2:56 p.m.
Hi everybody,
we’re currently discussing what the Grafana Dashboard for KeyCloak should look like and
what kind of data is important to display. A crude mockup image is attached. The following
metrics are candidates:
Currently Logged in Users: the number of active users over time. Unsure yet if we can
track this reliably in KeyCloak.
Question/Problem: can KeyCloak reliably track this? We get the number of Logins and
Logouts, but i’m not sure when exactly a logout is triggered. What if a user just logs in
with KeyCloak, gets the token but never logs out? This is probably better suited to be
tracked through SDK usage metrics.
Failed Login Attempts: useful for brute force detection. We have a counter for this and
want to display it as a line graph over time as well as a bar chart for every month.
User by Identity Provider: The percentage of users by identity provider (Google, Facebook
Github…). This information should be available in the KeyCloak Login events which are
tracked.
Memory usage over time: A line chart showing the memory usage over a timespan (last day?).
This data is already returned from the KeyCloak metrics endpoint.
I’d appreciate any suggestions and opinions on this!
Thanks,
Peter
3:53 p.m.
Hi Peter,
for the memory usage chart, maybe we could extend it to more days. Let's
say I enter the dashboard on Monday and I want to check how it went during
the weekend. I think I could zoom out the chart anyway in order to see a
wider timeframe but as a default number of days, I think could be more (72
hours for example?).
For the pie chart. Alongside percentage, would it be useful to display the
number too? Otherwise, we should be able to see how many users are
"registered". For this there are 2 events that *might be* related: REGISTER
and IDENTITY_PROVIDER_FIRST_LOGIN. I haven't found anything about it in the
documentation so far 😓.
JOSE MIGUEL GALLAS OLMEDO
ASSOCIATE QE, mobile
Red Hat
<https://www.redhat.com/>
M: +34618488633 <http://redhatemailsignature-marketing.itos.redhat.com/>
<https://red.ht/sig>
On 23 January 2018 at 14:56, Peter Braun <pbraun(a)redhat.com> wrote:
Hi everybody,
we’re currently discussing what the Grafana Dashboard for KeyCloak should
look like and what kind of data is important to display. A crude mockup
image is attached. The following metrics are candidates:
- *Currently Logged in Users*: the number of active users over time.
Unsure yet if we can track this reliably in KeyCloak.
- Question/Problem: can KeyCloak reliably track this? We get the
number of Logins and Logouts, but i’m not sure when exactly a logout is
triggered. What if a user just logs in with KeyCloak, gets the token but
never logs out? This is probably better suited to be tracked through SDK
usage metrics.
- *Failed Login Attempts*: useful for brute force detection. We have a
counter for this and want to display it as a line graph over time as well
as a bar chart for every month.
- *User by Identity Provider*: The percentage of users by identity
provider (Google, Facebook Github…). This information should be available
in the KeyCloak Login events which are tracked.
- *Memory usage over time*: A line chart showing the memory usage over
a timespan (last day?). This data is already returned from the KeyCloak
metrics endpoint.
I’d appreciate any suggestions and opinions on this!
Thanks,
Peter
_______________________________________________
aerogear-dev mailing list
aerogear-dev(a)lists.jboss.org
https://lists.jboss.org/mailman/listinfo/aerogear-dev
8:36 p.m.
Looks neat. Would adding information related to roles/user type be useful,
e.g "admin" vs standard "user" logins and activity levels per login
type?
Is it even possible?
On Tue, Jan 23, 2018 at 5:56 AM, Peter Braun <pbraun(a)redhat.com> wrote:
Hi everybody,
we’re currently discussing what the Grafana Dashboard for KeyCloak should
look like and what kind of data is important to display. A crude mockup
image is attached. The following metrics are candidates:
- *Currently Logged in Users*: the number of active users over time.
Unsure yet if we can track this reliably in KeyCloak.
- Question/Problem: can KeyCloak reliably track this? We get the
number of Logins and Logouts, but i’m not sure when exactly a logout is
triggered. What if a user just logs in with KeyCloak, gets the token but
never logs out? This is probably better suited to be tracked through SDK
usage metrics.
- *Failed Login Attempts*: useful for brute force detection. We have a
counter for this and want to display it as a line graph over time as well
as a bar chart for every month.
- *User by Identity Provider*: The percentage of users by identity
provider (Google, Facebook Github…). This information should be available
in the KeyCloak Login events which are tracked.
- *Memory usage over time*: A line chart showing the memory usage over
a timespan (last day?). This data is already returned from the KeyCloak
metrics endpoint.
I’d appreciate any suggestions and opinions on this!
Thanks,
Peter
_______________________________________________
aerogear-dev mailing list
aerogear-dev(a)lists.jboss.org
https://lists.jboss.org/mailman/listinfo/aerogear-dev
--
EVAN SHORTISS
MOBILE DEVELOPER
Red Hat NA <https://www.redhat.com/>
Los Angeles
evan.shortiss(a)redhat.com M: +1-781-354-2834 IM: @evanshortiss
<https://red.ht/sig>
TRIED. TESTED. TRUSTED. <https://redhat.com/trusted>
@redhatnews <https://twitter.com/redhatnews> Red Hat
<https://www.linkedin.com/company/red-hat> Red Hat
<https://www.facebook.com/RedHatInc>
9:43 a.m.
Hi Evan,
it might be possible, there is some info attached to each Login event, e.g. the identity
provider. I’ll look into that. But i’m not sure if we should display this information in
the default dashboard, I think it’s use case-dependent: sometimes you are interested in
the roles and sometimes almost all users have the same role anyway. Maybe we can add that
information to the database but not display it by default, but add documentation for users
who want to add it to Grafana themselves?
Regards,
Peter
Am 23.01.2018 um 20:36 schrieb Evan Shortiss
<eshortis(a)redhat.com>:
Looks neat. Would adding information related to roles/user type be useful, e.g
"admin" vs standard "user" logins and activity levels per login type?
Is it even possible?
On Tue, Jan 23, 2018 at 5:56 AM, Peter Braun <pbraun(a)redhat.com
<mailto:pbraun@redhat.com>> wrote:
Hi everybody,
we’re currently discussing what the Grafana Dashboard for KeyCloak should look like and
what kind of data is important to display. A crude mockup image is attached. The following
metrics are candidates:
Currently Logged in Users: the number of active users over time. Unsure yet if we can
track this reliably in KeyCloak.
Question/Problem: can KeyCloak reliably track this? We get the number of Logins and
Logouts, but i’m not sure when exactly a logout is triggered. What if a user just logs in
with KeyCloak, gets the token but never logs out? This is probably better suited to be
tracked through SDK usage metrics.
Failed Login Attempts: useful for brute force detection. We have a counter for this and
want to display it as a line graph over time as well as a bar chart for every month.
User by Identity Provider: The percentage of users by identity provider (Google, Facebook
Github…). This information should be available in the KeyCloak Login events which are
tracked.
Memory usage over time: A line chart showing the memory usage over a timespan (last
day?). This data is already returned from the KeyCloak metrics endpoint.
I’d appreciate any suggestions and opinions on this!
Thanks,
Peter
<Bildschirmfoto 2018-01-23 um 11.32.17.png>
_______________________________________________
aerogear-dev mailing list
aerogear-dev(a)lists.jboss.org <mailto:aerogear-dev@lists.jboss.org>
https://lists.jboss.org/mailman/listinfo/aerogear-dev
<https://lists.jboss.org/mailman/listinfo/aerogear-dev>
--
EVAN SHORTISS
MOBILE DEVELOPER
Red Hat NA <https://www.redhat.com/>
Los Angeles
evan.shortiss(a)redhat.com <mailto:evan.shortiss@redhat.com> M: +1-781-354-2834
<tel:+1-781-354-2834> IM: @evanshortiss
<https://red.ht/sig>
TRIED. TESTED. TRUSTED. <https://redhat.com/trusted>
@redhatnews <https://twitter.com/redhatnews> Red Hat
<https://www.linkedin.com/company/red-hat> Red Hat
<https://www.facebook.com/RedHatInc>
5:43 p.m.
Hi created a new mockup with a little variation. The "error" counter is
there as a placeholder really, I don't know how useful would be that.
@Evan I think we could easily add a second line in the "active users"
chart for admins. Or maybe one line for each defined rol.
[image: Inline images 1]
What do you think?
JOSE MIGUEL GALLAS OLMEDO
ASSOCIATE QE, mobile
Red Hat
<https://www.redhat.com/>
M: +34618488633 <http://redhatemailsignature-marketing.itos.redhat.com/>
<https://red.ht/sig>
On 24 January 2018 at 09:43, Peter Braun <pbraun(a)redhat.com> wrote:
Hi Evan,
it might be possible, there is some info attached to each Login event,
e.g. the identity provider. I’ll look into that. But i’m not sure if we
should display this information in the default dashboard, I think it’s use
case-dependent: sometimes you are interested in the roles and sometimes
almost all users have the same role anyway. Maybe we can add that
information to the database but not display it by default, but add
documentation for users who want to add it to Grafana themselves?
Regards,
Peter
Am 23.01.2018 um 20:36 schrieb Evan Shortiss <eshortis(a)redhat.com>:
Looks neat. Would adding information related to roles/user type be useful,
e.g "admin" vs standard "user" logins and activity levels per login
type?
Is it even possible?
On Tue, Jan 23, 2018 at 5:56 AM, Peter Braun <pbraun(a)redhat.com> wrote:
> Hi everybody,
>
> we’re currently discussing what the Grafana Dashboard for KeyCloak should
> look like and what kind of data is important to display. A crude mockup
> image is attached. The following metrics are candidates:
>
>
> - *Currently Logged in Users*: the number of active users over time.
> Unsure yet if we can track this reliably in KeyCloak.
> - Question/Problem: can KeyCloak reliably track this? We get the
> number of Logins and Logouts, but i’m not sure when exactly a logout is
> triggered. What if a user just logs in with KeyCloak, gets the token but
> never logs out? This is probably better suited to be tracked through SDK
> usage metrics.
>
>
>
> - *Failed Login Attempts*: useful for brute force detection. We have
> a counter for this and want to display it as a line graph over time as well
> as a bar chart for every month.
>
>
>
> - *User by Identity Provider*: The percentage of users by identity
> provider (Google, Facebook Github…). This information should be available
> in the KeyCloak Login events which are tracked.
>
>
>
> - *Memory usage over time*: A line chart showing the memory usage
> over a timespan (last day?). This data is already returned from the
> KeyCloak metrics endpoint.
>
>
> I’d appreciate any suggestions and opinions on this!
>
>
> Thanks,
> Peter
>
>
> <Bildschirmfoto 2018-01-23 um 11.32.17.png>
>
> _______________________________________________
> aerogear-dev mailing list
> aerogear-dev(a)lists.jboss.org
> https://lists.jboss.org/mailman/listinfo/aerogear-dev
>
--
EVAN SHORTISS
MOBILE DEVELOPER
Red Hat NA <https://www.redhat.com/>
Los Angeles
evan.shortiss(a)redhat.com M: +1-781-354-2834 IM: @evanshortiss
<https://red.ht/sig>
TRIED. TESTED. TRUSTED. <https://redhat.com/trusted>
@redhatnews <https://twitter.com/redhatnews> Red Hat
<https://www.linkedin.com/company/red-hat> Red Hat
<https://www.facebook.com/RedHatInc>
_______________________________________________
aerogear-dev mailing list
aerogear-dev(a)lists.jboss.org
https://lists.jboss.org/mailman/listinfo/aerogear-dev
7:56 p.m.
I think that's a good compromise since it really is dependent on the
applications and organisation. Having the data would be very useful, but
there's probably better defaults.
On Wed, Jan 24, 2018 at 12:43 AM, Peter Braun <pbraun(a)redhat.com> wrote:
Hi Evan,
it might be possible, there is some info attached to each Login event,
e.g. the identity provider. I’ll look into that. But i’m not sure if we
should display this information in the default dashboard, I think it’s use
case-dependent: sometimes you are interested in the roles and sometimes
almost all users have the same role anyway. Maybe we can add that
information to the database but not display it by default, but add
documentation for users who want to add it to Grafana themselves?
Regards,
Peter
Am 23.01.2018 um 20:36 schrieb Evan Shortiss <eshortis(a)redhat.com>:
Looks neat. Would adding information related to roles/user type be useful,
e.g "admin" vs standard "user" logins and activity levels per login
type?
Is it even possible?
On Tue, Jan 23, 2018 at 5:56 AM, Peter Braun <pbraun(a)redhat.com> wrote:
> Hi everybody,
>
> we’re currently discussing what the Grafana Dashboard for KeyCloak should
> look like and what kind of data is important to display. A crude mockup
> image is attached. The following metrics are candidates:
>
>
> - *Currently Logged in Users*: the number of active users over time.
> Unsure yet if we can track this reliably in KeyCloak.
> - Question/Problem: can KeyCloak reliably track this? We get the
> number of Logins and Logouts, but i’m not sure when exactly a logout is
> triggered. What if a user just logs in with KeyCloak, gets the token but
> never logs out? This is probably better suited to be tracked through SDK
> usage metrics.
>
>
>
> - *Failed Login Attempts*: useful for brute force detection. We have
> a counter for this and want to display it as a line graph over time as well
> as a bar chart for every month.
>
>
>
> - *User by Identity Provider*: The percentage of users by identity
> provider (Google, Facebook Github…). This information should be available
> in the KeyCloak Login events which are tracked.
>
>
>
> - *Memory usage over time*: A line chart showing the memory usage
> over a timespan (last day?). This data is already returned from the
> KeyCloak metrics endpoint.
>
>
> I’d appreciate any suggestions and opinions on this!
>
>
> Thanks,
> Peter
>
>
> <Bildschirmfoto 2018-01-23 um 11.32.17.png>
>
> _______________________________________________
> aerogear-dev mailing list
> aerogear-dev(a)lists.jboss.org
> https://lists.jboss.org/mailman/listinfo/aerogear-dev
>
--
EVAN SHORTISS
MOBILE DEVELOPER
Red Hat NA <https://www.redhat.com/>
Los Angeles
evan.shortiss(a)redhat.com M: +1-781-354-2834 IM: @evanshortiss
<https://red.ht/sig>
TRIED. TESTED. TRUSTED. <https://redhat.com/trusted>
@redhatnews <https://twitter.com/redhatnews> Red Hat
<https://www.linkedin.com/company/red-hat> Red Hat
<https://www.facebook.com/RedHatInc>
--
EVAN SHORTISS
MOBILE DEVELOPER
Red Hat NA <https://www.redhat.com/>
Los Angeles
evan.shortiss(a)redhat.com M: +1-781-354-2834 IM: @evanshortiss
<https://red.ht/sig>
TRIED. TESTED. TRUSTED. <https://redhat.com/trusted>
@redhatnews <https://twitter.com/redhatnews> Red Hat
<https://www.linkedin.com/company/red-hat> Red Hat
<https://www.facebook.com/RedHatInc>
8:51 a.m.
Another cool addition would be a world map with the IP distribution, if
that's even possible. I now at least that Prometheus events have an IP
property.
[image: Inline images 1]
I think there are too many charts already though.. there isn't that much
information to be displayed after all. @peter do we know if there are other
metrics like memory usage? CPU or disk traffic maybe, something about
nodes..
JOSE MIGUEL GALLAS OLMEDO
ASSOCIATE QE, mobile
Red Hat
<https://www.redhat.com/>
M: +34618488633 <http://redhatemailsignature-marketing.itos.redhat.com/>
<https://red.ht/sig>
On 24 January 2018 at 19:56, Evan Shortiss <eshortis(a)redhat.com> wrote:
I think that's a good compromise since it really is dependent on
the
applications and organisation. Having the data would be very useful, but
there's probably better defaults.
On Wed, Jan 24, 2018 at 12:43 AM, Peter Braun <pbraun(a)redhat.com> wrote:
> Hi Evan,
>
> it might be possible, there is some info attached to each Login event,
> e.g. the identity provider. I’ll look into that. But i’m not sure if we
> should display this information in the default dashboard, I think it’s use
> case-dependent: sometimes you are interested in the roles and sometimes
> almost all users have the same role anyway. Maybe we can add that
> information to the database but not display it by default, but add
> documentation for users who want to add it to Grafana themselves?
>
>
> Regards,
> Peter
>
> Am 23.01.2018 um 20:36 schrieb Evan Shortiss <eshortis(a)redhat.com>:
>
> Looks neat. Would adding information related to roles/user type be
> useful, e.g "admin" vs standard "user" logins and activity levels
per login
> type? Is it even possible?
>
> On Tue, Jan 23, 2018 at 5:56 AM, Peter Braun <pbraun(a)redhat.com> wrote:
>
>> Hi everybody,
>>
>> we’re currently discussing what the Grafana Dashboard for KeyCloak
>> should look like and what kind of data is important to display. A crude
>> mockup image is attached. The following metrics are candidates:
>>
>>
>> - *Currently Logged in Users*: the number of active users over time.
>> Unsure yet if we can track this reliably in KeyCloak.
>> - Question/Problem: can KeyCloak reliably track this? We get the
>> number of Logins and Logouts, but i’m not sure when exactly a logout is
>> triggered. What if a user just logs in with KeyCloak, gets the token but
>> never logs out? This is probably better suited to be tracked through SDK
>> usage metrics.
>>
>>
>>
>> - *Failed Login Attempts*: useful for brute force detection. We have
>> a counter for this and want to display it as a line graph over time as well
>> as a bar chart for every month.
>>
>>
>>
>> - *User by Identity Provider*: The percentage of users by identity
>> provider (Google, Facebook Github…). This information should be available
>> in the KeyCloak Login events which are tracked.
>>
>>
>>
>> - *Memory usage over time*: A line chart showing the memory usage
>> over a timespan (last day?). This data is already returned from the
>> KeyCloak metrics endpoint.
>>
>>
>> I’d appreciate any suggestions and opinions on this!
>>
>>
>> Thanks,
>> Peter
>>
>>
>> <Bildschirmfoto 2018-01-23 um 11.32.17.png>
>>
>> _______________________________________________
>> aerogear-dev mailing list
>> aerogear-dev(a)lists.jboss.org
>> https://lists.jboss.org/mailman/listinfo/aerogear-dev
>>
>
>
>
> --
> EVAN SHORTISS
>
> MOBILE DEVELOPER
> Red Hat NA <https://www.redhat.com/>
> Los Angeles
>
> evan.shortiss(a)redhat.com M: +1-781-354-2834 IM: @evanshortiss
> <https://red.ht/sig>
> TRIED. TESTED. TRUSTED. <https://redhat.com/trusted>
> @redhatnews <https://twitter.com/redhatnews> Red Hat
> <https://www.linkedin.com/company/red-hat> Red Hat
> <https://www.facebook.com/RedHatInc>
>
>
>
--
EVAN SHORTISS
MOBILE DEVELOPER
Red Hat NA <https://www.redhat.com/>
Los Angeles
evan.shortiss(a)redhat.com M: +1-781-354-2834 IM: @evanshortiss
<https://red.ht/sig>
TRIED. TESTED. TRUSTED. <https://redhat.com/trusted>
@redhatnews <https://twitter.com/redhatnews> Red Hat
<https://www.linkedin.com/company/red-hat> Red Hat
<https://www.facebook.com/RedHatInc>
_______________________________________________
aerogear-dev mailing list
aerogear-dev(a)lists.jboss.org
https://lists.jboss.org/mailman/listinfo/aerogear-dev
11:39 a.m.
Hi,
Here's an early version of the dashboard:
https://snapshot.raintank.io/dashboard/snapshot/qpN0BZTlesymRZ9ao9ytIga9O...
The 2 pie charts and worldmap are missing (still working on how to install
a Grafana plugin properly) and there's an extra "Panel Title" chart unused
(Any ideas what to put there?).
Please any comments/suggestions are welcome!
12:16 p.m.
Hi Jose, great work! I would reduce the numbers of memory charts though, there are four at
the moment, one chart should be enough. Also do we need the Pie charts for the first
version? Would be nice to try out automatic integration with a simplified version of
this.
Am 30.01.2018 um 11:39 schrieb Jose Miguel Gallas Olmedo
<jgallaso(a)redhat.com>:
Hi,
Here's an early version of the dashboard:
https://snapshot.raintank.io/dashboard/snapshot/qpN0BZTlesymRZ9ao9ytIga9O...
<https://snapshot.raintank.io/dashboard/snapshot/qpN0BZTlesymRZ9ao9ytIga9O...
The 2 pie charts and worldmap are missing (still working on how to install a Grafana
plugin properly) and there's an extra "Panel Title" chart unused (Any ideas
what to put there?).
Please any comments/suggestions are welcome!
_______________________________________________
aerogear-dev mailing list
aerogear-dev(a)lists.jboss.org
https://lists.jboss.org/mailman/listinfo/aerogear-dev
12:57 p.m.
Yes I can certainly leave pie charts for later when everything works.
The memory charts, there are 2 different metrics: heap and nonheap. Should
we display together as if they were only 1? (summed up)
JOSE MIGUEL GALLAS OLMEDO
ASSOCIATE QE, mobile
Red Hat
<https://www.redhat.com/>
M: +34618488633 <http://redhatemailsignature-marketing.itos.redhat.com/>
<https://red.ht/sig>
On 30 January 2018 at 12:16, Peter Braun <pbraun(a)redhat.com> wrote:
Hi Jose, great work! I would reduce the numbers of memory charts
though,
there are four at the moment, one chart should be enough. Also do we need
the Pie charts for the first version? Would be nice to try out automatic
integration with a simplified version of this.
Am 30.01.2018 um 11:39 schrieb Jose Miguel Gallas Olmedo <
jgallaso(a)redhat.com>:
Hi,
Here's an early version of the dashboard:
https://snapshot.raintank.io/dashboard/snapshot/
qpN0BZTlesymRZ9ao9ytIga9OetdBeOf?refresh=5s&orgId=2
The 2 pie charts and worldmap are missing (still working on how to install
a Grafana plugin properly) and there's an extra "Panel Title" chart unused
(Any ideas what to put there?).
Please any comments/suggestions are welcome!
_______________________________________________
aerogear-dev mailing list
aerogear-dev(a)lists.jboss.org
https://lists.jboss.org/mailman/listinfo/aerogear-dev
_______________________________________________
aerogear-dev mailing list
aerogear-dev(a)lists.jboss.org
https://lists.jboss.org/mailman/listinfo/aerogear-dev
2284
days inactive
2291
days old
9 comments
3 participants
participants (3)
-
Evan Shortiss -
Jose Miguel Gallas Olmedo -
Peter Braun