Monitoring in Smart Web Security

Monitoring allows you to track the rate of requests to a protected resource: allowed, blocked, routed to SmartCaptcha, and processed by an ARL profile. You can also set up alerts to get notifications when request rate thresholds are exceeded.

Yandex Cloud offers pre-configured dashboards for Smart Web Security monitoring.

You can view the dashboards using one of the following options:

• On the Smart Web Security page, select Monitoring.
• Under Monitoring, click Open in Monitoring at the top right.
• On the Application Load Balancer page:
  1. Select the load balancer with a linked security profile.
  2. Navigate to Monitoring.
  3. Go to the Smart Web Security tab.

Description of Smart Web Security monitoring dashboardsDescription of Smart Web Security monitoring dashboards

• Inbound total RPS: Total number of incoming requests per second (RPS) reaching the load balancer with the security profile.

  Metric: load_balancer.requests_count_per_second.

• Allowed by Security Profile RPS: Number of incoming requests per second the security profile has checked and allowed.

  Metric: load_balancer.smart_web_security.requests_per_second filtered by antirobot_verdict=allow.

• Denied by Security Profile RPS: Number of incoming requests per second the security profile has checked and blocked.

  Metric: load_balancer.smart_web_security.requests_per_second filtered by antirobot_verdict=deny.

• Redirected to SmartCaptcha RPS: Number of incoming requests per second routed to SmartCaptcha for additional verification.

  Metric: load_balancer.smart_web_security.requests_per_second filtered by antirobot_verdict=captcha.

  Note

  The total number of requests for Allowed by Security Profile RPS, Denied by Security Profile RPS, and Redirected to SmartCaptcha RPS matches the Inbound total RPS value at any given time. However, not all the requests allowed at this stage and labeled with antirobot_verdict=allow will reach the protected node. They may get blocked by the ARL profile limiting the incoming request rate.

• Allowed by ARL Profile RPS: Number of incoming requests per second not exceeding the ARL profile limit.

  Metric: load_balancer.smart_web_security.arl_requests_per_second filtered by arl_verdict=allow.

• Denied by ARL Profile RPS: Number of incoming requests per second exceeding the ARL profile limit and blocked.

  Metric: load_balancer.smart_web_security.arl_requests_per_second filtered by arl_verdict=deny.

  Note

  The total number of requests for Allowed by ARL Profile RPS and Denied by ARL Profile RPS matches the Allowed by Security Profile RPS value at any given time.

You can combine multiple metrics in a single chart and configure your own dashboards in Monitoring.

See alsoSee also

• Yandex Monitoring metric reference
• Dashboards in Monitoring