Monitoring
Logs
FMD Server writes logs to stderr and to syslog.
To view the messages in syslog:
journalctl -t fmd-server
less /var/log/syslog | grep fmd-server
Metrics
FMD Server exposes metrics that can be scraped by Prometheus. There is also a Grafana template.
By default, metrics are exposed on http://[::1]:9100/metrics.
Using localhost is intentional, for security reasons.
Note that the metrics address/port is independent of the main server address/port. FMD Server can serve both independently of each other, including on separate addresses and ports.
You can change the metrics endpoint to a different address and port in the config.yml.
For example, when running in a container you want to listen on a specific IP address
or on all interfaces inside the container.