perflooplog inget early access →

Connect Loki.

Connect selected Loki log streams to Perfloop. It can query log counts, rates, and log entries for the services and environments you choose.

Access you need

  • read-only authorizationCreate a credential that can use Loki query and label endpoints. Enter the complete Authorization header value. Do not grant write or administration access.
  • label selectorsChoose streams with a selector such as {service="api",env="prod"}. Every query must contain these filters.
  • optional tenant headerIf your deployment uses multitenancy, enter the exact X-Scope-OrgID value.

Setup

1 · create a read credential

Create a dedicated reader for the Loki HTTP query API or its authenticating gateway.

2 · set endpoint, tenant, and selectors

In Perfloop Setup, select Loki. Enter the HTTPS base, Authorization value, optional tenant, and exact label selectors.

3 · connect to Perfloop

Perfloop checks each selector before it saves the connection.

Data Perfloop reads

  • Label metadata and aggregates. Labels for selected streams, plus log counts and rates for a set time window.
  • Log entries. A supported range read can return timestamps, labels, and log text. Models can read this data, and Perfloop can store it with performance results.
  • Original provider fields. Responses retain Loki values and statistics, including fields added by Loki.

Query limits

  • Every query must contain your label filters. Perfloop rejects queries without them and accepts a supported subset of LogQL.
  • Entry, series, point, time, and response-byte limits apply. A response that reaches the entry limit can guide further queries but cannot verify a performance claim.
  • Use a source or gateway that removes log text you do not authorize Perfloop to receive.

Credentials and network access

If you enter a token in Setup, your browser sends it to Perfloop over HTTPS. Tokens from provider authorization go directly to Perfloop.

Perfloop encrypts the credential and uses it only for requests within your connection's scope. Models and execution sandboxes do not receive it.

Use a public HTTPS endpoint with a valid certificate. For a private endpoint, contact us to arrange access to that address. You cannot enable private network access from Setup.

Change or remove access

Replace the connection in Setup to rotate its credential, endpoint, tenant, or selector list. The saved connection changes only after the replacement validates. Revoke the credential in your provider to stop later reads.

Removing access does not delete connection details or results already stored in Perfloop.

Provider documentation

Security questions: security@perfloop.ai