What to monitor first
- Uptime. The public site, with 1-minute checks from at least two regions.
- SSL. Expiry windows at 30/14/3 days for every cert in production.
- DNS. Apex and www records, so a registrar mistake fires immediately.
- Email deliverability. Blacklist status on sending IPs and domains.
What to skip (for now)
Skip synthetic transaction tests until you have a revenue-bearing multi-step flow. Skip log aggregation until your team is large enough that someone owns it. Skip dashboards no one looks at. The right monitoring stack does less, but does it reliably.
Ownership and routing
Every alert needs a named owner — not "the team", a person. Anonymous alerts get triaged last and resolved slowest. Routing is simpler than it sounds: one channel for production-critical, one for informational, and a written rule for which is which.
Growing the stack
Add monitors when an incident reveals a gap — not preemptively. Every monitor has an ongoing maintenance cost; the ones added "just in case" are the first to go stale and start firing false positives. Workflow continuity in the dashboard helps you see which monitors are still pulling their weight.