Best practices for website monitoring
Follow the below listed best practiced while creating website monitors,
1. Web transaction (browser)
Parallel polling for shopping/booking websites
Avoid parallel polling for websites like ekart, booking sites because parallel polling leads to discomfort to the transaction.
Incognito mode recording
Please make sure to record the transaction in Incognito mode to avoid autofill and any cache-related issues.
Disable captcha in websites
To have a successful transaction monitoring experience, please make sure to disable or make an exception for Site24x7 for any type of captcha authentication.
Block domains
Please use block domains to avoid unnecessary page loading.
2. Content Checks
- Content Checks > Should contain
Add crucial content (or) footer text in the Should contain string(s) field to ensure that the server is sending proper responses. - Content Checks > XPath/JSONPATH Expressions
For Rest API, the response would be in JSON or XML formats. It is ideal to configure JSONPATH/XPATH expression to ensure that the response is valid.
3. SSL
It is best to configure alerts based on expiry date and certificate thumbprint using Threshold Profile. Do not ignore certificate errors such as certificate chain errors or certificate revoked errors.
4. Domain Expiry
Configure the WHOIS server, if present, to query domain data. This can help to avoid querying from a default server. We suggest adding crucial content in the Should contain string(s) field to ensure that the returned WHOIS data contains expected data.
5. DNS
- Be aware of Record Changes
Changes in the DNS records without your knowledge might result in service outages. To keep track of this, you can use any of the two options mentioned below:- Configure the Answer Validation option to compare the configured record values with the records from the Answer section.
- Enable the Notify when the records are modified (Threshold Profile > Threshold Configuration) option to track the records using checksum.
- DNSSEC Extension
Enable DNSSEC option from the Add/Edit form so that we can perform DNSSEC verification from our end to ensure that the chain of trust remains intact.
6. Website Defacement
Configure the Allow Domains field to avoid unwanted defacement identification. Add pages manually when auto-discovery fails. Configure username and password for the sites that require basic authentication
7. Real-time Blocklist Check
Monitor the latest IP addresses from the domain. This can be done by setting the Resolve Hostname(s) on every poll field to Yes.
8. Trust the server SSL Certificate
Enable this option to ensure that your certificate is valid and trusted.
9. Threshold profile
- Threshold profile > Notify when the website content is modified:
For static webpages, the content of the website would remain the same for long time periods.
Enable Notify when the website content is modified so when the server returns partial content or when someone tampers with your website without your knowledge, you can get notified immediately. - Threshold Profile > Notify when website content changes by percentage:
For dynamically changing websites, the content of the website will change frequently. However, these changes will be in a similar pattern. For example, the website will always change by some percentage. So, enable Notify when website content changes by percentage to get notified if the content is modified. - Threshold Profile > Response time threshold for primary and secondary locations:
In peak hours, the rate of requests might increase and can affect the performance of the servers. So, configure the Response time threshold for primary and secondary locations to identify performance latency or network delays.
10. Brand Reputation
Manually add pages when the required pages are missing from the auto-discovery result.
11. PORT (Custom Protocol) / UDP
Command and Content Checks
Configure Command and Content Checks to ensure that your application is functioning as expected.
12. ISP Latency
Latency, Hop Count, Jitter
Configure thresholds for Latency, Hop Count, and Jitter to stay updated on the key performance metrics and ensure better performance.