---
title: "Grafana"
slug: "grafana-1"
updated: 2024-06-07T03:41:15Z
published: 2024-06-07T03:41:15Z
canonical: "docs.safe.security/grafana-1"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://docs.safe.security/llms.txt
> Use this file to discover all available pages before exploring further.

# Grafana

## About this document

---

This document provides the step-by-step procedure to configure Grafana in SAFE.

## Introduction

---

SAFE integrates with Grafana and fetches the security misconfiguration of the Grafana account in SAFE.

## Prerequisites

---

- Access required in **SAFE**:
  - SAFE Admin Access
- Access required in **Grafana**:
  - Grafana Admin Access
- Required User Inputs:
  - API Instance URL
  - Organization Slug
  - Service Account Token
- Scope:
  - Basic Role: Admin
  - Fixed Role:
    - Organizations:Reader
    - Folders:Folder permission reader
    - Folders:Reader

## Generate Connection Details

---

### Generate **Grafana Service Account Token**

**Steps:**

---

- Login to your Grafana account as Admin.
- Click on the **Launch** button on the Grafana card.

![](https://cdn.document360.io/23dc20b8-a989-48c0-8653-f1d3e4abc734/Images/Documentation/1(8).png)
- Expand the left navigation by clicking the options menu at the top-left of the screen.
- Navigate to **Administration**, under **Users and access** click on **Service accounts**.

![](https://cdn.document360.io/23dc20b8-a989-48c0-8653-f1d3e4abc734/Images/Documentation/2(7).png)
- Click on the **Add service account**button**.**

![](https://cdn.document360.io/23dc20b8-a989-48c0-8653-f1d3e4abc734/Images/Documentation/3(6).png)
- Enter the **Display** **name** for the service account.
- Select the following Roles:
  - Basic Role:
    - **Admin**
  - Fixed Role:
    - **Organizations:Reader**
    - **Folders:Folder permission reader**
    - **Folders:Reader**
- Click on the **Apply**button**.**

![](https://cdn.document360.io/23dc20b8-a989-48c0-8653-f1d3e4abc734/Images/Documentation/image-20240404-082323.png)
- Click on the **Create** button.

![](https://cdn.document360.io/23dc20b8-a989-48c0-8653-f1d3e4abc734/Images/Documentation/5(6).png)
- The system creates and displays the service account.
- On the newly created service account page, click on the **Add service account token** button.

![](https://cdn.document360.io/23dc20b8-a989-48c0-8653-f1d3e4abc734/Images/Documentation/6(6).png)
- Enter the **Display name.**
- Set the **Expiration** as per your need. It's important to regularly update the API Token in SAFE according to its expiration date.
- Click on **Generate token.**

![](https://cdn.document360.io/23dc20b8-a989-48c0-8653-f1d3e4abc734/Images/Documentation/7(4).png)
- The system creates the service account and displays the token. **Copy** and **save** the service account token to use it while configuring Grafana in SAFE.

![](https://cdn.document360.io/23dc20b8-a989-48c0-8653-f1d3e4abc734/Images/Documentation/8(6).png)

### Obtain **Organization Slug**

**Steps:**

---

- Login to your Grafana account as Admin.
- Copy the required Organization slug from the drop-down menu.

![](https://cdn.document360.io/23dc20b8-a989-48c0-8653-f1d3e4abc734/Images/Documentation/9(6).png)

### Obtain **API Instance URL**

**Steps:**

---

- Login to your Grafana account as Admin.
- Click on the **Launch** button on the Grafana card.

![](https://cdn.document360.io/23dc20b8-a989-48c0-8653-f1d3e4abc734/Images/Documentation/9(5).png)
- Copy the API Base URL as shown in the exhibit.

![](https://cdn.document360.io/23dc20b8-a989-48c0-8653-f1d3e4abc734/Images/Documentation/11(4).png)

## Configure Grafana in SAFE

Steps:

---

- Log in to your SAFE account as **Admin**.
- Click on the **Integrations** option from the left navigation.
- Scroll to find Grafana integration card or search for Grafana in the search bar.

![](https://cdn.document360.io/23dc20b8-a989-48c0-8653-f1d3e4abc734/Images/Documentation/12(4).png)
- Enter the following:
  - **API Instance URL**
  - **Organization Slug**
  - **Service Account Token**
- Enter the **Auto Sync Frequency**.
- Click on the **Test Connection** button.
- Once the connection is successful, click on the **Save** button.

![](https://cdn.document360.io/23dc20b8-a989-48c0-8653-f1d3e4abc734/Images/Documentation/13(4).png)
- Once the configuration is saved successfully, click on the **Sync** **Now** button to trigger an on-demand sync.

![](https://cdn.document360.io/23dc20b8-a989-48c0-8653-f1d3e4abc734/Images/Documentation/14(3).png)
- Upon a successful sync, the system pulls the Grafana assets and their findings in SAFE. You can track the status of the sync in the **History** table.

## View Results

Steps:

---

- Go to the **Integrations**homepage.
- Scroll to find the Grafana integration card or search for Grafana in the search bar.
- Click on the Grafana integration card for **Finding View** and **Asset View**.
  - **Finding View:** This tab displays all the findings details fetched from Grafana.

![](https://cdn.document360.io/23dc20b8-a989-48c0-8653-f1d3e4abc734/Images/Documentation/15(3).png)
  - **Asset View:** This tab displays all the assets pulled from Grafana.

![](https://cdn.document360.io/23dc20b8-a989-48c0-8653-f1d3e4abc734/Images/Documentation/16(4).png)

## History

---

Learn More about Integration History [here](https://docs.safe.security/safe-4/docs/integration-history).

## SAFE's Outgoing IP Addresses

---

Click [here](https://docs.safe.security/safe-4/docs/safes-outgoing-ip-addresses) to find the outgoing IP addresses of SAFE. All traffic to any integrations in SAFE will see one IP address as the source IP of the incoming connection.