# Install the Grafana Plug-In to Query Events in the Radiant Log Manager

In this guide, you will use the Grafana plug-in to query Radiant Security’s Log Management data from Grafana. This allows you to build custom dashboards, visualizations, and analytics for deeper insights into your logs.

### **Requirements**

* [ ] A Grafana instance installed in your local or virtual environment.
* [ ] The Radiant Security Grafana plugin zip file provided to you upon request.

{% hint style="info" %}
**Note**: The Grafana plug-in does not currently support Grafana Cloud.
{% endhint %}

### Configure the data connector in Radiant Security

1. Log in to [Radiant Security](https://app.radiantsecurity.ai/).
2. From the navigation menu, click **Settings** > **Data Connectors** and click **+ Add Connector**.
3. Search for and select the **Radiant Security Grafana Plug-In** option from the list and then click **Data** **Feeds**.
4. Under **Select your data feeds**, select **Grafana Security Ops - Raw Events** and click **Credentials**.
5. Under **Credential** **Name**, give the credential an identifiable name (e.g. `Radiant-Security-Events`).
6. Under **Required** **Credentials**, in the **Connector** **tag** field enter a value. This value will act as the salt to randomize the unique **Token** you’ll download in the next step.
7. Click **Add Connector**.
8. Copy and save the connector **Token** value using the clipboard option or download the **Token** file. You will need this token to complete the configuration.
9. Click **Done** to save your changes.

### Install the Grafana plug-in

Before you begin, ensure you have the following:

* The zip file containing the Radiant Grafana plug-in. Contact a member from our support team to request the file.
* Grafana installed on your local server or virtual machine.

{% hint style="info" %}
**Note:** The plug-in is private and unsigned, so it requires some modifications in order to enable installation.
{% endhint %}

#### Locate your Grafana configuration file

1. Find the configuration file named `grafana.ini`. The file location varies by operating system and installation method. Refer to [Configure Grafana](https://grafana.com/docs/grafana/latest/setup-grafana/configure-grafana/) for more information.

#### Enable the unsigned plug-in

1. Open the `grafana.ini` file and set the following to allow Radiant Security's unsigned plug-in to load:

```ini
allow_loading_unsigned_plugins = radiantsecurity-radiantsecurity-datasource
```

&#x20;     Save and close the file.

#### Install the plug-in files

1. Extract the plug-in into the Grafana plug-ins directory.

```
var/lib/grafana/plugins/radiantsecurity-datasource
```

&#x20;   The full directory path may differ depending on operating system and Grafana installation method.  \
&#x20;   For installation on MacOS, the full path for a Homebrew installation is:

```ini
/opt/homebrew/var/lib/grafana/plugins/radiantsecurity-datasource
```

&#x20;   If your plug-ins directory is in a different location, adjust the path accordingly.

2. Apply the changes by restarting the Grafana service.&#x20;

#### Optional: Verify the settings in Grafana

1. In Grafana, navigate to **Administration** **> General > Settings**.
2. **paths >** **plugins** points to the parent directory of `radiantsecurity-datasource` where the plug-in has been extracted.
3. **plugins** **> allow\_loading\_unsigned\_plugins** is set to `radiantsecurity-radiantsecurity-datasource`.

### Create and configure a data source

After installing the Grafana plug-in, connect Grafana to Radiant Security by creating a new data source with your API token and endpoint URL.

1. In Grafana, create a new data source with the plug-in by navigating to **Administration** > **Plugins** **and data**. Search for **Radiant Security** and the plug-in will appear.

<div align="left"><figure><img src="https://2439665791-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FPsFulb2ZOtSPcRSc2rXE%2Fuploads%2FO25urmePKWEI9seDdBhP%2Fimage.png?alt=media&#x26;token=af749ee6-82d3-42b1-9948-1217341fba32" alt=""><figcaption></figcaption></figure></div>

2. Click **Save & test**. The plug-in is now available as a data source and can be seen in **Connections > Data source.**
3. Click the plug-in. You'll see a warning that the plugin is unsigned. This is expected as the Radiant plug-in is private and hasn't gone through Grafana's public plugin signing process. Click the **Add new data sources** button.
4. For **Name**, enter a name for the plug-in.
5. For **API Key**, enter the **Token** that you created and copied from the first step of this guide: [**Configure the data connector in Radiant Security**](#configure-the-data-connector-in-radiant-security)**.**
6. For **URL**, set the appropriate endpoint for your region:&#x20;
   * US region: `https://plugin.radiantsecurity.ai/grafana-plugins-proxy/qw`&#x20;
   * EU region: `https://plugin.eu1.radiantsecurity.ai/grafana-plugins-proxy/qw` .

<div align="left"><figure><img src="https://2439665791-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FPsFulb2ZOtSPcRSc2rXE%2Fuploads%2FATO7kzQsqrke6qoHGbmy%2FUse_the_Grafana_Plug-In_01.png?alt=media&#x26;token=f6601dba-08b2-49fa-a67e-1f44a4998bf9" alt="" width="478"><figcaption></figcaption></figure></div>

6. Click **Save & test**.

### Create a Grafana dashboard and visualization

Create a new dashboard in Grafana to display a log volume histogram for all connectors.

1. In the main menu in Grafana, click **Dashboards.**
2. On the **Dashboards** page, click **New** and select **New Dashboard** from the drop-down menu.
3. Click **+ Add visualization**.
4. Select the data source that was just created with the plug-in.
5. The visualization will default to a **Time series** from the top right pull-down menu.
6. To test the visualization, enter a wildcard query `*` in the **Lucene Query** field. This should populate the graph with aggregated data representing all received logs over the last six hours. If needed, you can adjust the time range accordingly.
7. Add a **Group By** field by clicking the **+** at the end of the **Group By** row.
8. Select **rs\_connectorType** to be the first **Group By** criteria. Click **Refresh** to see the new set of data which should include disaggregated log types.
9. In the right panel, configure the legend and title by applying the following modifications:
   1. **Title**: Connectors with Log Volume
   2. **Legend Mode**: Table
   3. **Legend Placement**: Right
   4. **Legend Values**: Total
   5. **Axis Scale**: Logarithmic (assuming multiple log sources with a wide range of volume)
   6. **Log Base**: 10
10. Click **Save Dashboard** to save the changes and exit to the dashboard view. The new dashboard should look similar to the image below.<br>

    <figure><img src="https://20705827.fs1.hubspotusercontent-na1.net/hubfs/20705827/Using%20the%20Grafana%20Plug-In/Screenshot%202025-05-15%20at%201.48.51%20PM.png" alt=""><figcaption></figcaption></figure>
