Grafana
Grafana is the front door to a whole observability stack, so Antimetal treats it that way. Connecting Grafana also connects the data sources wired into it — Prometheus, Loki, Tempo, and Pyroscope — so you don't need a separate connection for each one.
What Antimetal does with Grafana
- Query the data sources behind Grafana: Prometheus metrics, Loki logs, Tempo traces, Pyroscope profiles
- Read dashboards to learn which signals your team already considers meaningful
- Inspect alert rules and alerting state to see what fired and why
- Correlate a metric spike with the logs and traces from the same window
Connecting Grafana
Grafana Cloud
Prerequisites
- A Grafana Cloud account with access to Loki, Tempo, or Prometheus
- Permissions to view data sources and create access policies
Go to grafana.com/profile/org and select your organization.
From the left sidebar, go to Connections > Data Sources and click your Loki, Tempo, or Prometheus instance.
Copy the URL under Connection (for example
https://logs-prod-036.grafana.net) and the User under Authentication — a numeric ID such as1264142.Scroll to Access Policies, click Create Access Policy, name it
Antimetal, enable all read permissions, then click Create Token.Copy the token — it is shown only once.
Provide the full URL, the numeric Username, and the access policy token as the Password.
Self-hosted
A self-hosted instance usually lives inside your own network. Review the self-hosted observability requirements below before connecting.
Prerequisites
- A self-hosted Grafana instance, reachable over HTTPS from Antimetal
- Permission to create a service account and token in Grafana
Note the base URL of your Grafana instance, for example
https://grafana.internal.example.com.In Grafana, go to Administration > Service Accounts > Add service account. Assign the Viewer role for read-only access, then add a token.
Copy the token when it is shown — it cannot be retrieved later.
Provide the base Grafana URL and the Viewer-scoped Service Account Token.
Follow whichever path matches your deployment — you only need one.
Permissions and access
Antimetal uses read-only access: a Viewer-scoped service account token for self-hosted instances, or a read-only access policy token for Grafana Cloud. No write operations are performed.
All tenant data is processed in isolated environments. See security and compliance for details.
Related integrations
Need help?
Contact us via Slack or at support@antimetal.com.