Ensure Database Monitoring and Alerting Are in Place

中等級 1人工審核cockroachdb

說明

A robust monitoring and alerting system must be implemented for CockroachDB to continuously observe the health, performance, and security posture of the database cluster. CockroachDB exposes detailed metrics and events through its internal time- series database and provides a built-in Admin UI (DB Console) for visualization.

檢查方式

稽核方法: 人工審核

此項建議無法自動檢查。當您傳入 --include-manual 時，掃描結果會列出此項目並附帶這些說明。

Confirm Prometheus (or equivalent) scrapes every node (grep cockroach /etc/prometheus/prometheus.yml; curl -s http://<node>:8080/_status/vars | head), Grafana/DB Console dashboards show live data, and alert rules exist and are routed for node down >1 minute, disk capacity, clock offset, under-replicated ranges and certificate expiry.

修補方式

修補方法: 操作指南或基礎設施修補檔

1. Integrate with Prometheus and Grafana: Configure Prometheus to scrape metrics from all CockroachDB nodes (default endpoint: http://<node>:8080/_status/vars). Example Prometheus job configuration: scrape_configs: - job_name: 'cockroachdb' scrape_interval: 10s static_configs: - targets: ['node1:8080', 'node2:8080', 'node3:8080'] Import the official CockroachDB Grafana dashboard JSON from Cockroach Labs to visualize performance data. 2.

屬性

作業系統: 不限
標籤: cockroachdbmonitoring
參考資料: CIS CockroachDB v25.x Benchmark v1.0.0 - 3.4 Ensure Database Monitoring and Alerting Are in Place