Heplon

Connect Loki

This guide covers what to put into the connector form for Grafana Loki.

1. Find the API URL

Use the base URL of the Loki HTTP API, with no path. Heplon appends /loki/api/v1/... itself.

https://loki.example.com

The URL must be reachable from the internet.

2. Choose the endpoint authentication

Loki has no authentication of its own. The connector form offers three exclusive choices.

ChoiceUse it when
NoneThe URL points at Loki directly and the endpoint is open to Heplon.
Static bearer tokenA proxy in front of Loki accepts a fixed token.
OAuth 2.0 access profileA gateway in front of Loki validates JWT bearer tokens, for example OAuth2 Proxy in front of Keycloak.

Since the Loki endpoint is reachable from the internet, the URL likely points at a proxy in front of Loki, such as an authenticating reverse proxy (nginx, Envoy, OAuth2 Proxy) or a Loki gateway behind one.

With a static token, Heplon sends it as Authorization: Bearer <token>. With an access profile, Heplon gets an access token from your identity provider and sends that instead, renewing it before it expires. To create a profile, see Create an HTTP access profile. That page also explains how to read a failed health check.

A service that expects basic auth (such as Grafana Cloud) is currently not supported. We will add support once the first customer asks for it.

3. Fill in the form

In Heplon, open Connectors, select Add connector, then Loki.

FieldValue
Namean arbitrary name
API URLthe URL from step 1
Endpoint authenticationthe choice from step 2, with its token or profile

Loki is now connected to Heplon.

Notes

  • Heplon supports single-tenant Loki only — the default, where auth_enabled is false. Heplon never sends an X-Scope-OrgID header.