Enhancement: Virtual Appliance Observability

Description

Several improvements have been made to enhance the visibility of your Virtual Appliances.

Problems

  1. Logs: A significant amount of logs are generated by connectors and other applications running on the VA. Accessing these logs were difficult during troubleshooting and it was not possible to continuously capture logs into systems of record such as SIEMs.
  2. Metrics: Performance and resource consumption of the VAs.
  3. Statuses: Applications deployed to the VAs and associated statuses were not apparent unless you logged directly into the VAs.

Solutions

Log Streaming

The VA OS system journal can now be streamed to a variety of log capture systems including:

  • Splunk
  • AWS CloudWatch
  • Datadog

Application logs from /home/sailpoint/log will also be sent as an option.

Metrics Streaming

Metrics can be sent to popular observability systems that support OpenTelemetry standard. Metrics include:

  • CPU, disk, and memory usage
  • Application health (CCG)

A complete list of supported systems can be found in the documentation below.

Component Statuses Page

Following the release of the new Standard cluster type, multiple products and applications can be deployed to VAs in the cluster instead of having to deploy entire new cluster types. A new page within Virtual Appliances shows the list of components deployed on the VA, along with basic status of each service associated with the component.

Important Dates

Available now!

Additional Resources

Documentation Virtual Appliance Observability - SailPoint Identity Services

6 Likes

Thanks for the information.

1 Like

A very welcome enhancement.

Is the log export only available to go to those 3 (Splunk, AWS CloudWatch, Datadog) or can other log systems be configured?