What’s new in Grafana Cloud

Export your alerting resources, such as alert rules, contact points, and notification policies as Terraform resources. A new “Modify export” mode for alert rules enables you to edit provisioned alert rules and export a modified version.

You can now add buttons to your canvas visualizations. Buttons can be configured to call an API endpoint. This pushes Grafana’s capabilities to new heights, allowing you to create interactive dashboards that can be used to control external systems.

To learn more, refer to our Canvas button element documentation.

In addition to Query and Edit access, you can now grant users, teams, or basic roles Admin access to data sources. Users with Admin access to a data source can grant and revoke permissions to the data source, as well as to manage query caching settings for the data source. Users are automatically granted Admin access to data sources that they create.

We’ve added initial support to detect situations in which various transformations won’t work appropriately based on current data. Previously, selecting the appropriate transformation and configuring it correctly required a process of trial and error or already knowing how a given transformation worked. Now, transformations that we’ve detected can’t be used are shaded in the interface to indicate this, along with a helpful message explaining why.

The TraceQL query editor has been improved to facilitate the grouping of multiple spans per trace in TraceQL queries. For example, when the following by(resource.service.name) is added to your TraceQL query, it will group the spans in each trace by resource.service.name.

You can now map Google groups to Grafana organizational roles when using Google OIDC. This is useful if you want to limit the access users have to your Grafana instance.

We’ve also added support for controlling allowed groups when using Google OIDC.

Previously, the only transformation that supported dashboard variables was the Add field from calculation transformation. We’ve now extended the support for variables to the Filter by value, Create heatmap, Histogram, Sort by, Limit, Filter by name, and Join by field transformations.

We’ve also made it easier to find the correct dashboard variable by displaying available variables in the fields that support them, either in the drop-down or as a suggestion when you type $ or press Ctrl + Space:

The Grafana Assume Role authentication provider lets Grafana Cloud users of the CloudWatch data source authenticate with AWS without having to create and maintain long term AWS Users. Using the new assume role authentication method, you no longer have to rotate access and secret keys in your CloudWatch data source. Instead, Grafana Cloud users can create an identity access and management (IAM) role that has a trust relationship with Grafana’s AWS account; Grafana’s AWS account will then use AWS Secure Token Service (STS) to create temporary credentials to access the user’s AWS data.

To learn more, refer to the CloudWatch authentication documentation.

You can now use generative AI to assist you in your Grafana dashboards. So far generative AI can help you with the following tasks:

• Generate panel and dashboard titles and descriptions - You can now generate a title and description for your panel or dashboard based on the data you’ve added to it. This is useful when you want to quickly visualize your data and don’t want to spend time coming up with a title or description.
• Generate dashboard save changes summary - You can now generate a summary of the changes you’ve made to a dashboard when you save it. This is great for effortlessly tracking the history of a dashboard.

To enable these features, you must first enable the dashgpt feature toggle. Then install and configure Grafana’s LLM app plugin. For more information, refer to the Grafana LLM app plugin documentation.

You can now zoom in on the y-axis of your time series and candlestick visualizations. This is useful when you want to focus on a specific range of values. To zoom in on the y-axis on supported visualizations, hold the Shift key while clicking and dragging; double-click to reset the zoom.

With Grafana v9.3, we introduced a feature toggle called accessTokenExpirationCheck. It improves the security of Grafana by checking the expiration of the access token and automatically refreshing the expired access token when a user is logged in using one of the OAuth providers.

With the current release, we’ve introduced a new configuration option for each OAuth provider called use_refresh_token that allows you to configure whether the particular OAuth integration should use refresh tokens to automatically refresh access tokens when they expire. In addition, to further improve security and provide secure defaults, use_refresh_token is enabled by default for providers that support either refreshing tokens automatically or client-controlled fetching of refresh tokens. It’s enabled by default for the following OAuth providers: AzureAD, GitLab, Google.

Create alerts from dashboard panels. You can reuse the panel queries and create alerts based on them.

Introducing Content Outline in Grafana Explore. We recognized the challenges of complex mixed queries, as well as, lengthy logs and traces results, leading to time-consuming navigation and the loss of context. Content outline is our first step towards seamless navigation from log lines to traces and back to queries ensuring quicker searches while preserving context. Experience efficient, contextual investigations with this update in Grafana Explore. To learn more, refer to the Content outline documentation, as well as the following video demo.

We’re excited to introduce the “No basic role,” a new basic role with no permissions. A basic role in Grafana dictates the set of actions a user or entity can perform, known as permissions. This new role is especially beneficial if you’re aiming for tailored, customized RBAC permissions for your service accounts or users. You can set this as a basic role through the API or UI.

Previously, permissions were granted based on predefined sets of capabilities. Now, with the “No basic role,” you have the flexibility to be even more granular.

Public dashboards allow you to share your visualizations and insights to a broader audience without the requirement of a login. You can effortlessly use our current sharing model and create a public dashboard URL to share with anyone using the generated public URL link. To learn more, refer to the Public dashboards documentation, as well as the following video demo: