TMA-COCKROACHDB-3.4
Ensure Database Monitoring and Alerting Are in Place
Deskripsi
A robust monitoring and alerting system must be implemented for CockroachDB to continuously observe the health, performance, and security posture of the database cluster. CockroachDB exposes detailed metrics and events through its internal time- series database and provides a built-in Admin UI (DB Console) for visualization.
Cara pemeriksaan
Metode audit: Tinjauan manual
Rekomendasi ini tidak dapat diperiksa secara otomatis. Pemindaian akan menampilkannya beserta petunjuk ini saat Anda memberikan opsi --include-manual.
Confirm Prometheus (or equivalent) scrapes every node (grep cockroach /etc/prometheus/prometheus.yml; curl -s http://<node>:8080/_status/vars | head), Grafana/DB Console dashboards show live data, and alert rules exist and are routed for node down >1 minute, disk capacity, clock offset, under-replicated ranges and certificate expiry.
Cara perbaikan
Metode perbaikan: Panduan atau patch infrastruktur
1. Integrate with Prometheus and Grafana: Configure Prometheus to scrape metrics from all CockroachDB nodes (default endpoint: http://<node>:8080/_status/vars). Example Prometheus job configuration: scrape_configs: - job_name: 'cockroachdb' scrape_interval: 10s static_configs: - targets: ['node1:8080', 'node2:8080', 'node3:8080'] Import the official CockroachDB Grafana dashboard JSON from Cockroach Labs to visualize performance data. 2.
Properti
- Sistem operasi
- Apa saja
- Tag
- cockroachdbmonitoring
- Referensi
- CIS CockroachDB v25.x Benchmark v1.0.0 - 3.4 Ensure Database Monitoring and Alerting Are in Place