Black-box vs white-box monitoring for legacy apps

WHAT THIS TESTS This checks whether you can deliver monitoring value quickly on a system you do not control internally, and whether you understand the tradeoffs each style of monitoring carries.

A GOOD ANSWER COVERS Black-box monitoring observes the system from the outside, the way a user or client does, with no knowledge of internals. Examples include synthetic probes hitting an endpoint, checking HTTP status, measuring response time, or validating a login flow. White-box monitoring relies on internal signals the application exposes: metrics, structured logs, traces, and counters reflecting queue depth, cache hit rate, or garbage collection. For a legacy app with poor instrumentation, start black-box because it requires no code changes and immediately tells you whether users are being served. You can stand up an external health check and latency probe in hours.

COMMON WRONG ANSWERS Insisting on white-box first when the whole premise is that internal instrumentation is poor, which would require invasive changes before you get any signal. Another error is treating black-box as sufficient long term, ignoring that it cannot explain why something failed.

LIKELY FOLLOW-UPS How would you incrementally add white-box signals without a rewrite? Which symptoms can black-box never detect? How do you avoid alerting only on what your probes happen to test?

ONE CONCRETE EXAMPLE You inherit a monolith with no metrics. Day one you deploy an external uptime check and a synthetic transaction that logs in and loads the dashboard every minute, alerting on failures or latency over two seconds. This gives real user-facing coverage immediately. Its limit shows when the synthetic passes but a rarely used report endpoint silently errors for ten percent of users; the probe never exercised it, and without white-box error rates you stay blind. Over the next sprints you add a request middleware emitting latency and error counters, gradually layering white-box visibility on top of the black-box safety net.