Observability setup

Note

This page covers install-time observability wiring for Vault telemetry and health endpoints. For recurring monitoring, alert response, audit-log review, operational-log review, and incident response, see the Administration Guide: Monitoring and observability.

Telemetry endpoint setup

Enable Vault telemetry during deployment so platform monitoring systems can collect Vault metrics. Configure the telemetry stanza in the Vault server configuration, expose the Prometheus metrics endpoint only to approved monitoring systems, and confirm that the endpoint is reachable from the monitoring plane before handoff to day-2 operations.

Health endpoint setup

Configure load balancers, probes, and monitoring checks to use the Vault health API. The health endpoint reports the state of the Vault node being queried, so checks should account for active, standby, sealed, and performance standby states.

Handoff to administration

After telemetry and health endpoints are wired into the monitoring platform, use the Administration Guide to define dashboards, key metrics, alert thresholds, audit-log review, operational-log review, and incident-response workflows.