Grafana Labs connects observability and incident response with Knowledge Graph - Help Net Security
Grafana Labs has announced a Knowledge Graph in every Grafana Cloud stack, alongside new Digital Experience Monitoring capabilities and updates to Grafana Cloud Incident Response Management (IRM).
Grafana Labs has announced a Knowledge Graph in every Grafana Cloud stack, alongside new Digital Experience Monitoring capabilities and updates to Grafana Cloud Incident Response Management (IRM).
Abstract has announced new AI SOC capabilities in its agentic SIEM: investigation, hunt, and triage powered by a combination of Abstract’s own trained and tuned models and frontier foundation models, and SOAR response capabilities with actions assigned directly to detection rules.
Today, Grafana Labs is introducing new use cases, user journeys, data types, and views to further close the gap between system health and user experience: Full-stack visibility matters most when something breaks, and incident response is where the layers have to work together.
Google released TorchTPU as open source, giving PyTorch developers a native way to run models on the company’s Tensor Processing Units.
Most teams have telemetry from databases all the way to the user’s browser, but lack the runtime context that connects a failing database to the service, the team, and the customer it affects.
They have a technology debt problem: telemetry from every layer and no way to connect it to the customer it affects,” said Richard Lam , Director of Product, Grafana Labs.
In the 2026 State of Observability Report, also released this week by Grafana Labs and ETR, a Futurum company, the most common maturity stage among the 300 IT and engineering leaders surveyed (30%) is being able to explain unexpected system behavior but not detect and prevent issues before users are affected.
The data gets metered, the bill goes up, and alerts still wait hours for an analyst when a machine could have worked them,” said Jon Eller , Chief Revenue Officer at Abstract.
Zenteiq.ai says llm-d on Google Kubernetes Engine raised its daily output from 1.47 billion to 5.97 billion tokens per 1,000 TPU v6e chips, roughly a fourfold gain.
Abstract runs the entire loop on one platform: 400+ integrations feed streaming detection that operates in real time, before data lands, findings combine into entity-based insights, and the SIEM itself now investigates, classifies, and responds on the same data plane.
What happened
Grafana Labs has announced a Knowledge Graph in every Grafana Cloud stack, alongside new Digital Experience Monitoring capabilities and updates to Grafana Cloud Incident Response Management (IRM).
Abstract has announced new AI SOC capabilities in its agentic SIEM: investigation, hunt, and triage powered by a combination of Abstract’s own trained and tuned models and frontier foundation models, and SOAR response capabilities with actions assigned directly to detection rules.
What changed
Today, Grafana Labs is introducing new use cases, user journeys, data types, and views to further close the gap between system health and user experience: Full-stack visibility matters most when something breaks, and incident response is where the layers have to work together.
Google released TorchTPU as open source, giving PyTorch developers a native way to run models on the company’s Tensor Processing Units.
Who is affected
Most teams have telemetry from databases all the way to the user’s browser, but lack the runtime context that connects a failing database to the service, the team, and the customer it affects.
They have a technology debt problem: telemetry from every layer and no way to connect it to the customer it affects,” said Richard Lam , Director of Product, Grafana Labs.
Why it matters
In the 2026 State of Observability Report, also released this week by Grafana Labs and ETR, a Futurum company, the most common maturity stage among the 300 IT and engineering leaders surveyed (30%) is being able to explain unexpected system behavior but not detect and prevent issues before users are affected.
The data gets metered, the bill goes up, and alerts still wait hours for an analyst when a machine could have worked them,” said Jon Eller , Chief Revenue Officer at Abstract.
Technical details
Zenteiq.ai says llm-d on Google Kubernetes Engine raised its daily output from 1.47 billion to 5.97 billion tokens per 1,000 TPU v6e chips, roughly a fourfold gain.
Response
Abstract runs the entire loop on one platform: 400+ integrations feed streaming detection that operates in real time, before data lands, findings combine into entity-based insights, and the SIEM itself now investigates, classifies, and responds on the same data plane.
The releases connect infrastructure and application dependencies with user experience and incident response, giving people and agents shared context to investigate problems and take action.
What security teams should do
As agentic systems become more architecturally complex and teams use agents to investigate and respond to problems, those agents need context that connects technical symptoms to business impact.
A knowledge graph links infrastructure, applications, and user-facing signals into a shared model, helping people and agents trace symptoms across dependencies to investigate their cause.
Attribution
Help Net Security: Grafana Labs has announced a Knowledge Graph in every Grafana Cloud stack, alongside new Digital Experience Monitoring capabilities and updates to Grafana Cloud Incident Response Management (IRM).
Help Net Security: ThreatLocker has announced the launch of Zero Trust AI Control (ZTAIC), giving organizations a tool to deploy agentic AI without surrendering control of their environments.
Help Net Security: Security teams have tools for code, endpoints, cloud infrastructure, identity, and secrets management .
Help Net Security: Google released TorchTPU as open source, giving PyTorch developers a native way to run models on the company’s Tensor Processing Units.
What to watch next
Watch for updated vendor guidance and fixed-version details.