#grafana

Grafana 13.1 release: observability as code updates, extending Grafana Assistant across more data sources, and more

Bản phát hành Grafana 13.1 bổ sung nhiều cải tiến trong observability as code, truy vấn hỗ trợ AI (Grafana Assistant) và dashboard. Git Sync được nâng cấp với import dashboard trực tiếp, sync cấp root, hiển thị README.md nội tuyến và ký commit GPG/SSH/S/MIME. Grafana Assistant mở rộng hỗ trợ thêm 8 data source (Snowflake, Oracle, Elasticsearch, v.v.) và có sẵn trong Grafana Enterprise. Dashboard cải tiến với biến cấp section, trình chỉnh sửa truy vấn mới (multi-select, stacked view), bộ lọc nhanh, điều khiển hiển thị series, bảng lồng ghép và sao chép-dán style panel. Private Data Source Connect (PDC) bổ sung hỗ trợ MQTT, GitHub và IBM Db2.

Lập trình viên phát triển giải pháp giám sát và tự động hóa nên đọc bài này để khám phá cách Grafana 13.1 nâng cấp khả năng tích hợp AI, quản lý dữ liệu từ nhiều nguồn mới và cải tiến công cụ quản lý dashboard, giúp tối ưu hóa quy trình phát triển và triển khai hệ thống theo mô hình observability as code.

The inside scoop on alerting changes in Kubernetes Monitoring

Grafana Cloud's Kubernetes Monitoring có hai hệ thống cảnh báo riêng biệt: cảnh báo quản lý bởi data source (Mimir/Prometheus) và cảnh báo quản lý bởi Grafana. Việc cài đặt lại app sẽ tự động chuyển quy tắc cảnh báo sang hệ thống Grafana, có thể làm gián đoạn các tuyến thông báo đã cấu hình trong Alertmanager. Bài viết hướng dẫn cách nhận diện hệ thống cảnh báo đang sử dụng, nguyên nhân ngừng hoạt động sau khi cài đặt lại, và các phương pháp tốt nhất như sử dụng nút Update thay vì cài đặt lại, sao lưu quy tắc tùy chỉnh trước khi nâng cấp, và lưu ý rằng cảnh báo quản lý bởi data source (Prometheus/Loki) sẽ ngừng hoạt động từ tháng 4/2026.

Lập trình viên cần đọc bài này để tránh mất hiệu suất cảnh báo trong Kubernetes khi tái cài đặt Grafana Cloud, vì nó có thể phá hủy cấu hình thông báo hiện có và cảnh báo cũ sẽ chuyển sang hệ thống quản lý mới, gây mất liên lạc với các hệ thống cảnh báo bên ngoài.

Post-incident review for TanStack npm supply chain ransom incident

Grafana Labs published a post-incident review of the TanStack npm supply chain ransom attack that hit them on May 11 via the Mini Shai-Hulud campaign. A missed credential rotation allowed a threat actor to clone their entire repository collection and demand a ransom on May 16. Grafana Labs refused to pay, confirmed no unauthorized access to customer production systems, and verified the Grafana Cloud platform was unaffected. An independent Mandiant investigation corroborated internal findings, finding no evidence of code tampering or repository poisoning. The response included 1,500 security-focused PR reviews, auditing 280 GitHub applications, scanning 1,200 repositories, and a full-engineering security hardening week. Remediation steps included implementing a token broker, fine-grained access controls, short-lived tokens, and compartmentalizing GitHub organizations.

How to generate real-world load tests using Grafana Cloud k6 and production telemetry

Production load tests often fail to reflect real traffic because they rely on arbitrary assumptions. By querying Prometheus/Mimir metrics in Grafana Cloud, teams can extract actual request rates, p95/p99 latency baselines, and traffic shape patterns to build data-driven k6 test configurations. The tutorial walks through four steps: finding real request rates, establishing latency thresholds, identifying traffic patterns (constant, stress, spike, endurance), and wiring everything into a k6 ramping-arrival-rate scenario. Results feed back into the same Grafana dashboards used to derive the test parameters, closing the observability-testing loop. Grafana Assistant can also automate this process using natural language to generate k6 scripts from production telemetry.

Spend less time on repetitive tasks with the new automation feature in Grafana Assistant

Grafana Assistant now includes an automations feature (public preview) that lets teams schedule recurring AI prompts or skills to run in the background. Instead of manually asking the same observability questions each day, users can configure automations to run on a schedule — before standups, at shift handoffs, or during weekly reviews. Key use cases include automated on-call handoffs summarizing open incidents and SLO burn rates, daily dashboard and SLO reviews, skill freshness audits, and infrastructure memory digests. Automations run under the user's Grafana identity, save results to history, and can be shared or linked from incident reviews. Best practices include writing self-contained prompts, validating manually before scheduling, and separating reusable processes (skills) from reusable timing (automations).

GrafanaCON 2026: On-demand sessions are now available

All GrafanaCON 2026 sessions from Barcelona are now available on demand. Key announcements include Grafana 13 GA (dynamic dashboards, Git Sync, Grafana Advisor), Loki 4.0's Kafka-backed architecture delivering 20x less data scanned and 10x faster queries, k6 v2.0 with AI-assisted testing and agentic workflow integrations, and Pyroscope 2.0 with up to 95% reduction in symbol data. Grafana Assistant expands to OSS and Enterprise with new AI observability capabilities. Community sessions cover real-world deployments at Irish Rail, Google, Drive Terra, ESnet, and scientific research projects including ocean digital twins and nuclear materials research.

Automatically discover and remediate root causes with Grafana Assistant Investigations

Grafana Assistant Investigations is an AI-powered background agent in Grafana Cloud (currently in public preview) that automatically discovers incidents, identifies root causes, and can trigger auto-remediation workflows. It integrates with Grafana Alerting and IRM to kick off investigations when alerts fire, supports MCP server integrations for connecting external tools (GitHub, GitLab, Snowflake, LaunchDarkly, Jenkins), and can raise PRs, send Slack notifications, and schedule daily reports. Key use cases include collaborative incident investigation, catching overnight regressions, correlating business metrics with telemetry, and closing the loop from alert to code fix automatically.

Grafana Labs security update: Latest on TanStack npm supply chain ransomware incident

Grafana Labs disclosed a security incident originating from the TanStack npm supply chain attack (Mini Shai-Hulud campaign). Attackers gained unauthorized access to Grafana Labs' GitHub repositories and downloaded source code and internal operational data, then issued a ransom demand. Grafana Labs refused to pay, notified federal law enforcement, and confirmed no customer production systems or Grafana Cloud platform were compromised. Mitigation steps included rotating GitHub workflow tokens, auditing all commits since May 11, enhancing monitoring, and hardening CI/CD pipelines. An external audit by Mandiant is underway, with a post-incident report expected in June 2026.

Generate test scripts from natural language with Grafana Assistant: introducing k6 Script Authoring

Grafana Labs is introducing k6 Script Authoring, a new feature in Grafana Assistant that generates production-ready k6 performance test scripts from natural language descriptions. Users can create scripts by providing plain-language prompts, OpenAPI specifications, real telemetry data from Grafana Cloud (metrics, logs, traces), or repository context via GitHub MCP integration. Generated scripts include checks, thresholds, proper URL grouping, and optional hooks for Grafana Cloud Traces and Profiles, connecting test results to the broader observability stack.

ObservabilityCON 2026 is coming to San Francisco!

ObservabilityCON 2026 will be held at Pier 27 in San Francisco from October 19–21, 2026. The event will feature keynotes on Grafana Cloud and AI-powered observability, live demos of agentic tools, hands-on workshops, and networking. Early access registration is available now with limited 50%-off tickets. A call for presentations is open until July 1. For those who can't attend in person, ObservabilityCON on the Road is visiting São Paulo, London, Madrid, and Bengaluru this fall.

Security Observability with RSigma and the LGTM Stack

RSigma v0.9.0 can be wired into a full detection-to-alert pipeline using the Grafana LGTM stack (Loki, Grafana, Mimir) with Alloy as the OpenTelemetry collector. The setup uses Docker Compose with seven components: Helr replays pre-recorded Okta audit events, Alloy fans logs to both RSigma (for real-time Sigma rule evaluation) and Loki (for storage), and RSigma exposes per-rule Prometheus metrics with rule_title and level labels. Grafana alert rules use Go templates to dynamically map Sigma severity levels (critical/high/medium/low) to P1-P4 priorities, enabling automatic alert routing without manual wiring. The Okta cross-tenant impersonation scenario demonstrates the full chain: four ordered detections trigger a temporal_ordered correlation, producing a critical alert that routes to the appropriate notification channel. The entire alerting configuration is version-controlled and provisioned automatically.