Key Management Service (KMS) can be integrated with Cloud Monitor (CMS) to provide the monitoring and alerting features for system events. This way, you can stay informed about and handle system events at the earliest opportunity. This topic describes how to query system events and configure alert rules.
System event types
The following types of system events are supported:
Client Key Expiration Notification: an event of the CRITICAL severity, which is triggered 180 days, 90 days, 30 days, and 7 days before the expiration of your client key.
Successful Rotation of Managed Secrets: an event of the Info severity, which is triggered each time secret rotation succeeds.
Failed Rotation of Managed Secrets: an event of the CRITICAL severity, which is triggered each time secret rotation fails.
Events of the Successful Rotation of Managed Secrets and Failed Rotation of Managed Secrets types are supported only for secrets in the old version of KMS. The two types of events are not supported for secrets in KMS instances.
You do not need to configure system events. When conditions are met, system events are automatically displayed in the KMS console and the CloudMonitor console.
View system events
Method 1: Use the KMS console
Log on to the KMS console. In the top navigation bar, select the required region. In the left-side navigation pane, click Alert Events.
On the CloudMonitor Alerts tab, select a system event type and a time range for your query.
Find the event that you want to query and click Details in the Actions column to view the details of the event.
Method 2: Use the CloudMonitor console
- Log on to the CloudMonitor console.
In the left-side navigation pane, choose .
On the Event Monitoring tab, select Key Management Service, select a severity level, an event name, and a time range, and then click Search.
In the event list, find the event that you want to view and click Details in the Actions column.
Configure alert rules for system events
You can configure alert rules for system events. When an exception occurs, you can receive alert notifications at the earliest opportunity. This allows you to quickly analyze and troubleshoot the exceptions. You can configure alert rules only in the CloudMonitor console.
- Log on to the CloudMonitor console.
In the left-side navigation pane, choose .
On the Event Monitoring tab, click Save as Alert Rule.
In the Create/Modify Event-triggered Alert Rule panel, configure parameters for the alert rule.
For more information about parameters, see Manage system event-triggered alert rules.