OCI Observability Add-Ons¶

Both the Drone Shop and CRM Portal use a modular observability architecture. Each OCI service activates independently via environment variables — no code changes required.

Add-On Matrix¶

Activation Guide¶

Level 0: No Observability (App + Database Only)¶

# Just the database connection — app runs fully functional
export ORACLE_DSN="myatp_low"
export ORACLE_PASSWORD="<password>"
# Prometheus /metrics is always available (built-in)

Level 1: APM Traces¶

export OCI_APM_ENDPOINT="https://<apm-data-upload-endpoint>/20200101/opentelemetry/private/v1/traces"
export OCI_APM_PRIVATE_DATAKEY="<private-data-key>"

What you get: - Distributed traces in OCI APM Trace Explorer - Service topology in OCI APM Topology - SQL spans with DbOracleSqlId for DB Management bridging - 8+ spans per request with full request lifecycle

Level 2: Real User Monitoring (RUM)¶

export OCI_APM_RUM_ENDPOINT="https://<apm-data-upload-endpoint>"
export OCI_APM_PUBLIC_DATAKEY="<public-data-key>"

What you get: - Browser performance monitoring in OCI APM RUM - Session Explorer with user journey replay - Custom events (add-to-cart, checkout, search) - JavaScript error tracking

Level 3: Structured Logging¶

export OCI_LOG_ID="ocid1.log.oc1...."
export OCI_LOG_GROUP_ID="ocid1.loggroup.oc1...."

What you get: - Structured JSON logs in OCI Logging - oracleApmTraceId for APM ↔ Log Analytics correlation - Security event logging with MITRE/OWASP classification - PII masking (email, phone) before external push

Level 4: Log Analytics¶

OCI Console → Logging → Log Group → Enable Log Analytics

What you get: - Full-text search across application logs - Saved searches for common patterns - Cross-service log correlation via oracleApmTraceId - Dashboard widgets for log volume, error rates

Level 5: Custom Metrics & Alarms¶

export OCI_COMPARTMENT_ID="ocid1.compartment.oc1...."

Then run:

COMPARTMENT_ID="$OCI_COMPARTMENT_ID" \
SHOP_PUBLIC_URL="https://shop.${DNS_DOMAIN}" \
./deploy/oci/ensure_monitoring.sh

What you get: - 9 custom metrics in OCI Monitoring (health, errors, latency, orders, inventory) - 5 alarms (error rate, DB latency, health-down, CRM sync stale, low stock) - OCI Health Checks (HTTP /ready every 30s) - OCI Notifications for alarm delivery

Level 6: Database Observability¶

AUTONOMOUS_DATABASE_ID="ocid1.autonomousdatabase.oc1...." \
./deploy/oci/ensure_db_observability.sh

What you get:

Level 7: Stack Monitoring¶

OCI Console → Stack Monitoring → Create Discovery
→ Select OKE cluster → Discover applications

What you get: - Application topology visualization - Component health monitoring - Metric correlation across application stack - Alert rules for component health

Level 8: Security Services¶

# WAF protection rules
LOAD_BALANCER_OCID="<lb-ocid>" ./deploy/oci/ensure_waf.sh

# Cloud Guard
./deploy/oci/ensure_cloud_guard.sh

# Security Zones
./deploy/oci/ensure_security_zones.sh

# Vault
./deploy/oci/ensure_vault.sh

What you get: - WAF: SQLi/XSS/CmdInj/PathTraversal block + rate limiting - Cloud Guard: Security posture monitoring + auto-remediation - Security Zones: Compliance policy enforcement - Vault: HSM-backed secret management

Dependency Graph¶

flowchart TD
    App["Application<br/>(Level 0)"]

    APM["APM Traces<br/>(Level 1)"]
    RUM["RUM<br/>(Level 2)"]
    Logging["Logging<br/>(Level 3)"]
    LogAn["Log Analytics<br/>(Level 4)"]
    Metrics["Metrics + Alarms<br/>(Level 5)"]
    DBOBS["DB Management + OPSI<br/>(Level 6)"]
    Stack["Stack Monitoring<br/>(Level 7)"]
    Security["Security Services<br/>(Level 8)"]

    App --> APM
    App --> Logging
    App --> Metrics
    APM --> RUM
    Logging --> LogAn
    APM -.->|SQL_ID bridge| DBOBS
    App --> DBOBS
    App --> Stack
    App --> Security

    style App fill:#7C3AED,color:#fff
    style APM fill:#059669,color:#fff
    style RUM fill:#059669,color:#fff
    style Logging fill:#2563EB,color:#fff
    style LogAn fill:#2563EB,color:#fff
    style Metrics fill:#D97706,color:#fff
    style DBOBS fill:#DC2626,color:#fff
    style Stack fill:#7C3AED,color:#fff
    style Security fill:#DC2626,color:#fff