Set up a GEM tenant

Create a Grafana Enterprise Metrics tenant:

Navigate to Grafana Enterprise Metrics > Tenants.
Click on Create new tenant.
Choose a name for this very tenant. For demonstration purposes, use the name dev-tenant.
Select the cluster.
Click Create tenant.

Create an access policy

Create a data source access policy and token, which are used by Grafana Enterprise itself to access the metrics in the tenant named dev-tenant:

Navigate to Grafana Enterprise Metrics > Access policies.
Click Create new access policy.
Choose a name for the policy. For demonstration purposes, use dev-read-write-policy.
Enable the scope metrics:read and metrics:write.
Select the tenant dev-tenant.
Click on Create.

From the newly created access policy, click + Add token.
Name the token dev-token, and click on Create.
In the next window, copy the token.

If you’re using Prometheus, you can add the following example of a remote-write configuration:

remote_write:
  - url: http://enterprise-metrics/api/v1/push
    basic_auth:
      username: dev-tenant
      password: ZGV2LXJlYWQtd3JpdGVyLXBvbGljeS1kZW1vLXRva2VuOjY/ezduMTVhJDQvPGMvLzQ1SzgsJjFbMQ==

If you’re using Grafana Alloy, you can add the following example of a remote-write configuration:

prometheus.remote_write "default" {
  endpoint {
    url = "http://enterprise-metrics/api/v1/push"
    basic_auth {
      username = "dev-tenant"
      password = "ZGV2LXJlYWQtd3JpdGVyLXBvbGljeS1kZW1vLXRva2VuOjY/ezduMTVhJDQvPGMvLzQ1SzgsJjFbMQ=="
      }
  }
}

Setup remote-write to your tenant

To enable writes to your cluster, add the above remote-write configuration snippet to the configuration file of an existing Prometheus or Grafana Alloy collector.

If you do not have an existing metrics collector you can get started with Grafana Alloy.

An example agent configuration would be:

server:
  log_level: info
  http_listen_port: 8081

prometheus:
  wal_directory: /tmp/agent
  global:
    scrape_interval: 5s
  configs:
    - name: default
      scrape_configs:
        - job_name: enterprise-metrics
          static_configs:
            - targets: ["localhost:8080"]
        - job_name: agent
          static_configs:
            - targets: ["localhost:8081"]

integrations:
  agent:
    enabled: true
  node_exporter:
    enabled: true
  prometheus_remote_write:
    - url: http://<gme-hostname>/api/v1/push
      basic_auth:
        username: dev-tenant
        password: ZGV2LXJlYWQtd3JpdGVyLXBvbGljeS1kZW1vLXRva2VuOjY/ezduMTVhJDQvPGMvLzQ1SzgsJjFbMQ==

Setup your tenant as a Grafana datasource

Following that we can use this access policy and token to create a new datasource in Grafana:

Navigate to Configuration ≫ Data Sources.
Click on Add new data source.
Select Prometheus.
Set the URL to http://<gme-host>/prometheus.
Enable Basic Auth and use User dev-tenant and as Password the token from your clipboard.
Click Save & Test.