Vault Token/Secret/Lease Expiration report

[Tech Savy]

Can some one please help me as to how do I get alerted when a Vault token/secret/lease/ expires ? is there anything within Vault that alerts me (or) If not in Vault what is the way I can setup alerting on this ?

[Becca Petrin]

Hi!

We have a couple of metrics available around revocation mentioned here (if you search for "revoke"). In a Vault response containing a token, Vault also returns information about when the token will expire, which you can find some examples of here. Also, if your Vault log level is on "Info", this message is generated when a lease is revoked. It may be possible to alert based on a particular log line appearing using something like ElasticSearch alerting.

Those are the present methods - we don't have an event service that's pushing out notifications to web hooks. 

What's your use case? Just curious.

Becca

[AP Games]

Thank you very much for your help, we have a huge vault/consul infrastructure and huge prod data.

--
This mailing list is governed under the HashiCorp Community Guidelines - https://www.hashicorp.com/community-guidelines.html. Behavior in violation of those guidelines may result in your removal from this mailing list.
 
GitHub Issues: https://github.com/hashicorp/vault/issues
IRC: #vault-tool on Freenode
---
You received this message because you are subscribed to the Google Groups "Vault" group.
To unsubscribe from this group and stop receiving emails from it, send an email to vault-tool+...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/vault-tool/28fc7f13-d438-4e9b-96c1-23542e91d326%40googlegroups.com.