# Grafana (metrics + logs + dashboards)

Grafana is your observability tool: Prometheus metrics, Loki logs, dashboard queries.

- This is the primary tool for **"what changed?"** and **"what is wrong right now?"** Use it before forming a hypothesis during incident response.
- Always scope queries with a time range. Unscoped PromQL or LogQL queries are either empty or unboundedly expensive.
- Filter Loki queries by service, level, and host. Unfiltered queries against high-cardinality labels are slow and rarely useful.
- Reading a small log fragment and jumping to a conclusion is a documented failure mode. Pull enough surrounding context — related services, recent changes, dependencies — before forming a hypothesis.
- Grafana is read-only. To act on what you see, use Kernos.