Grafana Loki

Confirm the Loki URL is reachable

Loki must be reachable from SigSentry's API. For self-hosted on a private network, this means either making it publicly addressable (behind auth) or running SigSentry self-hosted in the same VPC.

Test from anywhere with:

curl https://your-loki-url/ready

If it returns ready, you're good.

Get a bearer token (if needed)

For Grafana Cloud: under your stack's Connections → Data sources → Loki, copy the URL and generate an access policy token with logs:read.

For self-hosted Loki with auth: generate the token your auth proxy expects (Basic auth header value, JWT, etc).

For unauthenticated Loki: skip this step.

Add the log source in SigSentry

Project → Log Sources → Add log source. Pick Grafana Loki and name it loki-prod or similar.

Enter connection details

Define your queries / label selectors

Paste LogQL label selectors or job patterns into the Sources field, one per line:

{job="checkout-api"}
{namespace="prod", app="billing-worker"}
{cluster="us-east-1", service="api-gateway"} |= "error"

You can use any valid LogQL label selector syntax. Each line is queried independently per analysis.

Test and save

Click Test connection — you should see Connected plus sample lines from a small recent window. Click Save.