstats.last.gc.time.seconds
(gauge)
Number of seconds since 1970 of last garbage collection.
vault.go.memstats.lookups.total
(count)
Total number of pointer lookups.
vault.go.memstats.mallocs.total
(count)
Total number of mallocs.
vault.go.memstats.mcache.inuse.bytes
(gauge)
Number of bytes in use by mcache structures.
vault.go.memstats.mcache.sys.bytes
(gauge)
Number of bytes used for mcache structures obtained from system.
vault.go.memstats.mspan.inuse.bytes
(gauge)
Number of bytes in use by mspan structures.
vault.go.memstats.mspan.sys.bytes
(gauge)
Number of bytes used for mspan structures obtained from system.
vault.go.memstats.next.gc.bytes
(gauge)
Number of heap bytes when next garbage collection will take place.
vault.go.memstats.other.sys.bytes
(gauge)
Number of bytes used for other system allocations.
vault.go.memstats.stack.inuse.bytes
(gauge)
Number of bytes in use by the stack allocator.
vault.go.memstats.stack.sys.bytes
(gauge)
Number of bytes obtained from system for stack allocator.
vault.go.memstats.sys.bytes
(gauge)
Number of bytes obtained from system.
vault.go.threads
(gauge)
Number of OS threads created.
vault.is_leader
(gauge)
1 if leader 0 otherwise
vault.process.cpu.seconds.total
(count)
Total user and system CPU time spent in seconds.
vault.process.max.fds
(gauge)
Maximum number of open file descriptors.
vault.process.open.fds
(gauge)
Number of open file descriptors.
vault.process.resident_memory.bytes
(gauge)
Resident memory size in bytes.
vault.process.start_time.seconds
(gauge)
Start time of the process since unix epoch in seconds.
vault.process.virtual_memory.bytes
(gauge)
Virtual memory size in bytes.
vault.process.virtual_memory.max.bytes
(gauge)
Maximum amount of virtual memory available in bytes.
vault.vault.audit.log.request.count
(count)
Duration of time taken by all audit log requests across all audit log devices count
vault.vault.audit.log.request.quantile
(gauge)
Duration of time taken by all audit log requests across all audit log devices sum
Shown as millisecond
vault.vault.audit.log.request.sum
(gauge)
Duration of time taken by all audit log requests across all audit log devices
Shown as millisecond
vault.vault.audit.log.response.count
(count)
Duration of time taken by audit log responses across all audit log devices count
vault.vault.audit.log.response.quantile
(gauge)
Duration of time taken by audit log responses across all audit log devices quantile
Shown as millisecond
vault.vault.audit.log.response.sum
(gauge)
Duration of time taken by audit log responses across all audit log devices sum
Shown as millisecond
vault.vault.audit.log.request.failure
(count)
Number of audit log request failures
Shown as unit
vault.vault.audit.log.response.failure
(count)
Number of audit log response failures
Shown as unit
vault.vault.barrier.delete.count
(count)
Duration of time taken by DELETE operations at the barrier count
vault.vault.barrier.delete.quantile
(gauge)
Duration of time taken by DELETE operations at the barrier quantile
Shown as millisecond
vault.vault.barrier.delete.sum
(gauge)
Duration of time taken by DELETE operations at the barrier sum
Shown as millisecond
vault.vault.barrier.get.count
(count)
Duration of time taken by GET operations at the barrier count
vault.vault.barrier.get.quantile
(gauge)
Duration of time taken by GET operations at the barrier quantile
Shown as millisecond
vault.vault.barrier.get.sum
(gauge)
Duration of time taken by GET operations at the barrier sum
Shown as millisecond
vault.vault.barrier.put.count
(count)
Duration of time taken by PUT operations at the barrier count
vault.vault.barrier.put.quantile
(gauge)
Duration of time taken by PUT operations at the barrier quantile
Shown as millisecond
vault.vault.barrier.put.sum
(gauge)
Duration of time taken by PUT operations at the barrier sum
Shown as millisecond
vault.vault.barrier.list.count
(count)
Duration of time taken by LIST operations at the barrier count
vault.vault.barrier.list.quantile
(gauge)
Duration of time taken by LIST operations at the barrier quantile
Shown as millisecond
vault.vault.barrier.list.sum
(gauge)
Duration of time taken by LIST operations at the barrier sum
Shown as millisecond
vault.vault.core.check.token.count
(count)
Duration of time taken by token checks handled by Vault core count
vault.vault.core.check.token.quantile
(gauge)
Duration of time taken by token checks handled by Vault core quantile
Shown as millisecond
vault.vault.core.check.token.sum
(gauge)
Duration of time taken by token checks handled by Vault core sum
Shown as millisecond
vault.vault.core.fetch.acl_and_token.count
(count)
Duration of time taken by ACL and corresponding token entry fetches handled by Vault core count
vault.vault.core.fetch.acl_and_token.quantile
(gauge)
Duration of time taken by ACL and corresponding token entry fetches handled by Vault core quantile
Shown as millisecond
vault.vault.core.fetch.acl_and_token.sum
(gauge)
Duration of time taken by ACL and corresponding token entry fetches handled by Vault core sum
Shown as millisecond
vault.vault.core.handle.request.count
(count)
Duration of time taken by requests handled by Vault core count
vault.vault.core.handle.request.quantile
(gauge)
Duration of time taken by requests handled by Vault core quantile
Shown as millisecond
vault.vault.core.handle.request.sum
(gauge)
Duration of time taken by requests handled by Vault core sum
Shown as millisecond
vault.vault.core.handle.login_request.count
(count)
Duration of time taken by login requests handled by Vault core count
vault.vault.core.handle.login_request.quantile
(gauge)
Duration of time taken by login requests handled by Vault core quantile
Shown as millisecond
vault.vault.core.handle.login_request.sum
(gauge)
Duration of time taken by login requests handled by Vault core sum
Shown as millisecond
vault.vault.core.leadership.setup_failed.count
(count)
Duration of time taken by cluster leadership setup failures which have occurred in a highly available Vault cluster count
vault.vault.core.leadership.setup_failed.quantile
(gauge)
Duration of time taken by cluster leadership setup failures which have occurred in a highly available Vault cluster quantile
Shown as millisecond
vault.vault.core.leadership.setup_failed.sum
(gauge)
Duration of time taken by cluster leadership setup failures which have occurred in a highly available Vault cluster sum
Shown as millisecond
vault.vault.core.leadership.lost.count
(count)
Duration of time taken by cluster leadership losses which have occurred in a highly available Vault cluster count
vault.vault.core.leadership.lost.quantile
(gauge)
Duration of time taken by cluster leadership losses which have occurred in a highly available Vault cluster quantile
Shown as millisecond
vault.vault.core.leadership.lost.sum
(gauge)
Duration of time taken by cluster leadership losses which have occurred in a highly available Vault cluster sum
Shown as millisecond
vault.vault.core.post_unseal
(gauge)
Duration of time taken by post-unseal operations handled by Vault core
Shown as millisecond
vault.vault.core.pre_seal
(gauge)
Duration of time taken by pre-seal operations
Shown as millisecond
vault.vault.core.seal_with_request
(gauge)
Duration of time taken by requested seal operations
Shown as millisecond
vault.vault.core.seal
(gauge)
Duration of time taken by seal operations
Shown as millisecond
vault.vault.core.seal_internal
(gauge)
Duration of time taken by internal seal operations
Shown as millisecond
vault.vault.core.step_down.count
(count)
Duration of time taken by cluster leadership step downs count
vault.vault.core.step_down.quantile
(gauge)
Duration of time taken by cluster leadership step downs quantile
Shown as millisecond
vault.vault.core.step_down.sum
(gauge)
Duration of time taken by cluster leadership step downs sum
Shown as millisecond
vault.vault.core.unseal.count
(count)
Duration of time taken by unseal operations count
vault.vault.core.unseal.quantile
(gauge)
Duration of time taken by unseal operations quantile
Shown as millisecond
vault.vault.core.unseal.sum
(gauge)
Duration of time taken by unseal operations sum
Shown as millisecond
vault.vault.expire.fetch.lease.times.count
(count)
Time taken to fetch lease times count
vault.vault.expire.fetch.lease.times.quantile
(gauge)
Time taken to fetch lease times quantile
Shown as millisecond
vault.vault.expire.fetch.lease.times.sum
(gauge)
Time taken to fetch lease times sum
Shown as millisecond
vault.vault.expire.fetch.lease.times.by_token.count
(count)
Time taken to fetch lease times by token count
vault.vault.expire.fetch.lease.times.by_token.quantile
(gauge)
Time taken to fetch lease times by token quantile
Shown as millisecond
vault.vault.expire.fetch.lease.times.by_token.sum
(gauge)
Time taken to fetch lease times by token sum
Shown as millisecond
vault.vault.expire.num_leases
(gauge)
vault_expire_num_leases
Shown as unit
vault.vault.expire.revoke.count
(count)
Time taken to revoke a token count
vault.vault.expire.revoke.quantile
(gauge)
Time taken to revoke a token quantile
Shown as millisecond
vault.vault.expire.revoke.sum
(gauge)
Time taken to revoke a token sum
Shown as millisecond
vault.vault.expire.revoke.force.count
(count)
Time taken to forcibly revoke a token count
vault.vault.expire.revoke.force.quantile
(gauge)
Time taken to forcibly revoke a token quantile
Shown as millisecond
vault.vault.expire.revoke.force.sum
(gauge)
Time taken to forcibly revoke a token sum
Shown as millisecond
vault.vault.expire.revoke.prefix.count
(count)
Time taken to revoke tokens on a prefix count
vault.vault.expire.revoke.prefix.quantile
(gauge)
Time taken to revoke tokens on a prefix quantile
Shown as millisecond
vault.vault.expire.revoke.prefix.sum
(gauge)
Time taken to revoke tokens on a prefix sum
Shown as millisecond
vault.vault.expire.revoke.by_token.count
(count)
Time taken to revoke all secrets issued with a given token count
vault.vault.expire.revoke.by_token.quantile
(gauge)
Time taken to revoke all secrets issued with a given token quantile
Shown as millisecond
vault.vault.expire.revoke.by_token.sum
(gauge)
Time taken to revoke all secrets issued with a given token sum
Shown as millisecond
vault.vault.expire.renew.count
(count)
Time taken to renew a lease count
vault.vault.expire.renew.quantile
(gauge)
Time taken to renew a lease quantile
Shown as millisecond
vault.vault.expire.renew.sum
(gauge)
Time taken to renew a lease sum
Shown as millisecond
vault.vault.expire.renew_token.count
(count)
Time taken to renew a token which does not need to invoke a logical backend count
vault.vault.expire.renew_token.quantile
(gauge)
Time taken to renew a token which does not need to invoke a logical backend quantile
Shown as millisecond
vault.vault.expire.renew_token.sum
(gauge)
Time taken to renew a token which does not need to invoke a logical backend sum
Shown as millisecond
vault.vault.expire.register.count
(count)
Time taken for register operations count
vault.vault.expire.register.quantile
(gauge)
Time taken for register operations quantile
Shown as millisecond
vault.vault.expire.register.sum
(gauge)
Time taken for register operations sum
Shown as millisecond
vault.vault.expire.register.auth.count
(count)
Time taken for register authentication operations which create lease entries without lease ID count
vault.vault.expire.register.auth.quantile
(gauge)
Time taken for register authentication operations which create lease entries without lease ID quantile
Shown as millisecond
vault.vault.expire.register.auth.sum
(gauge)
Time taken for register authentication operations which create lease entries without lease ID sum
Shown as millisecond
vault.vault.policy.get_policy.count
(count)
Time taken to get a policy count
vault.vault.policy.get_policy.quantile
(gauge)
Time taken to get a policy quantile
Shown as millisecond
vault.vault.policy.get_policy.sum
(gauge)
Time taken to get a policy sum
Shown as millisecond
vault.vault.policy.list_policies.count
(count)
Time taken to list policies count
vault.vault.policy.list_policies.quantile
(gauge)
Time taken to list policies quantile
Shown as millisecond
vault.vault.policy.list_policies.sum
(gauge)
Time taken to list policies sum
Shown as millisecond
vault.vault.policy.delete_policy.count
(count)
Time taken to delete policy count
vault.vault.policy.delete_policy.quantile
(gauge)
Time taken to delete policy quantile
Shown as millisecond
vault.vault.policy.delete_policy.sum
(gauge)
Time taken to delete policy sum
Shown as millisecond
vault.vault.policy.set_policy.count
(count)
Time to set a policy count
vault.vault.policy.set_policy.quantile
(gauge)
Time to set a policy quantile
Shown as millisecond
vault.vault.policy.set_policy.sum
(gauge)
Time to set a policy sum
Shown as millisecond
vault.vault.token.create.count
(count)
Time taken to create a token count
vault.vault.token.create.quantile
(gauge)
Time taken to create a token quantile
Shown as millisecond
vault.vault.token.create.sum
(gauge)
Time taken to create a token sum
Shown as millisecond
vault.vault.token.createAccessor.count
(count)
Time taken create a token accessor count
vault.vault.token.createAccessor.quantile
(gauge)
Time taken create a token accessor quantile
Shown as millisecond
vault.vault.token.createAccessor.sum
(gauge)
Time taken create a token accessor sum
Shown as millisecond
vault.vault.token.lookup.count
(count)
The time taken to look up a token count
vault.vault.token.lookup.quantile
(gauge)
The time taken to look up a token quantile
Shown as millisecond
vault.vault.token.lookup.sum
(gauge)
The time taken to look up a token sum
Shown as millisecond
vault.vault.token.revoke.count
(count)
The time taken to revoke a token count
vault.vault.token.revoke.quantile
(gauge)
The time taken to revoke a token quantile
Shown as millisecond
vault.vault.token.revoke.sum
(gauge)
The time taken to revoke a token sum
Shown as millisecond
vault.vault.token.revoke.tree.count
(count)
The time taken to revoke a token tree count
vault.vault.token.revoke.tree.quantile
(gauge)
The time taken to revoke a token tree quantile
Shown as millisecond
vault.vault.token.revoke.tree.sum
(gauge)
The time taken to revoke a token tree sum
Shown as millisecond
vault.vault.token.store.count
(count)
The time taken to store an updated token entry without writing to the secondary index count
vault.vault.token.store.quantile
(gauge)
The time taken to store an updated token entry without writing to the secondary index quantile
Shown as millisecond
vault.vault.token.store.sum
(gauge)
The time taken to store an updated token entry without writing to the secondary index sum
Shown as millisecond
vault.vault.rollback.attempt.auth.jwt.count
(count)
Time taken to perform a rollback operation for the JWT auth method count
vault.vault.rollback.attempt.auth.jwt.quantile
(gauge)
Time taken to perform a rollback operation for the JWT auth method quantile
Shown as millisecond
vault.vault.rollback.attempt.auth.jwt.sum
(gauge)
Time taken to perform a rollback operation for the JWT auth method sum
Shown as millisecond
vault.vault.rollback.attempt.auth.ldap.count
(count)
Time taken to perform a rollback operation for the LDAP auth method count
vault.vault.rollback.attempt.auth.ldap.quantile
(gauge)
Time taken to perform a rollback operation for the LDAP auth method quantile
Shown as millisecond
vault.vault.rollback.attempt.auth.ldap.sum
(gauge)
Time taken to perform a rollback operation for the LDAP auth method sum
Shown as millisecond
vault.vault.rollback.attempt.cubbyhole.count
(count)
Time taken to perform a rollback operation for the Cubbyhole secret backend count
vault.vault.rollback.attempt.cubbyhole.quantile
(gauge)
Time taken to perform a rollback operation for the Cubbyhole secret backend quantile
Shown as millisecond
vault.vault.rollback.attempt.cubbyhole.sum
(gauge)
Time taken to perform a rollback operation for the Cubbyhole secret backend sum
Shown as millisecond
vault.vault.rollback.attempt.secret.count
(count)
Time taken to perform a rollback operation for the K/V secret backend count
vault.vault.rollback.attempt.secret.quantile
(gauge)
Time taken to perform a rollback operation for the K/V secret backend quantile
Shown as millisecond
vault.vault.rollback.attempt.secret.sum
(gauge)
Time taken to perform a rollback operation for the K/V secret backend sum
Shown as millisecond
vault.vault.rollback.attempt.sys.count
(count)
Time taken to perform a rollback operation for the system backend count
vault.vault.rollback.attempt.sys.quantile
(gauge)
Time taken to perform a rollback operation for the system backend quantile
Shown as millisecond
vault.vault.rollback.attempt.sys.sum
(gauge)
Time taken to perform a rollback operation for the system backend sum
Shown as millisecond
vault.vault.rollback.attempt.auth.token.count
(count)
Time taken to perform a rollback operation for the token auth method count
vault.vault.rollback.attempt.auth.token.quantile
(gauge)
Time taken to perform a rollback operation for the token auth method quantile
Shown as millisecond
vault.vault.rollback.attempt.auth.token.sum
(gauge)
Time taken to perform a rollback operation for the token auth method sum
Shown as millisecond
vault.vault.rollback.attempt.identity.count
(count)
Time taken to perform a rollback operation for the identity backend count
vault.vault.rollback.attempt.identity.quantile
(gauge)
Time taken to perform a rollback operation for the identity backend quantile
Shown as millisecond
vault.vault.rollback.attempt.identity.sum
(gauge)
Time taken to perform a rollback operation for the identity backend sum
Shown as millisecond
vault.vault.route.rollback.auth.jwt.count
(count)
Time taken to perform a rollback operation for the JWT auth method count
vault.vault.route.rollback.auth.jwt.quantile
(gauge)
Time taken to perform a rollback operation for the JWT auth method quantile
Shown as millisecond
vault.vault.route.rollback.auth.jwt.sum
(gauge)
Time taken to perform a rollback operation for the JWT auth method sum
Shown as millisecond
vault.vault.route.rollback.auth.ldap.count
(count)
Time taken to perform a rollback operation for the LDAP auth method count
vault.vault.route.rollback.auth.ldap.quantile
(gauge)
Time taken to perform a rollback operation for the LDAP auth method quantile
Shown as millisecond
vault.vault.route.rollback.auth.ldap.sum
(gauge)
Time taken to perform a rollback operation for the LDAP auth method sum
Shown as millisecond
vault.vault.route.rollback.auth.token.count
(count)
Time taken to perform a route rollback operation for the token auth method count
vault.vault.route.rollback.auth.token.quantile
(gauge)
Time taken to perform a route rollback operation for the token auth method quantile
Shown as millisecond
vault.vault.route.rollback.auth.token.sum
(gauge)
Time taken to perform a route rollback operation for the token auth method sum
Shown as millisecond
vault.vault.route.rollback.cubbyhole.count
(count)
Time taken to perform a route rollback operation for the Cubbyhole secret backend count
vault.vault.route.rollback.cubbyhole.quantile
(gauge)
Time taken to perform a route rollback operation for the Cubbyhole secret backend quantile
Shown as millisecond
vault.vault.route.rollback.cubbyhole.sum
(gauge)
Time taken to perform a route rollback operation for the Cubbyhole secret backend sum
Shown as millisecond
vault.vault.route.rollback.identity.count
(count)
Time taken to perform a route rollback operation for the identity backend count
vault.vault.route.rollback.identity.quantile
(gauge)
Time taken to perform a route rollback operation for the identity backend quantile
Shown as millisecond
vault.vault.route.rollback.identity.sum
(gauge)
Time taken to perform a route rollback operation for the identity backend sum
Shown as millisecond
vault.vault.route.rollback.sys.count
(count)
Time taken to perform a route rollback operation for the system backend count
vault.vault.route.rollback.sys.quantile
(gauge)
Time taken to perform a route rollback operation for the system backend quantile
Shown as millisecond
vault.vault.route.rollback.sys.sum
(gauge)
Time taken to perform a route rollback operation for the system backend sum
Shown as millisecond
vault.vault.route.rollback.secret.count
(count)
Time taken to perform a route rollback operation for the K/V secret backend count
vault.vault.route.rollback.secret.quantile
(gauge)
Time taken to perform a route rollback operation for the K/V secret backend quantile
Shown as millisecond
vault.vault.route.rollback.secret.sum
(gauge)
Time taken to perform a route rollback operation for the K/V secret backend sum
Shown as millisecond
vault.vault.merkle.flushdirty.count
(count)
Time taken flush any dirty pages to cold storage count
vault.vault.merkle.flushdirty.quantile
(gauge)
Time taken flush any dirty pages to cold storage quantile
Shown as millisecond
vault.vault.merkle.flushdirty.sum
(gauge)
Time taken flush any dirty pages to cold storage sum
Shown as millisecond
vault.vault.merkle.savecheckpoint.count
(count)
Time taken to save the checkpoint count
vault.vault.merkle.savecheckpoint.quantile
(gauge)
Time taken to save the checkpoint quantile
Shown as millisecond
vault.vault.merkle.savecheckpoint.sum
(gauge)
Time taken to save the checkpoint sum
Shown as millisecond
vault.vault.wal.deletewals.count
(count)
Time taken to delete a Write Ahead Log (WAL) count
vault.vault.wal.deletewals.quantile
(gauge)
Time taken to delete a Write Ahead Log (WAL) quantile
Shown as millisecond
vault.vault.wal.deletewals.sum
(gauge)
Time taken to delete a Write Ahead Log (WAL) sum
Shown as millisecond
vault.vault.wal.gc.deleted
(count)
Number of Write Ahead Logs (WAL) deleted during each garbage collection run
Shown as unit
vault.vault.wal.gc.total
(count)
Total Number of Write Ahead Logs (WAL) on disk
Shown as unit
vault.vault.wal.loadWAL.count
(count)
Time taken to load a Write Ahead Log (WAL) count
vault.vault.wal.loadWAL.quantile
(gauge)
Time taken to load a Write Ahead Log (WAL) quantile
Shown as millisecond
vault.vault.wal.loadWAL.sum
(gauge)
Time taken to load a Write Ahead Log (WAL) sum
Shown as millisecond
vault.vault.wal.persistwals.count
(count)
Time taken to persist a Write Ahead Log (WAL) count
vault.vault.wal.persistwals.quantile
(gauge)
Time taken to persist a Write Ahead Log (WAL) quantile
Shown as millisecond
vault.vault.wal.persistwals.sum
(gauge)
Time taken to persist a Write Ahead Log (WAL) sum
Shown as millisecond
vault.vault.wal.flushready.count
(count)
Time taken to flush a ready Write Ahead Log (WAL) to storage count
vault.vault.wal.flushready.quantile
(gauge)
Time taken to flush a ready Write Ahead Log (WAL) to storage quantile
Shown as millisecond
vault.vault.wal.flushready.sum
(gauge)
Time taken to flush a ready Write Ahead Log (WAL) to storage sum
Shown as millisecond
vault.vault.runtime.alloc.bytes
(gauge)
Number of bytes allocated by the Vault process
Shown as byte
vault.vault.runtime.free.count
(gauge)
Number of freed objects
Shown as object
vault.vault.runtime.heap.objects
(gauge)
Number of objects on the heap
Shown as object
vault.vault.runtime.malloc.count
(gauge)
Cumulative count of allocated heap objects
Shown as object
vault.vault.runtime.num_goroutines
(gauge)
Number of goroutines
Shown as unit
vault.vault.runtime.sys.bytes
(gauge)
Number of bytes allocated to Vault
Shown as byte
vault.vault.runtime.gc.pause_ns.count
(count)
The garbage collector pause time since Vault was last started count
vault.vault.runtime.gc.pause_ns.quantile
(gauge)
The garbage collector pause time since Vault was last started quantile
Shown as millisecond
vault.vault.runtime.gc.pause_ns.sum
(gauge)
The garbage collector pause time since Vault was last started sum
Shown as millisecond
vault.vault.runtime.total.gc.pause_ns
(gauge)
The total garbage collector pause time since Vault was last started
Shown as millisecond
vault.vault.runtime.total.gc.runs
(gauge)
Total number of garbage collection runs since Vault was last started
Shown as operation
vault.logshipper.streamWALs.missing_guard
(count)
Number of incidences where the starting Merkle Tree index used to begin streaming WAL entries is not matched/found
Shown as unit
vault.logshipper.streamWALs.guard_found
(count)
Number of incidences where the starting Merkle Tree index used to begin streaming WAL entries is matched/found
Shown as unit
vault.replication.fetchRemoteKeys.count
(count)
Time taken to fetch keys from a remote cluster participating in replication prior to Merkle Tree based delta generation count
vault.replication.fetchRemoteKeys.quantile
(gauge)
Time taken to fetch keys from a remote cluster participating in replication prior to Merkle Tree based delta generation quantile
Shown as millisecond
vault.replication.fetchRemoteKeys.sum
(gauge)
Time taken to fetch keys from a remote cluster participating in replication prior to Merkle Tree based delta generation sum
Shown as millisecond
vault.replication.merkleDiff.count
(count)
Time taken to perform a Merkle Tree based delta generation between the clusters participating in replication count
vault.replication.merkleDiff.quantile
(gauge)
Time taken to perform a Merkle Tree based delta generation between the clusters participating in replication quantile
Shown as millisecond
vault.replication.merkleDiff.sum
(gauge)
Time taken to perform a Merkle Tree based delta generation between the clusters participating in replication sum
Shown as millisecond
vault.replication.merkleSync.count
(count)
Time taken to perform a Merkle Tree based synchronization using the last delta generated between the clusters participating in replication count
vault.replication.merkleSync.quantile
(gauge)
Time taken to perform a Merkle Tree based synchronization using the last delta generated between the clusters participating in replication quantile
Shown as millisecond
vault.replication.merkleSync.sum
(gauge)
Time taken to perform a Merkle Tree based synchronization using the last delta generated between the clusters participating in replication sum
Shown as millisecond
vault.replication.merkle.commit_index
(gauge)
The last committed index in the Merkle Tree
Shown as index
vault.replication.wal.last_wal
(gauge)
The index of the last WAL
Shown as index
vault.replication.wal.last_dr_wal
(gauge)
The index of the last DR WAL
Shown as index
vault.replication.wal.last_performance_wal
(gauge)
The index of the last Performance WAL
Shown as index
vault.replication.fsm.last_remote_wal
(gauge)
The index of the last remote WAL
Shown as index
vault.replication.rpc.server.auth_request.count
(count)
Duration of time taken by auth request count
vault.replication.rpc.server.auth_request.quantile
(gauge)
Duration of time taken by auth request quantile
Shown as millisecond
vault.replication.rpc.server.auth_request.sum
(gauge)
Duration of time taken by auth request sum
Shown as millisecond
vault.replication.rpc.server.bootstrap_request.count
(count)
Duration of time taken by bootstrap request count
vault.replication.rpc.server.bootstrap_request.quantile
(gauge)
Duration of time taken by bootstrap request quantile
Shown as millisecond
vault.replication.rpc.server.bootstrap_request.sum
(gauge)
Duration of time taken by bootstrap request sum
Shown as millisecond
vault.replication.rpc.server.conflicting_pages_request.count
(count)
Duration of time taken by conflicting pages request count
vault.replication.rpc.server.conflicting_pages_request.quantile
(gauge)
Duration of time taken by conflicting pages request quantile
Shown as millisecond
vault.replication.rpc.server.conflicting_pages_request.sum
(gauge)
Duration of time taken by conflicting pages request sum
Shown as millisecond
vault.replication.rpc.server.echo.count
(count)
Duration of time taken by echo count
vault.replication.rpc.server.echo.quantile
(gauge)
Duration of time taken by echo quantile
Shown as millisecond
vault.replication.rpc.server.echo.sum
(gauge)
Duration of time taken by echo sum
Shown as millisecond
vault.replication.rpc.server.forwarding_request.count
(count)
Duration of time taken by forwarding request count
vault.replication.rpc.server.forwarding_request.quantile
(gauge)
Duration of time taken by forwarding request quantile
Shown as millisecond
vault.replication.rpc.server.forwarding_request.sum
(gauge)
Duration of time taken by forwarding request sum
Shown as millisecond
vault.replication.rpc.server.guard_hash_request.count
(count)
Duration of time taken by guard hash request count
vault.replication.rpc.server.guard_hash_request.quantile
(gauge)
Duration of time taken by guard hash request quantile
Shown as millisecond
vault.replication.rpc.server.guard_hash_request.sum
(gauge)
Duration of time taken by guard hash request sum
Shown as millisecond
vault.replication.rpc.server.persist_alias_request.count
(count)
Duration of time talen by persist alias request count
vault.replication.rpc.server.persist_alias_request.quantile
(gauge)
Duration of time talen by persist alias request quantile
Shown as millisecond
vault.replication.rpc.server.persist_alias_request.sum
(gauge)
Duration of time talen by persist alias request sum
Shown as millisecond
vault.replication.rpc.server.persist_persona_request.count
(count)
Duration of time taken by persist persona request count
vault.replication.rpc.server.persist_persona_request.quantile
(gauge)
Duration of time taken by persist persona request quantile
Shown as millisecond
vault.replication.rpc.server.persist_persona_request.sum
(gauge)
Duration of time taken by persist persona request sum
Shown as millisecond
vault.replication.rpc.server.stream_wals_request.count
(count)
Duration of time taken by stream wals request count
vault.replication.rpc.server.stream_wals_request.quantile
(gauge)
Duration of time taken by stream wals request quantile
Shown as millisecond
vault.replication.rpc.server.stream_wals_request.sum
(gauge)
Duration of time taken by stream wals request sum
Shown as millisecond
vault.replication.rpc.server.sub_page_hashes_request.count
(count)
Duration of time taken by sub page hashes request count
vault.replication.rpc.server.sub_page_hashes_request.quantile
(gauge)
Duration of time taken by sub page hashes request quantile
Shown as millisecond
vault.replication.rpc.server.sub_page_hashes_request.sum
(gauge)
Duration of time taken by sub page hashes request sum
Shown as millisecond
vault.replication.rpc.server.sync_counter_request.count
(count)
Duration of time taken by sync counter request count
vault.replication.rpc.server.sync_counter_request.quantile
(gauge)
Duration of time taken by sync counter request quantile
Shown as millisecond
vault.replication.rpc.server.sync_counter_request.sum
(gauge)
Duration of time taken by sync counter request sum
Shown as millisecond
vault.replication.rpc.server.upsert_group_request.count
(count)
Duration of time taken by upsert group request count
vault.replication.rpc.server.upsert_group_request.quantile
(gauge)
Duration of time taken by upsert group request quantile
Shown as millisecond
vault.replication.rpc.server.upsert_group_request.sum
(gauge)
Duration of time taken by upsert group request sum
Shown as millisecond
vault.replication.rpc.client.conflicting_pages.count
(count)
Duration of time taken by client conflicting pages request count
vault.replication.rpc.client.conflicting_pages.quantile
(gauge)
Duration of time taken by client conflicting pages request quantile
Shown as millisecond
vault.replication.rpc.client.conflicting_pages.sum
(gauge)
Duration of time taken by client conflicting pages request sum
Shown as millisecond
vault.replication.rpc.client.fetch_keys.count
(count)
Duration of time taken by client fetch keys request count
vault.replication.rpc.client.fetch_keys.quantile
(gauge)
Duration of time taken by client fetch keys request quantile
Shown as millisecond
vault.replication.rpc.client.fetch_keys.sum
(gauge)
Duration of time taken by client fetch keys request sum
Shown as millisecond
vault.replication.rpc.client.forward.count
(count)
Duration of time taken by client forward request count
vault.replication.rpc.client.forward.quantile
(gauge)
Duration of time taken by client forward request quantile
Shown as millisecond
vault.replication.rpc.client.forward.sum
(gauge)
Duration of time taken by client forward request sum
Shown as millisecond
vault.replication.rpc.client.guard_hash.count
(count)
Duration of time taken by client guard hash request count
vault.replication.rpc.client.guard_hash.quantile
(gauge)
Duration of time taken by client guard hash request quantile
Shown as millisecond
vault.replication.rpc.client.guard_hash.sum
(gauge)
Duration of time taken by client guard hash request sum
Shown as millisecond
vault.replication.rpc.client.persist_alias.count
(count)
Duration of time taken by client persist alias request count
vault.replication.rpc.client.persist_alias.quantile
(gauge)
Duration of time taken by client persist alias request quantile
Shown as millisecond
vault.replication.rpc.client.persist_alias.sum
(gauge)
Duration of time taken by client persist alias request sum
Shown as millisecond
vault.replication.rpc.client.register_auth.count
(count)
Duration of time taken by client register auth request count
vault.replication.rpc.client.register_auth.quantile
(gauge)
Duration of time taken by client register auth request quantile
Shown as millisecond
vault.replication.rpc.client.register_auth.sum
(gauge)
Duration of time taken by client register auth request sum
Shown as millisecond
vault.replication.rpc.client.register_lease.count
(count)
Duration of time taken by client register lease request count
vault.replication.rpc.client.register_lease.quantile
(gauge)
Duration of time taken by client register lease request quantile
Shown as millisecond
vault.replication.rpc.client.register_lease.sum
(gauge)
Duration of time taken by client register lease request sum
Shown as millisecond
vault.replication.rpc.client.stream_wals.count
(count)
Duration of time taken by client stream wals request count
vault.replication.rpc.client.stream_wals.quantile
(gauge)
Duration of time taken by client stream wals request quantile
Shown as millisecond
vault.replication.rpc.client.stream_wals.sum
(gauge)
Duration of time taken by client stream wals request sum
Shown as millisecond
vault.replication.rpc.client.sub_page_hashes.count
(count)
Duration of time taken by client sub page hashes request count
vault.replication.rpc.client.sub_page_hashes.quantile
(gauge)
Duration of time taken by client sub page hashes request quantile
Shown as millisecond
vault.replication.rpc.client.sub_page_hashes.sum
(gauge)
Duration of time taken by client sub page hashes request sum
Shown as millisecond
vault.replication.rpc.client.sync_counter.count
(count)
Duration of time taken by client sync counter request count
vault.replication.rpc.client.sync_counter.quantile
(gauge)
Duration of time taken by client sync counter request quantile
Shown as millisecond
vault.replication.rpc.client.sync_counter.sum
(gauge)
Duration of time taken by client sync counter request sum
Shown as millisecond
vault.replication.rpc.client.upsert_group.count
(count)
Duration of time taken by client upsert group request count
vault.replication.rpc.client.upsert_group.quantile
(gauge)
Duration of time taken by client upsert group request quantile
Shown as millisecond
vault.replication.rpc.client.upsert_group.sum
(gauge)
Duration of time taken by client upsert group request sum
Shown as millisecond
vault.replication.rpc.client.wrap_in_cubbyhole.count
(count)
Duration of time taken by client wrap in cubbyhole request
vault.replication.rpc.client.wrap_in_cubbyhole.quantile
(gauge)
Duration of time taken by client wrap in cubbyhole request
Shown as millisecond
vault.replication.rpc.client.wrap_in_cubbyhole.sum
(gauge)
Duration of time taken by client wrap in cubbyhole request
Shown as millisecond
vault.replication.rpc.dr.server.echo.count
(count)
Duration of time taken by DR echo request count
vault.replication.rpc.dr.server.echo.quantile
(gauge)
Duration of time taken by DR echo request quantile
Shown as millisecond
vault.replication.rpc.dr.server.echo.sum
(gauge)
Duration of time taken by DR echo request sum
Shown as millisecond
vault.replication.rpc.dr.server.fetch_keys_request.count
(count)
Duration of time taken by DR fetch keys request count
vault.replication.rpc.dr.server.fetch_keys_request.quantile
(gauge)
Duration of time taken by DR fetch keys request quantile
Shown as millisecond
vault.replication.rpc.dr.server.fetch_keys_request.sum
(gauge)
Duration of time taken by DR fetch keys request sum
Shown as millisecond
vault.replication.rpc.standby.server.echo.count
(count)
Duration of time taken by standby echo request count
vault.replication.rpc.standby.server.echo.quantile
(gauge)
Duration of time taken by standby echo request quantile
Shown as millisecond
vault.replication.rpc.standby.server.echo.sum
(gauge)
Duration of time taken by standby echo request sum
Shown as millisecond
vault.replication.rpc.standby.server.register_auth_request.count
(count)
Duration of time taken by standby register auth request count
vault.replication.rpc.standby.server.register_auth_request.quantile
(gauge)
Duration of time taken by standby register auth request quantile
Shown as millisecond
vault.replication.rpc.standby.server.register_auth_request.sum
(gauge)
Duration of time taken by standby register auth request sum
Shown as millisecond
vault.replication.rpc.standby.server.register_lease_request.count
(count)
Duration of time taken by standby register lease request count
vault.replication.rpc.standby.server.register_lease_request.quantile
(gauge)
Duration of time taken by standby register lease request quantile
Shown as millisecond
vault.replication.rpc.standby.server.register_lease_request.sum
(gauge)
Duration of time taken by standby register lease request sum
Shown as millisecond
vault.replication.rpc.standby.server.wrap_token_request.count
(count)
Duration of time taken by standby wrap token request count
vault.replication.rpc.standby.server.wrap_token_request.quantile
(gauge)
Duration of time taken by standby wrap token request quantile
Shown as millisecond
vault.replication.rpc.standby.server.wrap_token_request.sum
(gauge)
Duration of time taken by standby wrap token request sum
Shown as millisecond
vault.database.Initialize.count
(count)
Time taken to initialize a database secret engine across all database secrets engines count
vault.database.Initialize.quantile
(gauge)
Time taken to initialize a database secret engine across all database secrets engines quantile
Shown as millisecond
vault.database.Initialize.sum
(gauge)
Time taken to initialize a database secret engine across all database secrets engines sum
Shown as millisecond
vault.database.Initialize.error
(count)
Number of databases secrets engine initialization operation errors across all database secrets engines
Shown as error
vault.database.Close.count
(count)
Time taken to close a database secret engine across all database secrets engines count
vault.database.Close.quantile
(gauge)
Time taken to close a database secret engine across all database secrets engines quantile
Shown as millisecond
vault.database.Close.sum
(gauge)
Time taken to close a database secret engine across all database secrets engines sum
Shown as millisecond
vault.database.Close.error
(count)
Number of database secrets engine close operation errors across all database secrets engines
Shown as error
vault.database.CreateUser.count
(count)
Time taken to create a user across all database secrets engine count
vault.database.CreateUser.quantile
(gauge)
Time taken to create a user across all database secrets engine quantile
Shown as millisecond
vault.database.CreateUser.sum
(gauge)
Time taken to create a user across all database secrets engine sum
Shown as millisecond
vault.database.CreateUser.error
(count)
Number of user creation operation errors across all database secrets engines
Shown as error
vault.database.RenewUser.count
(count)
Time taken to renew a user across all database secrets engines count
vault.database.RenewUser.quantile
(gauge)
Time taken to renew a user across all database secrets engines quantile
Shown as millisecond
vault.database.RenewUser.sum
(gauge)
Time taken to renew a user across all database secrets engines sum
Shown as millisecond
vault.database.RenewUser.error
(count)
Number of user renewal operation errors across all database secrets engines
Shown as error
vault.database.RevokeUser.count
(count)
Time taken to revoke a user across all database secrets engines count
vault.database.RevokeUser.quantile
(gauge)
Time taken to revoke a user across all database secrets engines quantile
Shown as millisecond
vault.database.RevokeUser.sum
(gauge)
Time taken to revoke a user across all database secrets engines sum
Shown as millisecond
vault.database.RevokeUser.error
(count)
Number of user revocation operation errors across all database secrets engines
Shown as error
vault.vault.azure.put.count
(count)
Duration of a PUT operation against Azure storage backend count
vault.vault.azure.put.quantile
(gauge)
Duration of a PUT operation against Azure storage backend quantile
Shown as millisecond
vault.vault.azure.put.sum
(gauge)
Duration of a PUT operation against Azure storage backend sum
Shown as millisecond
vault.vault.azure.get.count
(count)
Duration of a GET operation against the Azure storage backend count
vault.vault.azure.get.quantile
(gauge)
Duration of a GET operation against the Azure storage backend quantile
Shown as millisecond
vault.vault.azure.get.sum
(gauge)
Duration of a GET operation against the Azure storage backend sum
Shown as millisecond
vault.vault.azure.delete.count
(count)
Duration of a DELETE operation against the Azure storage backend count
vault.vault.azure.delete.quantile
(gauge)
Duration of a DELETE operation against the Azure storage backend quantile
Shown as millisecond
vault.vault.azure.delete.sum
(gauge)
Duration of a DELETE operation against the Azure storage backend sum
Shown as millisecond
vault.vault.azure.list.count
(count)
Duration of a LIST operation against the Azure storage backend count
vault.vault.azure.list.quantile
(gauge)
Duration of a LIST operation against the Azure storage backend quantile
Shown as millisecond
vault.vault.azure.list.sum
(gauge)
Duration of a LIST operation against the Azure storage backend sum
Shown as millisecond
vault.vault.cassandra.put.count
(count)
Duration of a PUT operation against the Cassandra storage backend count
vault.vault.cassandra.put.quantile
(gauge)
Duration of a PUT operation against the Cassandra storage backend quantile
Shown as millisecond
vault.vault.cassandra.put.sum
(gauge)
Duration of a PUT operation against the Cassandra storage backend sum
Shown as millisecond
vault.vault.cassandra.get.count
(count)
Duration of a GET operation against the Cassandra storage backend
vault.vault.cassandra.get.quantile
(gauge)
Duration of a GET operation against the Cassandra storage backend
Shown as millisecond
vault.vault.cassandra.get.sum
(gauge)
Duration of a GET operation against the Cassandra storage backend
Shown as millisecond
vault.vault.cassandra.delete.count
(count)
Duration of a DELETE operation against the Cassandra storage backend count
vault.vault.cassandra.delete.quantile
(gauge)
Duration of a DELETE operation against the Cassandra storage backend quantile
Shown as millisecond
vault.vault.cassandra.delete.sum
(gauge)
Duration of a DELETE operation against the Cassandra storage backend sum
Shown as millisecond
vault.vault.cassandra.list.count
(count)
Duration of a LIST operation against the Cassandra storage backend count
vault.vault.cassandra.list.quantile
(gauge)
Duration of a LIST operation against the Cassandra storage backend quantile
Shown as millisecond
vault.vault.cassandra.list.sum
(gauge)
Duration of a LIST operation against the Cassandra storage backend sum
Shown as millisecond
vault.vault.cockroachdb.put.count
(count)
Duration of a PUT operation against the CockroachDB storage backend count
vault.vault.cockroachdb.put.quantile
(gauge)
Duration of a PUT operation against the CockroachDB storage backend quantile
Shown as millisecond
vault.vault.cockroachdb.put.sum
(gauge)
Duration of a PUT operation against the CockroachDB storage backend sum
Shown as millisecond
vault.vault.cockroachdb.get.count
(count)
Duration of a GET operation against the CockroachDB storage backend count
vault.vault.cockroachdb.get.quantile
(gauge)
Duration of a GET operation against the CockroachDB storage backend quantile
Shown as millisecond
vault.vault.cockroachdb.get.sum
(gauge)
Duration of a GET operation against the CockroachDB storage backend sum
Shown as millisecond
vault.vault.cockroachdb.delete.count
(count)
Duration of a DELETE operation against the CockroachDB storage backend count
vault.vault.cockroachdb.delete.quantile
(gauge)
Duration of a DELETE operation against the CockroachDB storage backend quantile
Shown as millisecond
vault.vault.cockroachdb.delete.sum
(gauge)
Duration of a DELETE operation against the CockroachDB storage backend sum
Shown as millisecond
vault.vault.cockroachdb.list.count
(count)
Duration of a LIST operation against the CockroachDB storage backend count
vault.vault.cockroachdb.list.quantile
(gauge)
Duration of a LIST operation against the CockroachDB storage backend quantile
Shown as millisecond
vault.vault.cockroachdb.list.sum
(gauge)
Duration of a LIST operation against the CockroachDB storage backend sum
Shown as millisecond
vault.vault.consul.put.count
(count)
Duration of a PUT operation against the Consul storage backend count
vault.vault.consul.put.sum
(gauge)
Duration of a PUT operation against the Consul storage backend sum
Shown as millisecond
vault.vault.consul.get.count
(count)
Duration of a GET operation against the Consul storage backend count
vault.vault.consul.get.quantile
(gauge)
Duration of a GET operation against the Consul storage backend quantile
Shown as millisecond
vault.vault.consul.get.sum
(gauge)
Duration of a GET operation against the Consul storage backend sum
Shown as millisecond
vault.vault.consul.delete.count
(count)
Duration of DELETE operation against the Consul storage backend count
vault.vault.consul.delete.quantile
(gauge)
Duration of DELETE operation against the Consul storage backend quantile
Shown as millisecond
vault.vault.consul.delete.sum
(gauge)
Duration of DELETE operation against the Consul storage backend sum
Shown as millisecond
vault.vault.consul.list.count
(count)
Duration of a LIST operation against the Consul storage backend count
vault.vault.consul.list.quantile
(gauge)
Duration of a LIST operation against the Consul storage backend quantile
Shown as millisecond
vault.vault.consul.list.sum
(gauge)
Duration of a LIST operation against the Consul storage backend sum
Shown as millisecond
vault.vault.couchdb.put.count
(count)
Duration of a PUT operation against the CouchDB storage backend count
vault.vault.couchdb.put.quantile
(gauge)
Duration of a PUT operation against the CouchDB storage backend quantile
Shown as millisecond
vault.vault.couchdb.put.sum
(gauge)
Duration of a PUT operation against the CouchDB storage backend sum
Shown as millisecond
vault.vault.couchdb.get.count
(count)
Duration of a GET operation against the CouchDB storage backend count
vault.vault.couchdb.get.quantile
(gauge)
Duration of a GET operation against the CouchDB storage backend quantile
Shown as millisecond
vault.vault.couchdb.get.sum
(gauge)
Duration of a GET operation against the CouchDB storage backend sum
Shown as millisecond
vault.vault.couchdb.delete.count
(count)
Duration of a DELETE operation against the CouchDB storage backend count
vault.vault.couchdb.delete.quantile
(gauge)
Duration of a DELETE operation against the CouchDB storage backend quantile
Shown as millisecond
vault.vault.couchdb.delete.sum
(gauge)
Duration of a DELETE operation against the CouchDB storage backend sum
Shown as millisecond
vault.vault.couchdb.list.count
(count)
Duration of a LIST operation against the CouchDB storage backend count
vault.vault.couchdb.list.quantile
(gauge)
Duration of a LIST operation against the CouchDB storage backend quantile
Shown as millisecond
vault.vault.couchdb.list.sum
(gauge)
Duration of a LIST operation against the CouchDB storage backend sum
Shown as millisecond
vault.vault.dynamodb.put.count
(count)
Duration of a PUT operation against the DynamoDB storage backend count
vault.vault.dynamodb.put.quantile
(gauge)
Duration of a PUT operation against the DynamoDB storage backend quantile
Shown as millisecond
vault.vault.dynamodb.put.sum
(gauge)
Duration of a PUT operation against the DynamoDB storage backend sum
Shown as millisecond
vault.vault.dynamodb.get.count
(count)
Duration of a GET operation against the DynamoDB storage backend count
vault.vault.dynamodb.get.quantile
(gauge)
Duration of a GET operation against the DynamoDB storage backend quantile
Shown as millisecond
vault.vault.dynamodb.get.sum
(gauge)
Duration of a GET operation against the DynamoDB storage backend sum
Shown as millisecond
vault.vault.dynamodb.delete.count
(count)
Duration of a DELETE operation against the DynamoDB storage backend count
vault.vault.dynamodb.delete.quantile
(gauge)
Duration of a DELETE operation against the DynamoDB storage backend quantile
Shown as millisecond
vault.vault.dynamodb.delete.sum
(gauge)
Duration of a DELETE operation against the DynamoDB storage backend sum
Shown as millisecond
vault.vault.dynamodb.list.count
(count)
Duration of a LIST operation against the DynamoDB storage backend count
vault.vault.dynamodb.list.quantile
(gauge)
Duration of a LIST operation against the DynamoDB storage backend quantile
Shown as millisecond
vault.vault.dynamodb.list.sum
(gauge)
Duration of a LIST operation against the DynamoDB storage backend sum
Shown as millisecond
vault.vault.etcd.put.count
(count)
Duration of a PUT operation against the etcd storage backend
vault.vault.etcd.put.quantile
(gauge)
Duration of a PUT operation against the etcd storage backend
Shown as millisecond
vault.vault.etcd.put.sum
(gauge)
Duration of a PUT operation against the etcd storage backend
Shown as millisecond
vault.vault.etcd.get.count
(count)
Duration of a GET operation against the etcd storage backend count
vault.vault.etcd.get.quantile
(gauge)
Duration of a GET operation against the etcd storage backend quantile
Shown as millisecond
vault.vault.etcd.get.sum
(gauge)
Duration of a GET operation against the etcd storage backend sum
Shown as millisecond
vault.vault.etcd.delete.count
(count)
Duration of a DELETE operation against the etcd storage backend count
vault.vault.etcd.delete.quantile
(gauge)
Duration of a DELETE operation against the etcd storage backend quantile
Shown as millisecond
vault.vault.etcd.delete.sum
(gauge)
Duration of a DELETE operation against the etcd storage backend sum
Shown as millisecond
vault.vault.etcd.list.count
(count)
Duration of a LIST operation against the etcd storage backend count
vault.vault.etcd.list.quantile
(gauge)
Duration of a LIST operation against the etcd storage backend quantile
Shown as millisecond
vault.vault.etcd.list.sum
(gauge)
Duration of a LIST operation against the etcd storage backend sum
Shown as millisecond
vault.vault.gcs.put.count
(count)
Duration of a PUT operation against the Google Cloud Storage storage backend count
vault.vault.gcs.put.quantile
(gauge)
Duration of a PUT operation against the Google Cloud Storage storage backend quantile
Shown as millisecond
vault.vault.gcs.put.sum
(gauge)
Duration of a PUT operation against the Google Cloud Storage storage backend sum
Shown as millisecond
vault.vault.gcs.get.count
(count)
Duration of a GET operation against the Google Cloud Storage storage backend count
vault.vault.gcs.get.quantile
(gauge)
Duration of a GET operation against the Google Cloud Storage storage backend quantile
Shown as millisecond
vault.vault.gcs.get.sum
(gauge)
Duration of a GET operation against the Google Cloud Storage storage backend sum
Shown as millisecond
vault.vault.gcs.delete.count
(count)
Duration of a DELETE operation against the Google Cloud Storage storage backend count
vault.vault.gcs.delete.quantile
(gauge)
Duration of a DELETE operation against the Google Cloud Storage storage backend quantile
Shown as millisecond
vault.vault.gcs.delete.sum
(gauge)
Duration of a DELETE operation against the Google Cloud Storage storage backend sum
Shown as millisecond
vault.vault.gcs.list.count
(count)
Duration of a LIST operation against the Google Cloud Storage storage backend count
vault.vault.gcs.list.quantile
(gauge)
Duration of a LIST operation against the Google Cloud Storage storage backend quantile
Shown as millisecond
vault.vault.gcs.list.sum
(gauge)
Duration of a LIST operation against the Google Cloud Storage storage backend sum
Shown as millisecond
vault.vault.gcs.lock.unlock.count
(count)
Duration of an UNLOCK operation against the Google Cloud Storage storage backend in HA mode count
vault.vault.gcs.lock.unlock.quantile
(gauge)
Duration of an UNLOCK operation against the Google Cloud Storage storage backend in HA mode quantile
Shown as millisecond
vault.vault.gcs.lock.unlock.sum
(gauge)
Duration of an UNLOCK operation against the Google Cloud Storage storage backend in HA mode sum
Shown as millisecond
vault.vault.gcs.lock.lock.count
(count)
Duration of a LOCK operation against the Google Cloud Storage storage backend in HA mode count
vault.vault.gcs.lock.lock.quantile
(gauge)
Duration of a LOCK operation against the Google Cloud Storage storage backend in HA mode quantile
Shown as millisecond
vault.vault.gcs.lock.lock.sum
(gauge)
Duration of a LOCK operation against the Google Cloud Storage storage backend in HA mode sum
Shown as millisecond
vault.vault.gcs.lock.value.count
(count)
Duration of a VALUE operation against the Google Cloud Storage storage backend in HA mode count
vault.vault.gcs.lock.value.quantile
(gauge)
Duration of a VALUE operation against the Google Cloud Storage storage backend in HA mode quantile
Shown as millisecond
vault.vault.gcs.lock.value.sum
(gauge)
Duration of a VALUE operation against the Google Cloud Storage storage backend in HA mode sum
Shown as millisecond
vault.vault.mssql.put.count
(count)
Duration of a PUT operation against the MS-SQL storage backend count
vault.vault.mssql.put.quantile
(gauge)
Duration of a PUT operation against the MS-SQL storage backend quantile
Shown as millisecond
vault.vault.mssql.put.sum
(gauge)
Duration of a PUT operation against the MS-SQL storage backend sum
Shown as millisecond
vault.vault.mssql.get.count
(count)
Duration of a GET operation against the MS-SQL storage backend count
vault.vault.mssql.get.quantile
(gauge)
Duration of a GET operation against the MS-SQL storage backend quantile
Shown as millisecond
vault.vault.mssql.get.sum
(gauge)
Duration of a GET operation against the MS-SQL storage backend sum
Shown as millisecond
vault.vault.mssql.delete.count
(count)
Duration of a GET operation against the MS-SQL storage backend count
vault.vault.mssql.delete.quantile
(gauge)
Duration of a GET operation against the MS-SQL storage backend quantile
Shown as millisecond
vault.vault.mssql.delete.sum
(gauge)
Duration of a GET operation against the MS-SQL storage backend sum
Shown as millisecond
vault.vault.mssql.list.count
(count)
Duration of a LIST operation against the MS-SQL storage backend count
vault.vault.mssql.list.quantile
(gauge)
Duration of a LIST operation against the MS-SQL storage backend quantile
Shown as millisecond
vault.vault.mssql.list.sum
(gauge)
Duration of a LIST operation against the MS-SQL storage backend sum
Shown as millisecond
vault.vault.mysql.put.count
(count)
Duration of a PUT operation against the MySQL storage backend count
vault.vault.mysql.put.quantile
(gauge)
Duration of a PUT operation against the MySQL storage backend quantile
Shown as millisecond
vault.vault.mysql.put.sum
(gauge)
Duration of a PUT operation against the MySQL storage backend sum
Shown as millisecond
vault.vault.mysql.get.count
(count)
Duration of a GET operation against the MySQL storage backend count
vault.vault.mysql.get.quantile
(gauge)
Duration of a GET operation against the MySQL storage backend quantile
Shown as millisecond
vault.vault.mysql.get.sum
(gauge)
Duration of a GET operation against the MySQL storage backend sum
Shown as millisecond
vault.vault.mysql.delete.count
(count)
Duration of a DELETE operation against the MySQL storage backend count
vault.vault.mysql.delete.quantile
(gauge)
Duration of a DELETE operation against the MySQL storage backend quantile
Shown as millisecond
vault.vault.mysql.delete.sum
(gauge)
Duration of a DELETE operation against the MySQL storage backend sum
Shown as millisecond
vault.vault.mysql.list.count
(count)
Duration of a LIST operation against the MySQL storage backend count
vault.vault.mysql.list.quantile
(gauge)
Duration of a LIST operation against the MySQL storage backend quantile
Shown as millisecond
vault.vault.mysql.list.sum
(gauge)
Duration of a LIST operation against the MySQL storage backend sum
Shown as millisecond
vault.vault.postgres.put.count
(count)
Duration of a PUT operation against the PostgreSQL storage backend count
vault.vault.postgres.put.quantile
(gauge)
Duration of a PUT operation against the PostgreSQL storage backend quantile
Shown as millisecond
vault.vault.postgres.put.sum
(gauge)
Duration of a PUT operation against the PostgreSQL storage backend sum
Shown as millisecond
vault.vault.postgres.get.count
(count)
Duration of a GET operation against the PostgreSQL storage backend count
vault.vault.postgres.get.quantile
(gauge)
Duration of a GET operation against the PostgreSQL storage backend quantile
Shown as millisecond
vault.vault.postgres.get.sum
(gauge)
Duration of a GET operation against the PostgreSQL storage backend sum
Shown as millisecond
vault.vault.postgres.delete.count
(count)
Duration of a DELETE operation against the PostgreSQL storage backend count
vault.vault.postgres.delete.quantile
(gauge)
Duration of a DELETE operation against the PostgreSQL storage backend quantile
Shown as millisecond
vault.vault.postgres.delete.sum
(gauge)
Duration of a DELETE operation against the PostgreSQL storage backend sum
Shown as millisecond
vault.vault.postgres.list.count
(count)
Duration of a LIST operation against the PostgreSQL storage backend count
vault.vault.postgres.list.quantile
(gauge)
Duration of a LIST operation against the PostgreSQL storage backend quantile
Shown as millisecond
vault.vault.postgres.list.sum
(gauge)
Duration of a LIST operation against the PostgreSQL storage backend sum
Shown as millisecond
vault.vault.raft.put.count
(count)
Duration of a PUT operation against the CouchDB storage backend count
vault.vault.raft.put.quantile
(gauge)
Duration of a PUT operation against the CouchDB storage backend quantile
Shown as millisecond
vault.vault.raft.put.sum
(gauge)
Duration of a PUT operation against the Raft storage backend sum
Shown as millisecond
vault.vault.raft.get.count
(count)
Duration of a GET operation against the Raft storage backend count
vault.vault.raft.get.quantile
(gauge)
Duration of a GET operation against the Raft storage backend quantile
Shown as millisecond
vault.vault.raft.get.sum
(gauge)
Duration of a GET operation against the Raft storage backend sum
Shown as millisecond
vault.vault.raft.delete.count
(count)
Duration of DELETE operation against the Raft storage backend count
vault.vault.raft.delete.quantile
(gauge)
Duration of DELETE operation against the Raft storage backend quantile
Shown as millisecond
vault.vault.raft.delete.sum
(gauge)
Duration of DELETE operation against the Raft storage backend sum
Shown as millisecond
vault.vault.raft.list.count
(count)
Duration of a LIST operation against the Raft storage backend count
vault.vault.raft.list.quantile
(gauge)
Duration of a LIST operation against the Raft storage backend quantile
Shown as millisecond
vault.vault.raft.list.sum
(gauge)
Duration of a LIST operation against the Raft storage backend sum
Shown as millisecond
vault.vault.s3.put.count
(count)
Duration of a PUT operation against the Amazon S3 storage backend count
vault.vault.s3.put.quantile
(gauge)
Duration of a PUT operation against the Amazon S3 storage backend quantile
Shown as millisecond
vault.vault.s3.put.sum
(gauge)
Duration of a PUT operation against the Amazon S3 storage backend sum
Shown as millisecond
vault.vault.s3.get.count
(count)
Duration of a GET operation against the Amazon S3 storage backend count
vault.vault.s3.get.quantile
(gauge)
Duration of a GET operation against the Amazon S3 storage backend quantile
Shown as millisecond
vault.vault.s3.get.sum
(gauge)
Duration of a GET operation against the Amazon S3 storage backend sum
Shown as millisecond
vault.vault.s3.delete.count
(count)
Duration of a DELETE operation against the Amazon S3 storage backend count
vault.vault.s3.delete.quantile
(gauge)
Duration of a DELETE operation against the Amazon S3 storage backend quantile
Shown as millisecond
vault.vault.s3.delete.sum
(gauge)
Duration of a DELETE operation against the Amazon S3 storage backend sum
Shown as millisecond
vault.vault.s3.list.count
(count)
Duration of a LIST operation against the Amazon S3 storage backend count
vault.vault.s3.list.quantile
(gauge)
Duration of a LIST operation against the Amazon S3 storage backend quantile
Shown as millisecond
vault.vault.s3.list.sum
(gauge)
Duration of a LIST operation against the Amazon S3 storage backend sum
Shown as millisecond
vault.vault.spanner.put.count
(count)
Duration of a PUT operation against the Google Cloud Spanner storage backend count
vault.vault.spanner.put.quantile
(gauge)
Duration of a PUT operation against the Google Cloud Spanner storage backend quantile
Shown as millisecond
vault.vault.spanner.put.sum
(gauge)
Duration of a PUT operation against the Google Cloud Spanner storage backend sum
Shown as millisecond
vault.vault.spanner.get.count
(count)
Duration of a GET operation against the Google Cloud Spanner storage backend count
vault.vault.spanner.get.quantile
(gauge)
Duration of a GET operation against the Google Cloud Spanner storage backend quantile
Shown as millisecond
vault.vault.spanner.get.sum
(gauge)
Duration of a GET operation against the Google Cloud Spanner storage backend sum
Shown as millisecond
vault.vault.spanner.delete.count
(count)
Duration of a DELETE operation against the Google Cloud Spanner storage backend count
vault.vault.spanner.delete.quantile
(gauge)
Duration of a DELETE operation against the Google Cloud Spanner storage backend quantile
Shown as millisecond
vault.vault.spanner.delete.sum
(gauge)
Duration of a DELETE operation against the Google Cloud Spanner storage backend sum
Shown as millisecond
vault.vault.spanner.list.count
(count)
Duration of a LIST operation against the Google Cloud Spanner storage backend count
vault.vault.spanner.list.quantile
(gauge)
Duration of a LIST operation against the Google Cloud Spanner storage backend quantile
Shown as millisecond
vault.vault.spanner.list.sum
(gauge)
Duration of a LIST operation against the Google Cloud Spanner storage backend sum
Shown as millisecond
vault.vault.spanner.lock.unlock.count
(count)
Duration of an UNLOCK operation against the Google Cloud Spanner storage backend in HA mode
vault.vault.spanner.lock.unlock.quantile
(gauge)
Duration of an UNLOCK operation against the Google Cloud Spanner storage backend in HA mode
Shown as millisecond
vault.vault.spanner.lock.unlock.sum
(gauge)
Duration of an UNLOCK operation against the Google Cloud Spanner storage backend in HA mode
Shown as millisecond
vault.vault.spanner.lock.lock.count
(count)
Duration of an LOCK operation against the Google Cloud Spanner storage backend in HA mode count
vault.vault.spanner.lock.lock.quantile
(gauge)
Duration of an LOCK operation against the Google Cloud Spanner storage backend in HA mode quantile
Shown as millisecond
vault.vault.spanner.lock.lock.sum
(gauge)
Duration of an LOCK operation against the Google Cloud Spanner storage backend in HA mode sum
Shown as millisecond
vault.vault.spanner.lock.value.count
(count)
Duration of a VALUE operation against the Google Cloud Spanner backend in HA mode count
vault.vault.spanner.lock.value.quantile
(gauge)
Duration of a VALUE operation against the Google Cloud Spanner backend in HA mode quantile
Shown as millisecond
vault.vault.spanner.lock.value.sum
(gauge)
Duration of a VALUE operation against the Google Cloud Spanner backend in HA mode sum
Shown as millisecond
vault.vault.swift.put.count
(count)
Duration of a PUT operation against the Swift storage backend count
vault.vault.swift.put.quantile
(gauge)
Duration of a PUT operation against the Swift storage backend quantile
Shown as millisecond
vault.vault.swift.put.sum
(gauge)
Duration of a PUT operation against the Swift storage backend sum
Shown as millisecond
vault.vault.swift.get.count
(count)
Duration of a GET operation against the Swift storage backend count
vault.vault.swift.get.quantile
(gauge)
Duration of a GET operation against the Swift storage backend quantile
Shown as millisecond
vault.vault.swift.get.sum
(gauge)
Duration of a GET operation against the Swift storage backend sum
Shown as millisecond
vault.vault.swift.delete.count
(count)
Duration of a DELETE operation against the Swift storage backend count
vault.vault.swift.delete.quantile
(gauge)
Duration of a DELETE operation against the Swift storage backend quantile
Shown as millisecond
vault.vault.swift.delete.sum
(gauge)
Duration of a DELETE operation against the Swift storage backend sum
Shown as millisecond
vault.vault.swift.list.count
(count)
Duration of a LIST operation against the Swift storage backend count
vault.vault.swift.list.quantile
(gauge)
Duration of a LIST operation against the Swift storage backend quantile
Shown as millisecond
vault.vault.swift.list.sum
(gauge)
Duration of a LIST operation against the Swift storage backend sum
Shown as millisecond
vault.vault.zookeeper.put.count
(count)
Duration of a PUT operation against the ZooKeeper storage backend count
vault.vault.zookeeper.put.quantile
(gauge)
Duration of a PUT operation against the ZooKeeper storage backend quantile
Shown as millisecond
vault.vault.zookeeper.put.sum
(gauge)
Duration of a PUT operation against the ZooKeeper storage backend sum
Shown as millisecond
vault.vault.zookeeper.get.count
(count)
Duration of a GET operation against the ZooKeeper storage backend count
vault.vault.zookeeper.get.quantile
(gauge)
Duration of a GET operation against the ZooKeeper storage backend quantile
Shown as millisecond
vault.vault.zookeeper.get.sum
(gauge)
Duration of a GET operation against the ZooKeeper storage backend sum
Shown as millisecond
vault.vault.zookeeper.delete.count
(count)
Duration of a DELETE operation against the ZooKeeper storage backend count
vault.vault.zookeeper.delete.quantile
(gauge)
Duration of a DELETE operation against the ZooKeeper storage backend quantile
Shown as millisecond
vault.vault.zookeeper.delete.sum
(gauge)
Duration of a DELETE operation against the ZooKeeper storage backend sum
Shown as millisecond
vault.vault.zookeeper.list.count
(count)
Duration of a LIST operation against the ZooKeeper storage backend count
vault.vault.zookeeper.list.quantile
(gauge)
Duration of a LIST operation against the ZooKeeper storage backend quantile
Shown as millisecond
vault.vault.zookeeper.list.sum
(gauge)
Duration of a LIST operation against the ZooKeeper storage backend sum
Shown as millisecond

イベント

vault.leader_change: このイベントは、クラスターリーダーが変更されると発生します。

サービスのチェック

vault.can_connect: Agent が Vault に接続できない場合は、CRITICAL を返します。それ以外の場合は、OK を返します。

vault.unsealed: Vault がシールされている場合は、CRITICAL を返します。それ以外の場合は、OK を返します。

vault.initialized: Vault がまだ初期化されていない場合は、CRITICAL を返します。それ以外の場合は、OK を返します。

vault.prometheus.health: チェックがメトリクスのエンドポイントにアクセスできない場合 CRITICAL を返します。それ以外の場合 OK を返します。

トラブルシューティング

ご不明な点は、Datadog のサポートチームまでお問合せください。

その他の参考資料

お役に立つドキュメント、リンクや記事: