3 ms·
Even a really crude monitoring metric would trigger alerts after a bunch of recurring calls to an endpoint from a specific place. They simple don't care at all
by caiobegotti 6y ago
Even a really crude monitoring metric would trigger alerts after a bunch of recurring calls to an endpoint from a specific place. They simple don't care at all or are too dumb to come up with basic security checks.
- nitrogen 6y agoUntil it's a default in frameworks like Spring Boot and in ELK stack logging systems, in most places it's not happening.
- wdb 6y agoGot any examples of such monitoring metric setup? Would love to get an idea what it's good to monitor :) I am thinking of using Grafana with Prometheus. Love to find a nice resource with good ideas of rules/monitoring to have
- caiobegotti 6y agoThat's exactly what I do (or would) use and it does plenty for many type of business and it scales up well. The metrics specifically depend on the rest of your stack though but these days any API gateway or ingress application or service mesh or proxy app can provide endpoints metrics for you nearly out-of-the-box.