Monitor Azure Key Vault

As you scale the usage of your Azure Key Vault service, monitoring becomes crucial due to the increasing number of requests. Site24x7 helps you track this growth, preventing latency issues and request throttling, which could impact your service's performance.

With Site24x7, you can ensure your Key Vault service remains responsive and efficient, even as demand rises, safeguarding the performance and reliability of your service.

Setup and configuration

Adding Key Vault while configuring a new Azure monitor

If you haven't configured an Azure monitor yet, or if you're setting one up for the first time, follow the steps below to add an Azure monitor along with Azure Key Vault:

1. Log in to your Site24x7 account.
2. Choose Cloud from the left navigation pane, and select Azure > Add Azure Monitor. You can also follow these steps to add an Azure monitor.
3. During Azure monitor configuration, on the Add Azure Monitor page, select Azure Key Vault along with other required resource types from the Service/Resource Types drop-down. Check if you have configured the corresponding resource groups and tag filters in the Edit page.

Adding Azure Key Vault to an existing Azure monitor

If you already have an Azure monitor configured for the tenant, you can add Azure Key Vault by following these steps:

1. Log in to your Site24x7 account.
2. Navigate to Cloud > Azure and select the Azure monitor from the left pane for which you wish to add Azure Key Vault.
3. On the Service View page, click the Enable Monitoring button for the Azure Key Vault service type. Check if you have configured the corresponding resource groups and tag filters in the Edit page.  

Now you can view the discovered resources from the Service View dashboard itself.

Polling frequency

Site24x7's Azure Key Vault monitor collects metric data every minute and the statuses from your applications every five minutes.

Supported metrics

Threshold configuration

Associating a threshold profile can be done from the monitor's Edit page: 

• Under Configuration Profiles > Threshold and Availability > select the corresponding threshold profile from the drop-down. 

Bulk Action

Bulk association of threshold profiles can be done from the Admin page (Admin >  Inventory > Bulk Action > under Monitor Configuration, go to Modify Threshold Profile). 

You can set threshold values for the metrics by selecting the Threshold and Availability option. You can also configure IT automation at the attribute level.

Default thresholds

Site24x7 alerts you based on a set of default thresholds. These default thresholds ensure that your service capacity is not overutilized, thus maintaining optimal storage and performance and reducing costs. 

These are the default threshold categories:

• Resource Health
• On Change Configuration
• Metrics threshold

Resource Health:

• Alert if Resource Health is Unavailable
• Alert if Resource Health is Unknown

On Change Configuration:

• Alert if Deployment Status is Changed
• Alert if Disk Encryption Status is Changed
• Alert if Template Deployment Status is Changed
• Alert if RBAC Authorization is Changed
• Alert if Public Network Access is Changed

Metrics threshold:

• Overall Service API Latency
• Overall Vault Saturation
• Overall Vault Availability

Additional attributes threshold

• Alert if the Key has Expired
• Alert if the Key has been Deleted
• Alert if the Key has been Disabled
• Alert if the Certificate has Expired
• Alert if the Certificate has been Deleted
• Alert if the Certificate has been Disabled
• Alert if the Secret has Expired
• Alert if the Secret has been Deleted
• Alert if the Secret has been Disabled

IT automation

Site24x7 offers a set of exclusive IT automation tools to auto-resolve performance degradation issues. These tools react to events proactively rather than waiting for manual intervention.

How to configure IT automation for a monitor

Configuration Rules

With Site24x7's Configuration Rules, you can set parameters like Threshold Profile, Notification Profile, Tags, and Monitor Group for multiple monitors. These rules can be configured and run for the existing or new monitors (during addition) matching the given criteria.

How to add a configuration rule

Reports

Gain in-depth data about the various parameters of your monitored resources and accentuate your service performance using our insightful reports.

To view reports for Azure Key Vault:

1. Navigate to the Reports section in the left navigation pane.
2. Select Azure Key Vault from the menu on the left.
   
   
   
3. You can find the Availability Summary Report and Performance Report for one selected monitor. Or you can get the Inventory Report, Key Vault by Compute Size, Summary Report, Availability Summary Report, Health Trend Report, and Performance Report for all the monitors. Additionally, you can view the Top N and Bottom N Report.

Key Vault by Compute Size

Site24x7's Azure Key Vault monitoring also provides a Key Vault by Compute Size report that will enable you to gain deep insights into your resources. 

Top N and Bottom N reports

• Azure Key Vaults by Service API Latency

To schedule a report:

1. Schedule the Inventory Report by navigating to Reports > Azure Key Vault > Inventory Report.
2. Click the Share This button at the top-right corner.
3. In the Schedule Report pop-up, choose the monitor, assign the desired frequency—daily, weekly, monthly, or quarterly—and send regular reports on your inventory details to the groups that you desire.

You can also view the reports from the Performance tab of the Azure Key Vault monitor.

1. Navigate to the Performance tab of the Azure Key Vault monitor.
2. Get the Availability Summary Report of the monitor by clicking Availability.
3. Find the Performance Report of the monitor by clicking any chart title.

Site24x7's Key Vault monitoring interface

Get an overview of the availability and usage status of your Key Vault environment.

Performance

The Performance tab helps you view the API hits and latency information, vault saturation details, and availability status.

Keys

The Keys tab gives you information about the keys specific to the resource, along with the created and updated time, the activation and expiry dates, and the days until expiration.

If you wish to add keys for monitoring or delete keys from monitoring, click Discover Keys at the top right corner. In the pop-up window, select the keys and then click Add or Delete.

If the key is not listed, click the refresh icon at the top right corner to trigger discovery.

Certificates

The Certificates tab provides you with the details regarding the certificates specific to the resource, along with the created and updated time, the activation and expiry dates, and the days until expiration.

Secrets

The Secrets tab gives you information about the secrets specific to the resource, along with the created and updated time, the activation and expiry dates, and the days until expiration.

Configuration Details

The Configuration Details tab provides the configuration details of your Key Vault environment. Details on the compute site, vault creation, status of RBAC authorization, soft delete, disk encryption, deployment, and more are included on this tab.

Zia Forecast

By leveraging the AI-driven Zia framework, you can examine resource consumption measurements through the forecast chart located in the Zia Forecast tab. This chart predicts upcoming performance metrics based on a seven-day historical data analysis, providing insights into the expected metric usage for the next seven days.

Outages

The Outages tab provides the history of the Key Vault's statuses, including Down, Trouble, and Critical.

Inventory

The Inventory tab provides details on licensing, threshold and availability profiles, the set notification profiles, the set user alert group, and the monitor's created time and modified time.

Log Report

The Log Report tab lists all the logs collected during every data collection along with their statuses.

Related links

• How to add an Azure monitor
• How to configure IT Automation for a monitor
• How to integrate an Azure App Service monitor
• How to integrate an Azure virtual machine
• How to add a Configuration Rule
• View the list of monitor reports