Monitors and check types
12 check types, what each verifies, and the knobs that matter: assertions, inline subchecks, dual-stack behavior, intervals.
The 12 types
http, http_headers, tcp, dns, dns_hygiene, domain, ssl_cert, smtp,
imap, ping, traceroute, and agent. The check-type reference
explains each in plain language; this page covers the configuration details.
HTTP monitors
- Assertions: expected status code, a keyword the body must contain, or a regular expression against the body.
- Inline subchecks: an http monitor carries TLS-certificate (expiry, issuer, self-signed detection), security-header, and DNS-hygiene subchecks, so one monitor covers what used to take four.
- Redirects: followed up to 5 hops; every hop is validated against SSRF targets (private ranges, link-local, metadata endpoints) before it is fetched.
Dual-stack behavior
Checks run across all A and AAAA records with per-family and per-IP results. Whether an
IPv6-only failure counts as degraded or as failed is your call, per monitor. dns_ms is
reported apart from total latency.
DNS specifics
A dns monitor compares the answer set against your expectation, and can cross-reference
its answers against another monitor’s answer set; a divergence runs through the normal
incident pipeline. dns_hygiene checks SPF, DMARC, and CAA as configuration. domain
watches NS, SOA, DNSSEC, and WHOIS expiry.
Intervals
Intervals are configured per monitor; the floor depends on the plan: Free 300 s, Pulse 60 s, Sentinel 30 s, Command 15 s, Enterprise 10 s. Full limit tables live on plans and limits.
Agent monitors
The agent type binds a monitor to a host agent: availability with
a grace period, CPU, memory, and disk against thresholds, and named services with
anti-flapping grace. Missing data counts as pending, never as a false alarm; a silent
agent counts as down.