TMA-COCKROACHDB-3.4
Ensure Database Monitoring and Alerting Are in Place
Descrição
A robust monitoring and alerting system must be implemented for CockroachDB to continuously observe the health, performance, and security posture of the database cluster. CockroachDB exposes detailed metrics and events through its internal time- series database and provides a built-in Admin UI (DB Console) for visualization.
Como é verificado
Método de auditoria: Revisão manual
Esta recomendação não pode ser verificada automaticamente. Uma varredura a lista com estas instruções quando você passa --include-manual.
Confirm Prometheus (or equivalent) scrapes every node (grep cockroach /etc/prometheus/prometheus.yml; curl -s http://<node>:8080/_status/vars | head), Grafana/DB Console dashboards show live data, and alert rules exist and are routed for node down >1 minute, disk capacity, clock offset, under-replicated ranges and certificate expiry.
Como é corrigido
Método de correção: Orientação ou patch de infraestrutura
1. Integrate with Prometheus and Grafana: Configure Prometheus to scrape metrics from all CockroachDB nodes (default endpoint: http://<node>:8080/_status/vars). Example Prometheus job configuration: scrape_configs: - job_name: 'cockroachdb' scrape_interval: 10s static_configs: - targets: ['node1:8080', 'node2:8080', 'node3:8080'] Import the official CockroachDB Grafana dashboard JSON from Cockroach Labs to visualize performance data. 2.
Propriedades
- Sistemas operacionais
- Qualquer
- Tags
- cockroachdbmonitoring
- Referência
- CIS CockroachDB v25.x Benchmark v1.0.0 - 3.4 Ensure Database Monitoring and Alerting Are in Place