Skip to main content
Technical Preview

Overview

A client-mode connector for a curated observability / ITSM slice of the Grafana HTTP API: Default BASE_ADDRESS is https://grafana.example.com (replace with your OSS / Enterprise host or Grafana Cloud stack URL). Topics use itsm/grafana/<object>/<verb>.
Self-hosted and Grafana Cloud share the same /api/… path layout. Cloud stacks use a host like https://&lt;stack&gt;.grafana.net. Do not put a trailing slash on BASE_ADDRESS.
Prefer Hub secrets for the service account token. Create annotation (write) needs a token with annotations:create. Public play.grafana.org allows anonymous health and many reads, but POST annotations returned 403 without permissions — not a substitute for your own lab token. Status remains blocked until an authenticated create (or owned-instance smoke) succeeds.

Basic Syntax

Events

Auth

Service account token (preferred):
  1. Create a Grafana service account and token with roles covering annotation create/read, folder/dashboard search, and alerting read as needed.
  2. Set connector BASE_ADDRESS to your Grafana host (no trailing slash).
  3. Pass token on the MQTT request payload so headers resolve:
    • Authorization: Bearer {value.json.token}
  4. Store the token in Hub secrets / GET SECRET "GRAFANA_TOKEN". Never commit real credentials.
Basic auth (alternative):
  1. Use a Grafana user (or service account) password / token.
  2. Configure WITH USERNAME / WITH PASSWORD GET SECRET "GRAFANA_PASSWORD" and remove Bearer headers from the events.
Legacy API keys: historically sent as Bearer; prefer service accounts. GetHealth: omit Authorization — most installs expose /api/health publicly.

Example payloads

Health:
Create annotation from alarm:
List annotations:
Search dashboards:
List alerts:

Deploy notes

Last modified on October 21, 2026