Grafana Labs News

• 

  Grafana v5.4 Released
  • sorangutan  

  1
  1
  Posts
  103
  Views

  

  v5.4 Stable released!

  Grafana v5.4 brings new features, many enhancements and bug fixes. This article will detail the major new features and enhancements.

  • Alerting Limit false positives with the new For setting
  • Google Stackdriver Now with support for templating queries
  • MySQL gets a new query builder!
  • Graph Panel Highlight time regions and more
  • Team Preferences Give your teams their own home dashboard

  Alerting

  Grafana v5.4 ships with a new alert rule setting named For which is great for removing false positives. If an alert rule has a configured For and the query violates the configured threshold it will first go from OK to Pending. Going from OK to Pending Grafana will not send any notifications. Once the alert rule has been firing for more than For duration, it will change to Alerting and send alert notifications. Typically, it’s always a good idea to use this setting since it’s often worse to get false positive than wait a few minutes before the alert notification triggers.

  

  In the screenshot you can see an example timeline of an alert using the For setting. At ~16:04 the alert state changes to Pending and after 4 minutes it changes to Alerting which is when alert notifications are sent. Once the series falls back to normal the alert rule goes back to OK. Learn more.

  Additionally, there’s now support for disable the sending of OK alert notifications. Learn more.

  Google Stackdriver

  Grafana v5.3 included built-in support for Google Stackdriver which enables you to visualize your Stackdriver metrics in Grafana. One important feature missing was support for templating queries. This is now included together with a brand new templating query editor for Stackdriver.

  

  The Stackdriver templating query editor lets you choose from a set of different Query Types. This will in turn reveal additional drop downs to help you find, filter and select the templating values you’re interested in, see screenshot for details. The templating query editor also supports chaining multiple variables making it easy to define variables that’s dependent on other variables.

  Stackdriver is the first datasource which has support for a custom templating query editor. But starting from Grafana v5.4 it’s now possible for all datasources, including plugin datasources, to create their very own templating query editor.

  Additionally, if Grafana is running on a Google Compute Engine (GCE) virtual machine, it is now possible for Grafana to automatically retrieve default credentials from the metadata server. This has the advantage of not needing to generate a private key file for the service account and also not having to upload the file to Grafana. Learn more.

  Please read Using Google Stackdriver in Grafana for more detailed information on how to get started and use it.

  MySQL Query Builder

  Grafana v5.4 comes with a new graphical query builder for MySQL. This brings MySQL integration more in line with some of the other datasources and makes it easier for both advanced users and beginners to work with timeseries in MySQL. Learn more about it in the documentation.

  

  Graph Panel Enhancements

  Grafana v5.4 adds support for highlighting weekdays and/or certain timespans in the graph panel. This should make it easier to compare for example weekends, business hours and/or off work hours.

  

  Additionally, when rendering series as lines in the graph panel, should there be only one data point available for one series so that a connecting line cannot be established, a point will automatically be rendered for that data point. This should make it easier to understand what’s going on when only receiving a single data point.

  

  Team Preferences

  Grafana v5.4 adds support for customizing home dashboard, timezone and theme for teams, in addition to the existing customization on Organization and user Profile level.

  1. Specifying a preference on User Profile level will override preference on Team and/or Organization level
  2. Specifying a preference on Team level will override preference on Organization level.

  Changelog

  Checkout the CHANGELOG.md file for a complete list of new features, changes, and bug fixes.

  
  
  /blog/2018/12/03/grafana-v5.4-released/
• 

  timeShift(GrafanaBuzz, 1w) Issue 70
  • sorangutan  

  1
  1
  Posts
  107
  Views

  

  Welcome to TimeShift

  Lots to catchup on this week after taking a break for Thanksgiving, so let’s dive in! This week we share the video from the ‘Logging is coming to Grafana’ talk, an article on how Stack Overflow tackles monitoring, a shout out from AWS re:Invent 2018, and a plugin preview for Timestream, Amazon’s new TSDB for IoT apps.

  See an article we missed? Contact us!
  

  ---

  

  Latest Stable Release: Grafana v5.3.4

  Updates in this release

  • Alerting: Delete alerts when parent folder was deleted #13322
  • MySQL: Fix $__timeFilter() should respect local time zone #13769
  • Dashboard: Fix datasource selection in panel by enter key #13932
  • Graph: Fix table legend height when positioned below graph and using Internet Explorer 11 #13903
  • Dataproxy: Drop origin and referer http headers #13328 #13949, thx @roidelapluie

  This release also includes the file exfiltration vulnerability security fix (added to 5.3.3)

  Download Grafana v5.3.4 Now

  
  

  ---

  From the Blogosphere

  VIDEO - Logging is Coming to Grafana: In our last issue of TimeShift we shared the slides from David Kaltschmidt’s recent OSMC talk that showed off some of the new Prometheus inspired logging he’s been working on. You can now watch the video of the talk and see it in action.

  VIDEO - AWS re:Invent 2018: Chris Dyl, Director of Platform at Epic Games, Speaks at Monday Night Live: We always love to get shout-outs from companies using Grafana, esp at events like AWS re:Invent 2018. In this talk, Chris shows off Epic Games’ epic analytics pipeline infra, which includes Grafana.

  Pro Tips: Using Grafana in Quality Assurance: Quality assurance is a priority at Evolution Gaming, the world leader in live casino gaming, and as Andrejs Kalnacs, Lead Software Developer in Test, said during his GrafanaCon EU talk in March, Grafana has been a game changer.

  carbon-relay-ng v0.11.0 Available: A new veresion of carbon-relay-ng has been released that includes a memory leak fix, a connection pooling fix, better logging, major input refactors and more.

  Stack Overflow: How We Do Monitoring - 2018 Edition: A very comprehensive article in a series about Stack Overflow’s architecture. This article goes in-depth into their monitoring stack. In 2016 Kyle Brandt discussed the culture and reality of monitoring at Stack Overflow at GrafanaCon NYC - might also be worth a watch

  VIDEO - How to use Grafana with AWS CloudWatch: Step-by-step video guide on how to connect AWS Cloudwatch to Grafana. There’s also a written article to use for reference.

  Monitoring docker containers on Windows using Prometheus + Grafana: Microsoft has made installing Docker on the latest version of Windows easier. In the latest version of Docker CE you can now try out kubectl operations via the “Enable Kubernetes” option. This article will show you how to get everything up and running.

  
  

  ---

  

  Get your GrafanaCon LA Tickets Now!

  Join us in Los Angeles, California February 25-26, 2019 for 2 days of talks focused on Grafana and the open source monitoring ecosystem. Learn about Grafana and new/upcoming features and projects in the broader ecosystem like Prometheus, Graphite, InfluxDB, Kubernetes, and more.

  Register Now

  Join us at GrafanaCon LA and learn about:

  

  We've already confirmed these awesome speakers and will be adding more!

  Brendan Burns Distinguished Engineer & Kubernetes co-founder Microsoft Stig Sorensen HEAD OF TELEMETRY BLOOMBERG Sean Hanson SOFTWARE DEVELOPER BLOOMBERG Dave Cadwallader Site Reliability Architect DNANEXUS
  Ben Kochie Staff Backend Engineer, Monitor GitLab Paul Dix Co-Founder | CTO InfluxData
  

  
  

  ---

  Featured Job

  As Grafana continues to grow we’re building our European sales team and are hiring Business Development Representatives based in our Stockholm office. This is a rare opportunity to join an early stage startup and take an instrumental role in helping to build the sales function. Apply now.

  View All our Open Positions

  
  

  ---

  
  

  Grafana Plugin Update

  A new premium plugin, a new polystat panel plugin, plus some updates to Instana and the Akumuli datasouce plugins. To update any of your plugins in your on-prem Grafana, use the grafana-cli tool, or for Hosted Grafana update with one-click.
  

  NEW PREMIUM PLUGIN
  Amazon Timestream - Amazon announced their new TSDB called Timestream at AWS re:Invent 2018. If you’re a Grafana Enterprise customer, you will have an opportunity to get a preview of the Timestream plugin for Grafana.

  Install

  

  NEW PLUGIN
  Polystat Panel - This new panel is a multi-stat panel in the hexagonal (honeycomb) style. Each hexagon represents a metric, and colors are used to signal the state making this an effective way to visualize multiple metrics. The composites feature allows you to combine Hexagons/metrics into one hexagon. The panel has lots of options for layout, setting thresholds and styling.

  Install

  

  UDPATED PLUGIN
  Instana Datasource - Version v1.3.1 adds support for changing legend format to adjust the legend display. Also, it is now possible to customize legend keys in the Graph panel. The new Legend format field lets you combine different variables like the Service label or Entity type with your own custom text.

  Install

  

  UPDATED PLUGIN
  Akumuli Datasource - This plugin received a general update which includes a number of small bugfixes.

  Install

  
  

  ---

  
  

  Upcoming Events

  In between code pushes we like to speak at, sponsor and attend all kinds of conferences and meetups. We also like to make sure we mention other Grafana-related events happening all over the world. If you’re putting on just such an event, let us know and we’ll list it here.

  

  Visualizing Time-Series Data with Grafana | Webinar - December 4, 2018, 12:00pm EST: Matt Toback and Diana Hsieh - Visualization is a key component for generating meaningful insights from time-series data. Grafana, an opensource visualization platform, is a great option for users looking to create dynamic dashboards that can be shared across teams. In recent releases, Grafana has introduced tighter integrations with both TimescaleDB and PostgreSQL. This includes a graphical query builder easier iteration when working with complex SQL queries.

  In this webinar, we will discuss how visualization coupled with a flexible full SQL interface can drive powerful insights that inform both technical and business decisions. Additionally, the webinar will include a demo covering basic dashboards that users can use to jumpstart their own internal visualization systems.

  Register Now
  

  KubeCon + CloudNativeCon North America 2018 | Seattle, WA - December 10-13, 2018: David Kaltschmidt: On the OSS Path to Full Observability with Grafana - Grafana is coming "off the wall". To make it more useful for interactive debugging, David and his team have already integrated two pillars of observability - metrics and logs. They are currently adding tracing to complete the incident response experience. All to minimize the cost of context switching during those crucial minutes after getting paged.

  This talk will demonstrate the various methods we've used to link the data together. Prometheus is providing the metrics. Via its histograms, request latencies can be extracted to inform each tracing span from Jaeger. Grafana also ensures that lines from your log aggregation system are annotated with span and trace IDs, as well as the other way around: associating logged values with spans.

  David will show how these OSS parts should be deployed to achieve full observability in an engaging user experience that saves valuable minutes.

  We are also a proud sponsor of the Cloud Native Computing Foundation's flagship conference. Join Kubernetes, Prometheus, Cortex, OpenTracing, Fluentd, gRPC, containerd, rkt, CNI, Envoy, Jaeger, Notary, TUF, Vitess, CoreDNS, NATS, Linkerd and Helm as the community gathers for four days to further the education and advancement of cloud native computing.

  Register Now
  

  ---

  
  

  Tweet of the Week

  We scour Twitter each week to find an interesting/beautiful dashboard or monitoring related tweet and show it off! #monitoringLove

  Just had some fun working on this https://t.co/vJKI44MTT8
  
  Nothing crazy but just a simple app that downloads raw data, feed it to elasticsearch and fetches it from grafana. Sounds fun, huh?
  
  Spend $0 except my Friday night hours which is awesome! 😎 pic.twitter.com/VAVOXVNjvR

  — bluemarble.studio (@bluemarblestdo) November 24, 2018

  This is awesome! Maybe *cough*NASA*cough* should consider an update. ;)

  ---

  
  

  How are we doing?

  Thats a wrap for another issue of TimeShift. What do you think? Are there other types of content you’d like to see here? Submit a comment on this issue below, or post something at our community forum.

  Follow us on Twitter, like us on Facebook, and join the Grafana Labs community.

  
  
  /blog/2018/11/30/timeshiftgrafanabuzz-1w-issue-70/
• 

  Pro Tips: Using Grafana in Quality Assurance
  • sorangutan  

  1
  1
  Posts
  89
  Views

  

  Andrejs Kalnacs - Evolution Gaming

  Quality assurance is a priority at Evolution Gaming, the world leader in live casino gaming, and as Andrejs Kalnacs, Lead Software Developer in Test, said during his GrafanaCon EU talk in March, Grafana has been a game changer.

  While Kalnacs and his team have found Grafana to be invaluable in many areas, here are three best practices they’ve learned throughout their journey.

  1. Putting test results in context

  Kalnacs’ Grafana journey started with one simple thing: Evolution wanted to test how fast the games were loading. “I took some tools, created a solution, and then I got some numbers,” he said. “But numbers are just numbers. Without context, they don’t make much sense.” He consulted with some big data experts who suggested he put the information into InfluxDB and visualize it in Grafana. And voila! “We got some graphs where we can compare different products so our product owners can see how new features are affecting performance,” Kalnacs said. “Grafana became a platform for discussion about the performance of our games.”

  2. Live monitoring performance tests

  “Sometimes performance tests might be long; like 30 minutes, 1 hour, maybe 4 hours, or maybe even a day,” said Kalnacs. “Getting feedback while these tests are running is quite important.” The Evolution teams rely on the open source Apache JMeter load testing tool extensively, due to its ease of use. With its GUI, you can click and create a test. Plus, for Kalnacs’s purposes, it has native support for exporting data to InfluxDB protocol. “I just took a dashboard from grafana.com/dashboards and added it to an existing test, and in just a few minutes, I’ve already got some live results of tests,” he said. “In JMeter we can watch how our system under test is behaving while the tests are running, which is quite a good feature. If you have long performance tests, then you can monitor them as they’re running and make some conclusions even before they’re finished.”

  For more context, Kalnacs added, it’s easy to layer more information on top of the dashboard. “For example, you can add some key performance metrics like CPU load of system under test on top of this graph, and it will give you much more information.”

  Another popular performance tool used at Evolution is Gatling, which has native support for exporting to time series databases such as InfluxDB in its Frontline enterprise version.

  3. Test execution data visualization

  “In our journey to continuous integration, we want to understand how fast our tests are running compared with each other,” Kalnacs said.

  He pointed out that if you are using Jenkins, there’s an InfluxDB Jenkins plugin, which supports exporting different data, such as length of test or failure rate, or information about JUnit or Robot framework tests, or static analysis tools like Cobertura or SonarQube, or the Java code coverage library JaCoCo.

  In reality, there are so many test execution frameworks in so many different languages, that he suggested using an open source, multi-language test report tool called Allure. “Basically you can collect information from all different tests in one common way, and you don’t need to rely on any continuous integration systems like Jenkins,” he said. “It works in the same way for all these test execution frameworks on any CI server.”

  Using Allure allows him “countless opportunities to display data in Grafana,” he said. One example: He can compare the execution length of different products and different tests, and “it may conclude that if tests run 20 minutes and there are single tests that are running 3 minutes, then maybe these 20 minute tests are too long.”

  In conclusion, Kalnacs urged everyone to “share knowledge about Grafana with everyone in your company, because it can be used in very different ways, not only in monitoring of production.”

  Check out the full video of Andrejs’ talk below and download his presentation slides.

  Video: Using Grafana in Quality Assurance

  
  
  /blog/2018/11/29/pro-tips-using-grafana-in-quality-assurance/
• 

  timeShift(GrafanaBuzz, 1w) Issue 69
  • sorangutan  

  1
  1
  Posts
  86
  Views

  

  Welcome to TimeShift

  This week we released Grafana v5.3.4 which includes an important security fix, so we recommend you update your instance today. Also in this issue of TimeShift we share the first group of confirmed GrafanaCon LA speakers, and tell you about 5 plugins that have been recently updated.

  See an article you think should be shared here? Contact us!
  

  ---

  

  Latest Stable Release: Grafana v5.3.4

  Updates in this release

  • Alerting: Delete alerts when parent folder was deleted #13322
  • MySQL: Fix $__timeFilter() should respect local time zone #13769
  • Dashboard: Fix datasource selection in panel by enter key #13932
  • Graph: Fix table legend height when positioned below graph and using Internet Explorer 11 #13903
  • Dataproxy: Drop origin and referer http headers #13328 #13949, thx @roidelapluie

  This release also includes the file exfiltration vulnerability security fix (added to 5.3.3)

  Download Grafana v5.3.4 Now

  
  

  ---

  From the Blogosphere

  Grafana 5.3.3 and 4.6.5 released with important security fix: Grafana 5.3.3 was released this week which includes an important security fix for all Grafana installations between 4.1.0 and 5.3.2. Learn more about the fix in the blog post and update today.

  Cloud-Native Monitoring with Prometheus and Grafana: With the advent of containerization, the traditional ways to monitor application have rapily become obsolete. This article waks through the components and configuration of a modern monitoring stack.

  Create QA dashboards with Grafana (Part 2): This quick walkthrough gets you familiar with how to add a datasource in Grafana and build your first dashboard. Part one in this series will take you through setting up your environment.

  How to set up Grafana in Centos 7: As the title implies, you’ll learn how to get Grafana setup and configured in Centos 7. You’ll also learn how to add a MySQL datasource.

  
  

  ---

  

  GrafanaCon LA
  General Admission On Sale Now!

  Join us in Los Angeles, California February 25-26, 2019 for 2 days of talks focused on Grafana and the open source monitoring ecosystem. Learn about Grafana and new/upcoming features and projects in the broader ecosystem like Prometheus, Graphite, InfluxDB, Kubernetes, and more.

  Get Your Ticket Now

  Join us at GrafanaCon LA and learn about:

  

  We've already confirmed these awesome speakers and will be adding more!

  Brendan Burns Distinguished Engineer & Kubernetes co-founder Microsoft Stig Sorensen HEAD OF TELEMETRY BLOOMBERG Sean Hanson SOFTWARE DEVELOPER BLOOMBERG Dave Cadwallader Site Reliability Architect DNANEXUS
  Ben Kochie Staff Backend Engineer, Monitor GitLab Paul Dix Co-Founder | CTO InfluxData
  

  
  

  ---

  Featured Job

  As Grafana continues to grow we’re building our European sales team and are hiring Business Development Representatives based in our Stockholm office. This is a rare opportunity to join an early stage startup and take an instrumental role in helping to build the sales function. Apply now.

  View All our Open Positions

  
  

  ---

  
  

  Grafana Plugin Update

  This week we have 2 App plugin updates to share as well as a number of Panel plugin updates. To update any of your plugins in your on-prem Grafana, use the grafana-cli tool, or for Hosted Grafana update with one-click.
  

  UDPATED PLUGIN
  Kentik Connect Pro - Version 1.3.1 addresses an issue where Filter operators do not match Group By operators.

  Install

  

  UPDATED PLUGIN
  GLPI App - Updates in version 1.3.0 include:

  • add Apache / NGINX configuration in the readme
  • add more instructions in the readme to configure API into GLPI
  • add link of a user dashboard in the readme
  • add the patch of GLPI in the readme when use the datasource in mode server
  • fix PHP timezone in the datasource
  • update dependencies (and so fix some vulnerabilities)
  • fix a bug in number elements displayed in the singlestat panel

  Install

  

  UPDATED PLUGIN
  Parity Report Panel - Minor update to packages for this panel plugin.

  Install

  

  UPDATED PLUGIN
  SVG Panel - Updates in v0.2.0 of the SVG Panel include:

  • Implemented support for table format: MarcusCalidus/marcuscalidus-svg-panel@3b09fef
  • Added emptying of series and tables before getting new data: MarcusCalidus/marcuscalidus-svg-panel@239c794
  • Package updates

  Install

  

  UPDATED PLUGIN
  Boom Table Panel - Boom Table is a table/multi stat plugin with multiple columns for Graphite, InfluDB, Prometheus, Azure Monitor.

  • Icons support in table cells and options to use table as heatmap
  • Options to hide first column and table header
  • Options to hide metrics based on values
  • Tooltips in each cells of the table

  Install

  
  

  ---

  
  

  Upcoming Events

  In between code pushes we like to speak at, sponsor and attend all kinds of conferences and meetups. We also like to make sure we mention other Grafana-related events happening all over the world. If you’re putting on just such an event, let us know and we’ll list it here.

  

  Visualizing Time-Series Data with Grafana | Webinar - December 4, 2018, 12:00pm EST: Matt Toback and Diana Hsieh - Visualization is a key component for generating meaningful insights from time-series data. Grafana, an opensource visualization platform, is a great option for users looking to create dynamic dashboards that can be shared across teams. In recent releases, Grafana has introduced tighter integrations with both TimescaleDB and PostgreSQL. This includes a graphical query builder easier iteration when working with complex SQL queries.

  In this webinar, we will discuss how visualization coupled with a flexible full SQL interface can drive powerful insights that inform both technical and business decisions. Additionally, the webinar will include a demo covering basic dashboards that users can use to jumpstart their own internal visualization systems.

  Register Now
  

  KubeCon + CloudNativeCon North America 2018 | Seattle, WA - December 10-13, 2018: David Kaltschmidt: On the OSS Path to Full Observability with Grafana - Grafana is coming "off the wall". To make it more useful for interactive debugging, David and his team have already integrated two pillars of observability - metrics and logs. They are currently adding tracing to complete the incident response experience. All to minimize the cost of context switching during those crucial minutes after getting paged.

  This talk will demonstrate the various methods we've used to link the data together. Prometheus is providing the metrics. Via its histograms, request latencies can be extracted to inform each tracing span from Jaeger. Grafana also ensures that lines from your log aggregation system are annotated with span and trace IDs, as well as the other way around: associating logged values with spans.

  David will show how these OSS parts should be deployed to achieve full observability in an engaging user experience that saves valuable minutes.

  We are also a proud sponsor of the Cloud Native Computing Foundation’s flagship conference. Join Kubernetes, Prometheus, Cortex, OpenTracing, Fluentd, gRPC, containerd, rkt, CNI, Envoy, Jaeger, Notary, TUF, Vitess, CoreDNS, NATS, Linkerd and Helm as the community gathers for four days to further the education and advancement of cloud native computing.

  Register Now
  

  ---

  
  

  How are we doing?

  Thats a wrap for another issue of TimeShift. What do you think? Are there other types of content you’d like to see here? Submit a comment on this issue below, or post something at our community forum.

  Follow us on Twitter, like us on Facebook, and join the Grafana Labs community.

  
  
  /blog/2018/11/16/timeshiftgrafanabuzz-1w-issue-69/
• 

  Grafana 5.3.3 and 4.6.5 released with important security fix
  • sorangutan  

  1
  1
  Posts
  84
  Views

  

  Today we are releasing Grafana 5.3.3 and 4.6.5. These patch releases include an important security fix for all Grafana installations between 4.1.0 and 5.3.2

  We also release 5.3.4 at the same time containing some fixes and improvements that we have been holding off for a while to release 5.3.3.

  Release 5.3.3 only containing a security fix:

  • Download Grafana 5.3.3
  • Release notes

  Latest stable release in 4.x:

  • Download Grafana 4.6.5
  • Release notes

  Latest stable release in 5.x:

  • Download Grafana 5.3.4
  • Release notes

  File Exfiltration vulnerability (CVE-2018-19039)

  On the 5th of November at we were contacted about a potential security issue that could allow any users with Editor or Admin permissions in Grafana to read any file that the Grafana process can read from the filesystem. Note, that in order to exploit this you would need to be logged in to the system as a legitimate user with Editor or Admin permissions.

  Affected versions

  Grafana releases 4.1.0 through 5.3.2 are affected by this vulnerability.

  Solutions and mitigations

  All installations between 4.1.0 and 5.3.2 that have users that should not have access to the filesystem where Grafana is running must be upgraded as soon as possible. If you can not upgrade, you should set all users to viewers and remove all dashboards that contain text panels.

  All instances of Grafana Cloud have already been updated to 5.3.3. Grafana Enterprise customers have been provided with fixed binaries ahead of this disclosure.

  CVE ID: CVE-2018-19039

  Timeline and postmortem

  Here is a detailed timeline starting from when we originally learned of the issue.

  5 Nov 2018 16:30 CET Received details of vulnerability from Sebastian Solnica. 6 Nov 2018 13:00 CET Confirmed issue. Started working on a fix for latest stable in a private mirror. Backported the fix to 4.6.5 in private mirror. 6 Nov 2018 16:00 CET Received CVE-2018-19039 Started preparing 5.3.3 and 4.6.5 release from private mirror. 6 Nov 2018 17:33 CET Started rolling out 5.3.3 to Grafana Cloud customers. Decided on making release public on Tuesday Nov 13 13:00 CET. The date was chosen to give people time to prepare and not run into the weekend. The time was chosen to fall into main work time of the EU and US while still giving Asia a fair chance to react. 7 Nov 2018 22:05 CET Proactively provided Grafana Enterprise customers with details and download links. Completed rollout of 5.3.3 to Grafana Cloud. 13 Nov 2018 13:00 CET Publish of release & this blog post.

  Reporting security Issues

  If you think you have found a security vulnerability please send a report to [email protected]. This address can be used for all of Grafana Labs’s open source and commercial products (including but not limited to Grafana, Grafana Cloud, Grafana Enterprise, and grafana.com). We can accept only vulnerability reports at this address. We would prefer if you encrypted your message to us, please use our PGP key. The key fingerprint is

  F988 7BEA 027A 049F AE8E 5CAA D125 8932 BE24 C5CA

  The key is available from pgp.mit.edu by searching for grafana.

  Security Announcements

  We maintain a category on the community site named Security Announcements where we will post a summary, remediation, and mitigation details for any patch containing security fixes. You can also subscribe to email updates to this category if you have a grafana.com account and sign on the community site or via track updates via an RSS feed.

  Conclusion

  If you run a Grafana between version 4.1.0 and 5.3.2 with users that should not have access to the filesystem where Grafana is running, please upgrade to Grafana 5.3.3 or 4.6.5 as soon as possible.

  We would like to thank Daniele Costa, NCC Group for reporting this issue.

  
  
  /blog/2018/11/13/grafana-5.3.3-and-4.6.5-released-with-important-security-fix/
• 

  timeShift(GrafanaBuzz, 1w) Issue 68
  • sorangutan  

  1
  1
  Posts
  129
  Views

  

  Welcome to TimeShift

  The team was busy speaking at events in Europe and the US this week, showing off new Grafana features and talking about what’s to come. Check out the presentation on logging in Grafana below; we’ll share the video once it’s available. Also in this week’s issue we have 2 new plugins to share, and your weekly dose of Grafana related blog articles and videos.

  See an article you think should be shared here? Contact us!
  

  ---

  

  Latest Stable Release: Grafana v5.3.2

  Updates in this release

  • InfluxDB/Graphite/Postgres: Prevent cross site scripting (XSS) in query editor #13667, thx @svenklemm
  • Postgres: Fix template variables error #13692, thx @svenklemm
  • Cloudwatch: Fix service panic because of race conditions #13674, thx @mtanda
  • Cloudwatch: Fix check for invalid percentile statistics #13633, thx @apalaniuk
  • Stackdriver/Cloudwatch: Allow user to change unit in graph panel if cloudwatch/stackdriver datasource response doesn’t include unit #13718, thx @mtanda
  • Stackdriver: stackdriver user-metrics duplicated response when multiple resource types #13691
  • Variables: Fix text box template variable doesn’t work properly without a default value #13666
  • Variables: Fix variable dependency check when using ${var} format #13600
  • Dashboard: Fix kiosk=1 url parameter should put dashboard in kiosk mode #13764
  • LDAP: Fix super admins can also be admins of orgs #13710, thx @adrien-f
  • Provisioning: Fix deleting provisioned dashboard folder should cleanup provisioning meta data #13280
  • Docker: adds curl back into the docker image for utility. #13794

  Download Grafana v5.3.2 Now

  
  

  ---

  From the Blogosphere

  Logging is coming to Grafana: This week Grafana Labs’ Director, UX - David Kaltschmidt spoke at OSMC in Nuremberg to give a quick overview of Grafana, outline some of the new features since v5, discuss the new explore UI and logging functionality, and tease a few new features in the works.

  How to create a high availability Grafana 5.3 environment in AWS OpsWorks: This tutorial will tell you everything you need to know to set up Grafana in AWS OpsWorks.

  Microservices monitoring with Envoy service mesh, Prometheus & Grafana: This is the second post in the Observability with Envoy service mesh series. You can read the first post about Distributed Tracing here. This article explains what Envoy service mesh does, and how to get Envoy metrics into Prometheus and visualize the data in Grafana.

  [VIDEO] Bonobo, Airflow And Grafana To Visualize Your Business: At PyConDE, Romain Dorgueil shows us how to use a few different tools to build valuable dashboards to monitor business metrics and the steps that will set us up for success: 1. Plan, 2. Implement, 3. Monitor, 4. Iterate.

  
  

  ---

  

  GrafanaCon LA
  General Admission On Sale Now!

  Join us in Los Angeles, California February 25-26, 2019 for 2 days of talks focused on Grafana and the open source monitoring ecosystem. Learn about Grafana and new/upcoming features and projects in the broader ecosystem like Prometheus, Graphite, InfluxDB, Kubernetes, and more.

  We've already posted the first batch of speakers, and will be adding more shortly, so keep checking grafanacon.org.

  Get Your Ticket Now

  
  

  ---

  Featured Job

  As Grafana continues to grow we’re building our European sales team and are hiring Business Development Representatives based in our Stockholm office. This is a rare opportunity to join an early stage startup and take an instrumental role in helping to build the sales function. Apply now.

  View All our Open Positions

  
  

  ---

  
  

  Grafana Plugin Update

  This week we have 2 new plugins to share and an update to the Clickhouse datasource plugin. To update any of your plugins in your on-prem Grafana, use the grafana-cli tool, or for Hosted Grafana update with one-click.
  

  NEW PLUGIN
  Consul Datasource - Consul is a distributed service mesh, and this new datasource integrates Consul KV (key value) data with Grafana. It can be used in Singlestat and Table panels.

  Install

  

  NEW PLUGIN
  Warp 10 Datasource - The Warp 10 Platform is designed to collect, store and manipulate sensor data (timeseries data combined with location data). The new Warp 10 datasource plugin allows you to query the Warp 10 database using the WarpScript query language and visualize the results in Grafana. It also integrates well with the Worldmap panel plugin.

  Install

  

  UPDATED PLUGIN
  Clickhouse Datasource - Two new macros that convert query results as “change rate per interval” for Counter-like(growing only) metrics have been added to this latest version.

  Install

  
  

  ---

  
  

  Upcoming Events

  In between code pushes we like to speak at, sponsor and attend all kinds of conferences and meetups. We also like to make sure we mention other Grafana-related events happening all over the world. If you’re putting on just such an event, let us know and we’ll list it here.

  

  KubeCon + CloudNativeCon North America 2018 | Seattle, WA - December 10-13, 2018: David Kaltschmidt: On the OSS Path to Full Observability with Grafana - Grafana is coming "off the wall". To make it more useful for interactive debugging, David and his team have already integrated two pillars of observability - metrics and logs. They are currently adding tracing to complete the incident response experience. All to minimize the cost of context switching during those crucial minutes after getting paged.

  This talk will demonstrate the various methods we've used to link the data together. Prometheus is providing the metrics. Via its histograms, request latencies can be extracted to inform each tracing span from Jaeger. Grafana also ensures that lines from your log aggregation system are annotated with span and trace IDs, as well as the other way around: associating logged values with spans.

  David will show how these OSS parts should be deployed to achieve full observability in an engaging user experience that saves valuable minutes.

  We are also a proud sponsor of the Cloud Native Computing Foundation's flagship conference. Join Kubernetes, Prometheus, Cortex, OpenTracing, Fluentd, gRPC, containerd, rkt, CNI, Envoy, Jaeger, Notary, TUF, Vitess, CoreDNS, NATS, Linkerd and Helm as the community gathers for four days to further the education and advancement of cloud native computing.

  Register Now
  

  ---

  
  

  Tweet of the Week

  We scour Twitter each week to find an interesting/beautiful dashboard or monitoring related tweet and show it off! #monitoringLove

  🤩 I'm speaking at #GrafanaCon 2019! 🤩
  
  Explain it Like I’m Five - What I Learned Teaching @Grafana to My Son
  
  He's already mastered observing temperature over time. Now we've got three months to instrument a trampoline to count jumps-per-minute! 📈 https://t.co/WfFdGFBbpH pic.twitter.com/4pcUSgOyFT

  — Dave Cadwallader (@geek_dave) November 2, 2018

  That sounds awesome Dave! We're excited to have you speaking at GrafanaCon LA and look forward to hearing more about this trampoline experiment!

  ---

  
  

  How are we doing?

  Thats a wrap for another issue of TimeShift. What do you think? Are there other types of content you’d like to see here? Submit a comment on this issue below, or post something at our community forum.

  Follow us on Twitter, like us on Facebook, and join the Grafana Labs community.

  
  
  /blog/2018/11/09/timeshiftgrafanabuzz-1w-issue-68/
• 

  timeShift(GrafanaBuzz, 1w) Issue 67
  • sorangutan  

  1
  1
  Posts
  145
  Views

  

  Welcome to TimeShift

  This week we highlight Grafana project contributors from Hacktoberfest, share an article we published earlier this week on monitoring devices in your home with Prometheus and Grafana, how SoftwareMill manages their dashboards across environments and more.

  Have an article you’d like shared here? Contact us!
  

  ---

  

  Latest Stable Release: Grafana v5.3.2

  Updates in this release

  • InfluxDB/Graphite/Postgres: Prevent cross site scripting (XSS) in query editor #13667, thx @svenklemm
  • Postgres: Fix template variables error #13692, thx @svenklemm
  • Cloudwatch: Fix service panic because of race conditions #13674, thx @mtanda
  • Cloudwatch: Fix check for invalid percentile statistics #13633, thx @apalaniuk
  • Stackdriver/Cloudwatch: Allow user to change unit in graph panel if cloudwatch/stackdriver datasource response doesn’t include unit #13718, thx @mtanda
  • Stackdriver: stackdriver user-metrics duplicated response when multiple resource types #13691
  • Variables: Fix text box template variable doesn’t work properly without a default value #13666
  • Variables: Fix variable dependency check when using ${var} format #13600
  • Dashboard: Fix kiosk=1 url parameter should put dashboard in kiosk mode #13764
  • LDAP: Fix super admins can also be admins of orgs #13710, thx @adrien-f
  • Provisioning: Fix deleting provisioned dashboard folder should cleanup provisioning meta data #13280
  • Docker: adds curl back into the docker image for utility. #13794

  Download Grafana v5.3.2 Now

  
  

  ---

  Hacktoberfest

  Hacktoberfest is a month-long celebration of open source software run by DigitalOcean in partnership with GitHub and Twilio. The rules are simple - make five PRs between October 1–31 to any public Github repo and get an awesome t-shirt.

  We'd like to thank the following amazing people for contributing to the Grafana project during Hacktoberfest:

  • olshansky - 1 contribution
  • praveensastry - 3 contributions
  • miqh - 4 contributions
  • mondras - 1 contribution
  • neufeldtech - 1 contribution

  

  We'll reach out each of you personally, but as a thank you, we want to send you an official Grafana shirt.

  
  

  ---

  From the Blogosphere

  Pro Tips: Using Prometheus and Grafana for Monitoring Power Usage: Erwin de Keijzer, a Linux engineer at the Dutch consulting firm Snow, gave a talk at GrafanaCon EU about how he used Prometheus and Grafana to monitor the power usage… of his washing machine. A great presentation about montioring on a totally different scale.

  Managing multiple Grafana instances: This article dives into how SoftwareMill uses Wizzy created by Utkarsh Bhantagar to manage Grafana dashbord storage, management, and syncing over multiple environments.

  Raspberry Pi Weather Station: Nessy shows off the SensorTag configuration in a Raspberry Pi 3 Model B weather station he recently built. If you’re interseted in building something similar, you might also be interseted in checking out his article on getting Grafana 5.x running on a Raspberry Pi as well.

  Monitoring Spring Boot application using Actuator, Micrometer, Prometheus and Grafana: Dhaval delves into the nuances of monitoring and observability of distributed systems and constructs a system with hypothetical requirements to understand Spring Boot Actuator and its usage in real world monitoring applications. He includes details on the exposed endpoints, available metrics, and how to configure Prometheus and Grafana.

  
  

  ---

  GrafanaCon LA
  General Admission Now on Sale

  Join us in Los Angeles, California February 25-26, 2019 for 2 days of talks focused on Grafana and the open source monitoring ecosystem. Learn about Grafana and new/upcoming features and projects in the broader ecosystem like Prometheus, Graphite, InfluxDB, Kubernetes, and more.

  We've already posted the first batch of speakers, and will be adding more shortly, so keep checking grafanacon.org.

  Get Your Ticket Now

  
  

  ---

  

  We're Hiring!

  We've added new open positions at Grafana Labs! Do you love open source software? Do you thrive on tackling complex challenges to build the future? Want to work with awesome people? Be the next to join our team!

  View our Open Positions

  
  

  ---

  
  

  Upcoming Events

  In between code pushes we like to speak at, sponsor and attend all kinds of conferences and meetups. We also like to make sure we mention other Grafana-related events happening all over the world. If you’re putting on just such an event, let us know and we’ll list it here.

  

  OSMC 2018 | Nuremberg, Germany - November 5-8, 2018:
  David Kaltschmidt: Logging is Coming to Grafana – Grafana is an OSS dashboarding platform with a focus on visualizing time series data as beautiful graphs. Now we're adding support to show your logs inside Grafana as well. Adding support for log aggregation makes Grafana an even better tool for incident response: First, the metric graphs help in a visual zoning in on the issue. Then you can seamlessly switch over to view and search related log files, allowing you to better understand what your software was doing while the issue was occurring. The main part of this talk shows how to deploy the necessary parts for this integrated experience. In addition I'll show the latest features of Grafana both for creating dashboards and maintaining their configuration. The last 10-15 will be reserved for a Q&A.

  Register Now
  

  InfluxDays 2018 | San Francisco - November 7-8, 2018:
  Matt Toback: Optimizing the Grafana Platform for Flux – Flux, the new InfluxData Data Scripting Language (formerly IFQL), super-charges queries both for analytics and data science. Matt will give a quick overview of the language features as well as the moving parts for a working deployment. Grafana is an open source dashboard solution that shares Flux’s passion for analytics and data science. For that reason, they are very excited to showcase the new Flux support within Grafana, and a couple of common analytics use cases to get the most out of your data.

  In this talk, Matt Toback from Grafana Labs will share the latest updates they have made with their Flux builder in Grafana.

  Register Now
  

  KubeCon + CloudNativeCon North America 2018 | Seattle, WA - December 10-13, 2018: David Kaltschmidt: On the OSS Path to Full Observability with Grafana - Grafana is coming "off the wall". To make it more useful for interactive debugging, David and his team have already integrated two pillars of observability - metrics and logs. They are currently adding tracing to complete the incident response experience. All to minimize the cost of context switching during those crucial minutes after getting paged.

  This talk will demonstrate the various methods we've used to link the data together. Prometheus is providing the metrics. Via its histograms, request latencies can be extracted to inform each tracing span from Jaeger. Grafana also ensures that lines from your log aggregation system are annotated with span and trace IDs, as well as the other way around: associating logged values with spans.

  David will show how these OSS parts should be deployed to achieve full observability in an engaging user experience that saves valuable minutes.

  We are also a proud sponsor of the Cloud Native Computing Foundation's flagship conference. Join Kubernetes, Prometheus, Cortex, OpenTracing, Fluentd, gRPC, containerd, rkt, CNI, Envoy, Jaeger, Notary, TUF, Vitess, CoreDNS, NATS, Linkerd and Helm as the community gathers for four days to further the education and advancement of cloud native computing.

  Register Now
  

  ---

  
  

  Tweet of the Week

  We scour Twitter each week to find an interesting/beautiful dashboard or monitoring related tweet and show it off! #monitoringLove

  I must said that I’m really enjoying using the @grafana Explore UI. I know that this is still a WIP/beta, but it’s really good! 😎 pic.twitter.com/w6ZemZywqx

  — Jorge Luis (@jorgelbgm) October 31, 2018

  Glad that you're liking the beta. Please reach out to @davkals with any feedback you may have.

  ---

  
  

  How are we doing?

  Thats a wrap for another issue of TimeShift. What do you think? Are there other types of content you’d like to see here? Submit a comment on this issue below, or post something at our community forum.

  Follow us on Twitter, like us on Facebook, and join the Grafana Labs community.

  
  
  /blog/2018/11/02/timeshiftgrafanabuzz-1w-issue-67/