Monitoring in Smart Web Security

Monitoring allows you to track the rate of requests to a protected resource: allowed, blocked, routed to SmartCaptcha, and processed by an ARL profile. You can also set up alerts to get notifications when a request speed threshold is exceeded.

Yandex Cloud offers pre-configured dashboards for Smart Web Security monitoring.

You can view the dashboards using one of the following options:

• On the Smart Web Security page, select Monitoring.
• Under Monitoring, click Open in Monitoring at the top right.
• On the Application Load Balancer page:
  1. Select the load balancer with a linked security profile.
  2. Go to the Monitoring section.
  3. Go to the Smart Web Security tab.

Description of Smart Web Security monitoring dashboardsDescription of Smart Web Security monitoring dashboards

• Inbound total RPS: Total number of inbound requests per second (RPS) received by the load balancer with the security profile.

  Metric: load_balancer.requests_count_per_second.

• Allowed by Security Profile RPS: Number of inbound requests per second the security profile has checked and allowed.

  Metric: load_balancer.smart_web_security.requests_per_second filtered by the antirobot_verdict=allow label.

• Denied by Security Profile RPS: Number of inbound requests per second the security profile has checked and blocked.

  Metric: load_balancer.smart_web_security.requests_per_second filtered by the antirobot_verdict=deny label.

• Redirected to SmartCaptcha RPS: Number of inbound requests per second routed to SmartCaptcha for additional verification.

  Metric: load_balancer.smart_web_security.requests_per_second filtered by the antirobot_verdict=captcha label.

  Note

  The total number of requests on Allowed by Security Profile RPS, Denied by Security Profile RPS, and Redirected to SmartCaptcha RPS equals the Inbound total RPS value at any given time. However, not all the requests allowed at this stage and labeled with antirobot_verdict=allow will reach the protected node. They may get blocked by the ARL profile limiting the inboud request rate.

• Allowed by ARL Profile RPS: Number of inbound requests per second not exceeding the ARL profile limit.

  Metric: load_balancer.smart_web_security.arl_requests_per_second filtered by the arl_verdict=allow label.

• Denied by ARL Profile RPS: Number of inbound requests per second exceeding the ARL profile limit and blocked.

  Metric: load_balancer.smart_web_security.arl_requests_per_second filtered by the arl_verdict=deny label.

  Note

  The total number of request a point in time for Allowed by ARL Profile RPS and Denied by ARL Profile RPS matches the Allowed by Security Profile RPS value.

You can combine multiple metrics in a single chart and configure your own dashboards in Monitoring.

See alsoSee also

• Yandex Monitoring metric reference
• Dashboards in Monitoring