tag: Grafana · 43 items
- Platform/SRE — Plan: Managed Grafana 13.2 is now GA with Git Sync for dashboard-as-code, dynamic dashboards, and PromQL in the CloudWatch data source — worth scheduling an upgrade this quarter; no forced-upgrade deadline exists for version 12.4, so no clock is running.
- CI/CD — Skip
- Leader — Skip
- Signals: Grafana 13.2 EOL 2027-05-18 · GA announcement
- Platform/SRE — Plan: Grafana 13.3 is a new GA minor for a core observability stack tool; schedule an upgrade this quarter to gain Notebooks and the UI refresh — cross-dashboard variables are still public preview, so hold off on that feature specifically until GA.
- CI/CD — Skip
- Leader — Skip
- Signals: Grafana 13.3 EOL 2027-07-20
- Platform/SRE — Learn: New GA capability in Grafana Cloud adds LLM-specific observability (latency, token costs, PII detection) on top of the existing stack; worth evaluating if the team manages AI workloads, but no deadline or forced migration.
- CI/CD — Learn: The deployment-gate angle (using agent quality experiments as CI gates) is genuinely novel, but requires Grafana Cloud adoption and AI agent deployments before it becomes actionable — nothing to change in pipelines today.
- Leader — Learn: Relevant for leaders investing in AI agent rollouts; frames the emerging observability-for-agents space but introduces no vendor-risk, licensing, or cost change requiring a decision now.
- Signals: GA announcement
- Platform/SRE — Learn: The GA Grafana Marketplace introduces paid, partner-backed plugins for data sources and observability use cases — worth knowing when evaluating Grafana extensions, but no operational change required today.
- CI/CD — Skip
- Leader — Learn: Grafana’s move to a commercial plugin marketplace signals a shift in its ecosystem model; worth monitoring for budget implications if teams adopt paid plugins, but no forced decision or cost change yet.
- Signals: GA announcement
- Platform/SRE — Learn: Public-preview feature in Grafana Cloud that can automate incident coordination steps (channel creation, paging, AI briefings); worth evaluating if your team runs Grafana Cloud, but not actionable until GA.
- CI/CD — Skip
- Leader — Skip
- Platform/SRE — Plan: Several new GA Grafana Cloud capabilities — including always-on Assistant Watchers that detect anomalies outside predefined alert rules — are worth evaluating for teams running Grafana Cloud as their observability platform. No hard deadline, but the features are GA and relevant to how observability stacks are architected this quarter.
- CI/CD — Skip
- Leader — Learn: Grafana Labs is positioning Grafana Cloud toward AI-assisted autonomous operations; understanding this capability direction is useful context for observability platform strategy and build-vs-buy decisions, but no pricing change or vendor risk event requires a decision now.
- Signals: GA announcement
- Platform/SRE — Plan: Assistant Watchers and Investigations are now GA in Grafana Cloud, adding AI-driven monitoring and automated evidence gathering to the observability workflow — evaluate adopting these for on-call runbooks this quarter; Managed Sandboxes remain public preview so hold off on that piece.
- CI/CD — Skip
- Leader — Learn: Grafana’s GA AI incident-response features signal a maturing market for AI-augmented observability — useful context for evaluating where AI tooling fits in the platform strategy, but no immediate decision required.
- Signals: GA announcement
- Platform/SRE — Learn: Adaptive Telemetry offers a strategy for decoupling observability costs from data volume — worth evaluating if Grafana Cloud is in your stack, but no deadline or breaking change makes this actionable now.
- CI/CD — Skip
- Leader — Learn: The value-based pricing framing and Rapid7 case study are useful context for FinOps conversations around observability spend, but there is no contract or pricing change forcing a decision.
- Platform/SRE — Learn: Platform engineers who run Grafana as part of their observability stack can absorb these Assistant improvements (faster dashboarding, better error recovery, evidence-backed alert investigation) to adjust how they use the tool, but no operational change or deadline is required.
- CI/CD — Skip
- Leader — Skip
- Platform/SRE — Plan: Four CVEs patched (including IAM/SCIM and OAuth2 fixes), none KEV-listed and EPSS scores are effectively zero — no active exploitation, but Grafana is standard in the observability stack; schedule an upgrade to 13.2.4 this quarter.
- CI/CD — Skip
- Leader — Skip
- Signals: CVE-2026-15577 — CISA KEV: not listed, EPSS 0.00 · CVE-2026-33374 — CISA KEV: not listed, EPSS 0.00 · CVE-2026-92539 — CISA KEV: not listed, EPSS n/a
- Platform/SRE — Plan: Grafana sits in most Platform teams’ observability stack; this patch fixes four CVEs (including an IAM/SCIM Enterprise fix), but none are KEV-listed and EPSS scores are near zero — no active exploitation confirmed. Schedule an upgrade to 13.1.8 this sprint rather than treating it as an emergency.
- CI/CD — Skip
- Leader — Skip
- Signals: CVE-2026-15577 — CISA KEV: not listed, EPSS 0.00 · CVE-2026-33374 — CISA KEV: not listed, EPSS 0.00 · CVE-2026-92539 — CISA KEV: not listed, EPSS n/a
- Platform/SRE — Plan: Four CVEs fixed including OAuth2 header leakage and an IAM/SCIM endpoint flaw; none are KEV-listed and EPSS scores are near zero, so no active exploitation anchor, but teams running Grafana 13.x in production should schedule an upgrade to 13.0.11 this sprint.
- CI/CD — Skip
- Leader — Skip
- Signals: major release (13.0) · CVE-2026-15577 — CISA KEV: not listed, EPSS 0.00 · CVE-2026-33374 — CISA KEV: not listed, EPSS 0.00 · CVE-2026-92539 — CISA KEV: not listed, EPSS n/a
- Platform/SRE — Plan: If your team runs Grafana Cloud with Adaptive Metrics, this new GA cost-first auto-apply mode can reduce active series counts without manual review — evaluate enabling it this quarter to lower observability ingestion costs.
- CI/CD — Skip
- Leader — Learn: Grafana’s cost-first auto-apply is a concrete example of automated FinOps tooling for observability spend — useful framing if you’re evaluating how to manage metrics cardinality costs at scale, but no leadership decision required.
- Signals: GA announcement
- Platform/SRE — Plan: Grafana is a common observability-stack component; upgrade to 13.2.3 to remediate CVE-2026-13719, CVE-2026-13720, and CVE-2026-81841 — none are KEV-listed and all carry EPSS 0.00, so this is a scheduled patch, not an emergency.
- CI/CD — Skip
- Leader — Skip
- Signals: CVE-2026-13719 — CISA KEV: not listed, EPSS 0.00 · CVE-2026-13720 — CISA KEV: not listed, EPSS 0.00 · CVE-2026-81841 — CISA KEV: not listed, EPSS 0.00
- Platform/SRE — Plan: Upgrade Grafana to 13.1.7 to remediate CVE-2026-13719, CVE-2026-13720, and CVE-2026-81841; none are KEV-listed and all carry EPSS 0.00, so schedule the patch this sprint rather than treating it as an emergency response.
- CI/CD — Skip
- Leader — Skip
- Signals: CVE-2026-13719 — CISA KEV: not listed, EPSS 0.00 · CVE-2026-13720 — CISA KEV: not listed, EPSS 0.00 · CVE-2026-81841 — CISA KEV: not listed, EPSS 0.00
- Platform/SRE — Plan: Grafana 13.2 on AMG brings Git Sync (dashboards as code tied to a repo), dynamic dashboards, and PromQL support in the CloudWatch data source — plan an evaluation and workspace upgrade this quarter if you run AMG; 13.2 is supported until 2027-05-18.
- CI/CD — Skip
- Leader — Learn: Git Sync enabling dashboard-as-code and PromQL queries against CloudWatch OTLP metrics represent a meaningful shift in managed observability capabilities, worth factoring into platform tooling direction — but no strategic decision is required now.
- Signals: Grafana 13.2 EOL 2027-05-18 · GA announcement
- Platform/SRE — Plan: Grafana 13.2 (EOL 2027-05-18) ships GA support for named, independent notification policy trees — worth adopting this quarter if you run Grafana-managed alerting across multiple teams. Evaluate upgrading to 13.2 and migrating team-owned alert rules to named policies incrementally.
- CI/CD — Skip
- Leader — Learn: Grafana’s approach to scaling alert routing across team boundaries is useful context when evaluating IDP or observability platform strategy, but no strategic, cost, or vendor-risk decision is required here.
- Signals: Grafana 13.2 EOL 2027-05-18 · GA announcement
- Platform/SRE — Plan: Grafana is a standard part of the observability stack platform teams own; 13.2.2 patches three CVEs (EPSS ≤ 0.01, none KEV-listed), so no emergency but schedule an upgrade of Grafana instances this sprint to stay current on security fixes.
- CI/CD — Skip
- Leader — Skip
- Signals: CVE-2026-15815 — CISA KEV: not listed, EPSS 0.01 · CVE-2026-76154 — CISA KEV: not listed, EPSS 0.00 · CVE-2026-79656 — CISA KEV: not listed, EPSS n/a
- Platform/SRE — Plan: Three CVEs patched in Grafana — none KEV-listed and all with near-zero EPSS scores, so no active exploitation, but teams running Grafana in their observability stack should schedule an upgrade to 13.1.6 this sprint.
- CI/CD — Skip
- Leader — Skip
- Signals: CVE-2026-15815 — CISA KEV: not listed, EPSS 0.01 · CVE-2026-76154 — CISA KEV: not listed, EPSS 0.00 · CVE-2026-79656 — CISA KEV: not listed, EPSS n/a
- Platform/SRE — Plan: Grafana is a common observability-stack component; 13.0.9 patches three CVEs, none KEV-listed and EPSS scores are negligible (0.01, 0.00, n/a), so no forced-action clock exists — schedule an upgrade to v13.0.9 this sprint as a routine security hardening step.
- CI/CD — Skip
- Leader — Skip
- Signals: major release (13.0) · CVE-2026-15815 — CISA KEV: not listed, EPSS 0.01 · CVE-2026-76154 — CISA KEV: not listed, EPSS 0.00 · CVE-2026-79656 — CISA KEV: not listed, EPSS n/a
- Platform/SRE — Plan: Grafana is a standard observability component in Platform’s stack; four CVEs are patched in 12.4.11, but none appear in CISA KEV and EPSS scores are near zero, so schedule the upgrade this sprint rather than treating it as an emergency hotfix.
- CI/CD — Skip
- Leader — Skip
- Signals: CVE-2026-12704 — CISA KEV: not listed, EPSS 0.00 · CVE-2026-15815 — CISA KEV: not listed, EPSS 0.01 · CVE-2026-76154 — CISA KEV: not listed, EPSS 0.00
- Platform/SRE — Learn: New GA capabilities in Grafana Cloud’s DEM stack—Session Replay and enhanced synthetic checks—could reshape how platform teams approach frontend observability alongside existing backend signals, but no action or deadline is attached.
- CI/CD — Skip
- Leader — Skip
- Platform/SRE — Plan: If your team uses Grafana Cloud Synthetic Monitoring with custom labels, plan to migrate dashboards, SLOs, alerts, and PromQL queries to the new label format (no
label_prefix, labels on all check metrics) before the March 1, 2027 deadline to avoid breakage. - CI/CD — Skip
- Leader — Skip
- Platform/SRE — Learn: The instrumentation quality report concept — systematically scoring services for metric/log/trace coverage and correlation gaps — is a useful framework for platform teams managing multi-service observability, though this is a Grafana Cloud-specific feature with no deadline or migration required.
- CI/CD — Skip
- Leader — Skip
- Platform/SRE — Skip
- CI/CD — Skip
- Leader — Learn: Grafana’s experience — multiple teams independently reinventing LLM client abstractions before centralizing into a shared SDK — is a recognizable pattern for any org beginning to scale AI feature development; no near-term tooling decision follows from this, but it’s a useful reference for how to govern internal AI adoption.
- Platform/SRE — Learn: The pattern of combining scheduled synthetic checks with real-user (RUM/frontend) telemetry is a useful mental model for SREs who hit false-green or false-red alert situations; no action required, but worth folding into observability stack design thinking.
- CI/CD — Skip
- Leader — Skip
- Platform/SRE — Learn: Platform teams running Grafana may find this useful for topology and dependency dashboards, but the Graphviz panel is still in private preview so no action is warranted yet.
- CI/CD — Skip
- Leader — Skip
- Platform/SRE — Learn: Session Replay extends the Grafana Cloud observability platform with visual user-journey reconstruction, useful context if the team already uses Grafana Cloud Frontend Observability — but the feature is in public preview so no adoption action yet.
- CI/CD — Skip
- Leader — Learn: If Grafana is the org’s observability standard, this preview signals Grafana expanding into frontend UX monitoring — worth tracking as it approaches GA to evaluate whether it replaces a separate session-replay tool in the stack.
- Platform/SRE — Learn: Grafana 13.2 introduces team-shared saved queries and a new panel sidebar — useful UX improvements for teams running Grafana as their observability frontend, but no breaking changes, security fixes, or architecture impact that would prompt a scheduled upgrade.
- CI/CD — Skip
- Leader — Skip
- Signals: Grafana 13.2 EOL 2027-05-18
- Platform/SRE — Plan: CVE-2026-17183 is patched in 13.2.0; EPSS is 0.00 and it is not KEV-listed, so there is no emergency, but schedule an upgrade of self-hosted Grafana this quarter to pick up the security fix and the alerting notifications API migration to v1beta1.
- CI/CD — Skip
- Leader — Skip
- Signals: CVE-2026-17183 — CISA KEV: not listed, EPSS 0.00
- Platform/SRE — Plan: Grafana is a common observability stack component; CVE-2026-17183 is not KEV-listed and carries EPSS 0.00, so no active exploitation signal, but schedule an upgrade to 13.1.4 this sprint as standard patch hygiene.
- CI/CD — Skip
- Leader — Skip
- Signals: CVE-2026-17183 — CISA KEV: not listed, EPSS 0.00
- Platform/SRE — Plan: CVE-2026-17183 is fixed in this patch for Grafana, which is common observability infrastructure. Not KEV-listed and EPSS is 0.00, so no forced urgency, but schedule an upgrade to 13.0.7 this sprint as standard security hygiene.
- CI/CD — Skip
- Leader — Skip
- Signals: major release (13.0) · CVE-2026-17183 — CISA KEV: not listed, EPSS 0.00
- Platform/SRE — Plan: Grafana 12.4.9 includes a security fix for CVE-2026-17183 (not KEV-listed, EPSS 0.00 — no active exploitation). Schedule an upgrade to 12.4.9 in your next maintenance window; no emergency action required.
- CI/CD — Skip
- Leader — Skip
- Signals: CVE-2026-17183 — CISA KEV: not listed, EPSS 0.00
- Platform/SRE — Plan: Grafana 13.1.2 fixes CVE-2026-13438 in software Platform teams commonly operate; schedule the upgrade this sprint. No forced timeline — the CVE is not KEV-listed and no active exploitation is reported.
- CI/CD — Skip
- Leader — Skip
- Signals: CVE-2026-13438 — CISA KEV: not listed, EPSS n/a
- Platform/SRE — Plan: Grafana Agent Observability is now GA on Grafana Cloud, offering structured monitoring for LLM agent behavior, prompt lineage, and scaling. Platform teams operating agent workloads should evaluate adopting it this quarter as a dedicated layer alongside their existing Grafana stack.
- CI/CD — Skip
- Leader — Learn: Grafana’s GA release of purpose-built agent observability tooling reflects a maturing category for AI workload monitoring; useful framing for leaders deciding where to invest observability capabilities as agent-based products scale.
- Signals: GA announcement
- Platform/SRE — Learn: Grafana is a staple observability tool for platform teams; an AI assistant that correlates queries across 30+ connected data sources could meaningfully shorten MTTD during incidents, worth evaluating if your stack is already Grafana-heavy, but no operational change is required today.
- CI/CD — Skip
- Leader — Skip
- Platform/SRE — Learn: Practical methodology for SREs who already run Grafana Cloud: pulling real traffic patterns and latency distributions into k6 test scenarios produces more honest baselines than synthetic assumptions. No action required today, but worth adopting as the team’s standard load-testing practice.
- CI/CD — Skip
- Leader — Skip
- Platform/SRE — Plan: This GA major release changes how Tempo is deployed at scale — removing the RF3 requirement reduces storage overhead and the new Kafka-compatible architecture decouples read/write paths. Teams running Tempo should schedule an upgrade evaluation this quarter to assess the operational and cost impact.
- CI/CD — Skip
- Leader — Learn: The RF3 removal and new architecture lower the infrastructure cost of running distributed tracing at scale, which is a useful data point if Tempo is part of the observability standard — but no strategic decision is forced by this release.
- Signals: GA announcement · major release (3.0)
- Platform/SRE — Learn: AI-assisted incident investigation and auto-remediation in Grafana Cloud is directly relevant to SRE workflows, but the feature is explicitly in public preview, capping this at Learn until GA.
- CI/CD — Skip
- Leader — Skip
- Platform/SRE — Learn: Grafana’s PIR confirms no customer production impact and no Grafana Cloud compromise from the TanStack npm attack; useful background on how supply chain attacks can reach observability vendors, but no operational change is required.
- CI/CD — Learn: The report details how a compromised npm package triggered a ransom incident and exposed a missed credential rotation — valuable for evaluating the depth of your own supply chain audit and rotation runbooks, even though Grafana’s customer pipelines were unaffected.
- Leader — Learn: Grafana’s independently audited transparency report (Mandiant confirmed no code tampering or repository poisoning) is useful context for assessing vendor security maturity; no strategic action is required since customer exposure was ruled out.
- Platform/SRE — Learn: Describes Grafana Cloud’s knowledge-graph approach to correlating logs, traces, metrics, and profiles across services, pods, and clusters in a single view — useful mental model for teams evaluating or already running Grafana Cloud’s Application Observability and Kubernetes Monitoring products, but no new release or actionable change.
- CI/CD — Skip
- Leader — Skip
- Platform/SRE — Plan: Grafana 13.1 ships GA improvements to Git Sync — GitHub App auth, GitLab/Bitbucket support, and in-place provisioned-folder imports — that meaningfully advance dashboard-as-code workflows for teams already on Grafana. Evaluate adopting these features this quarter; EOL for 13.1 is 2027-03-20, so no immediate upgrade pressure.
- CI/CD — Skip
- Leader — Learn: Grafana’s investment in native GitOps (Git Sync) and AI-assisted querying across more data sources signals where observability tooling is heading; useful context for evaluating observability-as-code as an org standard, but no strategic decision is forced by this release.
- Signals: Grafana 13.1 EOL 2027-03-20 · GA announcement
- Platform/SRE — Learn: Useful context for teams running Volkov Labs BI plugins on Grafana: the maintenance window is extended and Grafana 13 / React 19 compatibility is done, but no action is required now and the post-2026 path remains undefined.
- CI/CD — Skip
- Leader — Plan: If the org is standardized on Volkov Labs BI plugins, the finite maintenance window expiring at end of 2026 warrants a strategic review this quarter — engage Grafana Labs on long-term product direction or evaluate alternative BI visualization solutions before the commitment lapses.