HashiCorp Vault Lite

HashiCorp Vault from Prometheus metrics: sealed and unsealed nodes, active and standby, request rate and latency, token and lease counts, audit log failures and Go runtime. Pick job and instance at the top. Requires Prometheus scraping /v1/sys/metrics?format=prometheus. Free alert rules and Telegram routing: https://devkit-shop.pages.dev/free/

A one-screen health board for HashiCorp Vault. Stat panels show how many nodes report, sealed nodes, the active (leader) node count, standby nodes, audit log failures in the last hour, token count and lease count.

Time series show unsealed and active state per node (so seals and leader changes are visible), request rate, request latency quantiles (p50/p90/p99) and average latency, audit log request/response failures, token and lease growth, and Go memory and goroutines per node. Variables: job and instance. The data source is chosen at import time.

Requirements

Grafana 10.0 or newer
Vault telemetry exposed to Prometheus: scrape /v1/sys/metrics?format=prometheus (set prometheus_retention_time in the Vault telemetry stanza, e.g. 60s or more; use a token with read access to sys/metrics, or enable unauthenticated_metrics_access in the listener telemetry block)
Metrics used: vault_core_unsealed, vault_core_active, vault_core_handle_request*, vault_token_count, vault_expire_num_leases, vault_audit_log_*_failure, vault_runtime_*
Token and lease counts are reported by the active node; standby nodes may show no data for them