Grafana

#What Antimetal does with Grafana

• Query the data sources behind Grafana: Prometheus metrics, Loki logs, Tempo traces, Pyroscope profiles
• Read dashboards to learn which signals your team already considers meaningful
• Inspect alert rules and alerting state to see what fired and why
• Correlate a metric spike with the logs and traces from the same window

#Connecting Grafana

There are 2 ways to connect Grafana. Follow whichever path matches your deployment; you only need one.

Grafana Cloud

Prerequisites

• A Grafana Cloud account with access to Loki, Tempo, or Prometheus
• Permissions to view data sources and create access policies

1. Open the Grafana Cloud Portal

   Go to grafana.com/profile/org and select your organization.

2. Access the data source instance

   From the left sidebar, go to Connections > Data Sources and click your Loki, Tempo, or Prometheus instance.

3. Copy your URL and username

   Copy the URL under Connection (for example https://logs-prod-036.grafana.net) and the User under Authentication — a numeric ID such as 1264142.

4. Create an access policy token

   Scroll to Access Policies, click Create Access Policy, name it Antimetal, enable all read permissions, then click Create Token.

   Copy the token — it is shown only once.

5. Submit credentials to Antimetal

   Provide the full URL, the numeric Username, and the access policy token as the Password.

Self-hosted

A self-hosted instance usually lives inside your own network. Review the self-hosted observability requirements below before connecting.

Prerequisites

• A self-hosted Grafana instance, reachable over HTTPS from Antimetal
• Permission to create a service account and token in Grafana

1. Confirm your instance URL

   Note the base URL of your Grafana instance, for example https://grafana.internal.example.com.

2. Create a service account token

   In Grafana, go to Administration > Service Accounts > Add service account. Assign the Viewer role for read-only access, then add a token.

   Copy the token when it is shown — it cannot be retrieved later.

3. Submit credentials to Antimetal

   Provide the base Grafana URL and the Viewer-scoped Service Account Token.

#Permissions and access

Antimetal uses read-only access: a Viewer-scoped service account token for self-hosted instances, or a read-only access policy token for Grafana Cloud. No write operations are performed.

All tenant data is processed in isolated environments. See security and compliance for details.