Skip to main content

​
Grafana

Connect your Grafana instance to enable CloudThinker agents to access dashboards, query metrics, and reference visualizations during analysis.

​
Supported Platforms

PlatformSupport
Grafana OSS9.x, 10.x
Grafana EnterpriseAll versions
Grafana CloudAll tiers

​
Setup

1

Open Grafana

Navigate to your Grafana instance and sign in with admin access.
2

Navigate to Service Accounts

Go to Administration → Users and access → Service Accounts.
3

Create Service Account

Click Add service account and enter:
  • Name: cloudthinker-readonly
  • Role: Select Viewer
Click Create to create the service account.
4

Generate Token

On your new service account page:
  1. Click Add service account token
  2. Enter a token name (e.g., cloudthinker-token)
  3. Optionally set an expiration date
  4. Click Generate token
  5. Immediately copy the token (it won’t be shown again)
5

Add Connection in CloudThinker

Navigate to Connections → Grafana and enter:
  • Grafana URL: Your instance URL (e.g., https://grafana.your-domain.com)
  • Service Account Token: The token you just copied
Copy the service account token immediately after generation. Grafana will not show it again, and you’ll need to create a new token if lost.

​
Connection Details

FieldDescriptionExample
GRAFANA_URLYour Grafana instance URLhttps://your-instance.grafana.net
GRAFANA_SERVICE_ACCOUNT_TOKENThe generated service account tokenglsa_xxxxx...

​
Required Permissions

​
Minimum (Viewer Role)

  • View dashboards
  • Query data sources
  • View annotations
  • Access folder contents
All Viewer permissions, plus:
  • Create annotations
  • Save dashboard snapshots

​
Agent Capabilities

Once connected, agents can:
CapabilityDescription
Dashboard AccessReference existing dashboards in analysis
Metric QueriesQuery data sources through Grafana
Annotation ReadingAccess dashboard annotations for context
Alert StatusCheck Grafana alerting rules status

​
Example Prompts

@alex check the AWS cost dashboard for anomalies
@kai reference the Kubernetes cluster dashboard
@tony query database metrics from the Grafana data source

​
Supported Data Sources

CloudThinker can query through Grafana’s configured data sources:
Data SourceQuery Support
PrometheusPromQL queries
InfluxDBInfluxQL / Flux
ElasticsearchLucene / KQL
CloudWatchCloudWatch metrics
LokiLogQL queries

​
Troubleshooting

  • Verify Grafana URL is accessible
  • Check SSL certificate is valid
  • Ensure no proxy is blocking the connection
  • Confirm Grafana is running
  • Verify service account token is correct
  • Check token hasn’t expired
  • Ensure service account is active
  • Confirm no IP restrictions on the account
  • Navigate to Administration → Service Accounts
  • Select the CloudThinker service account
  • Generate a new token
  • Update the token in CloudThinker connection settings
  • Verify service account has Viewer role
  • Check folder permissions include the service account
  • Ensure dashboards aren’t in restricted folders

​
Security Best Practices

  • Viewer role only - Never grant Editor or Admin roles
  • Token expiration - Set appropriate expiration on tokens
  • Token rotation - Rotate tokens every 90 days
  • IP restrictions - Consider limiting access to CloudThinker IPs
  • Audit logs - Enable Grafana audit logging

Elasticsearch Connection

Connect log data source

AWS Connection

Connect CloudWatch metrics