Operations | Monitoring | ITSM | DevOps | Cloud

Sigma rules have become the security team equivalent of LEGO bricks and systems. With LEGO, people can build whatever they can imagine by connecting different types of bricks. With Sigma Specification 2.0 rules, security teams can create vendor-agnostic detections without being limited by proprietary log formats. In response to the Sigma rules’ popularity, the team that built them updated them in August 2024, giving security teams new capabilities.

In May we’ve released powerful new features to help you stay ahead of outages and communicate status more effectively, focusing on expanding Early Warning Signals across our platform. Let’s dive into what’s new!

At Grafana Labs, we’ve always believed that observability should be open and accessible — that belief extends beyond metrics, logs, and traces to the costs associated with managing observability at scale. That’s why we’re excited to share that we’ve adopted the FinOps Open Cost and Usage Specification ( FOCUS), a community-driven, open standard for cloud billing data.

Have you heard that Search Packs are now officially generally available?

Today’s IT environments are rarely confined to a single data center or a single cloud provider. Enterprises are embracing a mix of cloud platforms, virtual machines, and on-premises hardware to stay agile and competitive. This blended environment is known as hybrid IT infrastructure, and managing it effectively is key to keeping systems healthy, secure, and performing at their best.

As OnlineOrNot has grown, I've been building features quickly to get them into your hands as fast as possible. However, this meant I ended up with multiple versions of similar pages that looked and worked differently from each other. This month, I focused on putting systems in place to create a consistent experience across all parts of the dashboard, making everything look and feel unified.

When requests slow down across your microservices, tracing helps you understand where time is spent. Jaeger and Zipkin are two popular tools for distributed tracing, built to answer a simple question: where did the request go? If you're choosing between them or just exploring options, this guide breaks down the differences and when each one might be a better fit.

Everything looks fine—dashboards are green, logs are quiet. But users start reporting slow response times. No errors, no traffic spikes. Just a general slowdown. It’s a common situation. Not all problems show up as crashes or clear failures. Sometimes, performance degrades quietly, and standard metrics don’t catch it early. But that's where Prometheus alerting can help, if you're monitoring the right signals.

Real User Monitoring (RUM) helps teams understand exactly how their users experience their web and mobile applications—from load times to crashes and frustration signals. But traditional RUM models come with tough trade-offs: capture all sessions and overspend, or sample data and miss what matters. Fixed sampling rates may help manage volume, but they leave dangerous blind spots.

Today, we're expanding on the integrations front, and launching new integrations for Windows events, network telemetry, and cloud storage. Here's a quick tour of what's new and why it matters.