Skip to main content

Audit log telemetry

Audit log telemetry provides information on the health of your configured audit devices.

Default metrics

vault.audit.log_request_failure

Metric typeValueDescription
counternumberNumber of audit log request failures across all devices

The number of request failures is a crucial metric.

A non-zero value for vault.audit.log_request_failure indicates that all your configured audit devices failed to log a request (or response). If OpenBao cannot properly audit a request, or the response to a request, the original request will fail.

Refer to the OpenBao logs and any device-specific metrics to troubleshoot the failing audit log device.

vault.audit.log_request

Metric typeValueDescription
summarymsTime required to complete all audit log requests across all audit log devices

vault.audit.log_response_failure

Metric typeValueDescription
counternumberNumber of audit log request failures across all devices

The number of request failures is a crucial metric.

A non-zero value for vault.audit.log_response_failure indicates that one of the configured audit log devices failed to respond to OpenBao. If OpenBao cannot properly audit a request, or the response to a request, the original request will fail.

Refer to the device-specific metrics and logs to troubleshoot the failing audit log device.

vault.audit.log_response

Metric typeValueDescription
summarymsTime required to complete audit log responses across all audit log devices

Audit device metrics

Device-specific metrics for each enabled audit device. For example, if you enable a file audit device, the related metrics are: vault.audit.file.log_request and vault.audit.file.log_response.

vault.audit.{DEVICE}.log_request

Metric typeValueDescription
summarymsTime required to complete all audit log requests across the device

vault.audit.{DEVICE}.log_response

Metric typeValueDescription
summarymsTime required to complete all audit log responses across the device