Skip to main content
Delegrity

Observe mode

See what Delegrity would decide on real traffic before it controls anything.

Start by watching. In observe mode, Delegrity records each action with the decision it would have made, and changes nothing.

What's recorded

For each observed action:

  • the request, as your agent sent it;
  • the first decision Delegrity reached for it, from your mandates and policy;
  • a comparison between that decision and what actually happened.

Nothing in observe mode can stop, hold or change an action, and recording can't slow the action down.

Use it to roll out

  1. Set the action to observed in the console. Your own actions start observed.
  2. Let real traffic run for a while.
  3. Review the differences in the console. A person records what each difference was, such as a policy that's too strict or a request that really should be stopped.
  4. When the decisions match what you expect, move the action to enforced.

What a match means

A match says the decision would have passed. It doesn't say the action would have run: the later checks, such as the single-use grant, never run for an observed action.

View as Markdown