Vault - Monitoring best practises - how you do it?

Hello Everyone,

I hope you’re all doing well!

I have a general question about how you monitor your Vault infrastructure in your organization.

In our case, we’ve implemented two main features in Vault:

  • The classic Key-Value Store
  • The PKI

We’re curious to know what metrics you monitor for your Vault setup and which tools you use for that purpose.

For example, with our PKI, we’d like to monitor certificate expiration dates and set up proactive alerts. Unfortunately, this isn’t a built-in feature in Vault. How do you handle this in your environment?

Looking forward to hearing your thoughts and best practices!