title: Grafana dashboards for shadow discovery description: Import Control Core Grafana dashboards for shadow mode, discovery, and compliance telemetry. audience: DevOps and compliance officers timeEstimate: 15 minutes prerequisites:

Grafana connected to Loki or Prometheus (see setup guide)

Grafana dashboards

Control Core ships reference Grafana dashboards for shadow compliance discovery and operational health.

Bundled dashboards

Dashboard	UID (reference)	Purpose
Shadow discovery	`cc-01-shadow-discovery`	Shadow events, discovery candidates, compliance log tail
Bouncer health	(see customer package)	PEP heartbeat, OPAL sync, decision latency

Dashboard JSON lives in the customer observability package under grafana/dashboards/ (demo mirror: control-core-012025-demo/grafana/dashboards/).

Import procedure

Open Grafana → Dashboards → Import.
Upload 01-shadow-discovery.json (or paste JSON).
Select your Loki datasource (UID loki or map to your instance).
Save and set refresh to 30s during discovery pilots.

Example LogQL panels

Shadow event rate:

sum(count_over_time({source="alloy-docker"} |~ "(?i)shadow" [$__interval]))

Discovery candidates (range):

sum(count_over_time({source="alloy-docker"} |~ "(?i)discovery" [$__range]))

Replace {source="alloy-docker"} with labels from your deployment.

Troubleshooting: If panels show No data, confirm Loki retention covers your pilot window and that shadow Bouncer traffic is flowing. Cross-check Control Plane Compliance & Gaps for SHADOW_WOULD_DENY counts. See Troubleshooting.

Align with Control Plane UI

Grafana complements — does not replace — the Sovereign Compliance Dashboard. Use Grafana for SRE time-series; use /compliance for gap cache, pack observations, and executive JSON reports.

Related: Shadow discovery hub · Observe & audit