---
title: "The Cerbos PDP dashboard is now on Grafana Cloud"
description: "The Cerbos PDP dashboard is now on the Grafana Cloud dashboards site. Import it by ID, point it at your Prometheus data source, and every instance in your fleet is on one screen, from health and loaded policy count down to latency percentiles. "
author: "Anna Paykina"
date: "2026-09-15T08:28:07.619Z"
canonical: "https://www.cerbos.dev/blog/cerbos-pdp-dashboard-on-grafana-cloud"
image: "https://stylish-appliance-1c1cc1c30d.media.strapiapp.com/The_Cerbos_PDP_dashboard_is_now_on_Grafana_Cloud_9c0149bfe3.png"
tags: ["guide","engineering"]
source: "https://www.cerbos.dev/blog/cerbos-pdp-dashboard-on-grafana-cloud"
---

# The Cerbos PDP dashboard is now on Grafana Cloud

The Cerbos PDP dashboard is now on the [Grafana Cloud](https://grafana.com/grafana/dashboards/25769-cerbos/) dashboards site. Import it by ID, point it at your Prometheus data source, and every instance in your fleet is on one screen, from health and loaded policy count down to latency percentiles. 

It runs on the Prometheus metrics the PDP has exposed since the first release, so there is nothing new to configure on the PDP side.

## **What the dashboard shows about your PDP fleet**

![Cerbos PDP dashboard on the Grafana Cloud dashboards site.png](https://stylish-appliance-1c1cc1c30d.media.strapiapp.com/Cerbos_PDP_dashboard_on_the_Grafana_Cloud_dashboards_site_4a5eca8f76.png)

**The top row is health**. Each PDP reports whether it is up and whether it is connected to [Cerbos Hub](https://hub.cerbos.cloud/). A PDP that loses its Hub connection keeps serving decisions from the last bundle it received, so nothing fails immediately, but it also stops picking up policy changes. This panel is how you find out before someone reports that a permission change has not taken effect.

**Next to it is the loaded policy count for each instance**. In a healthy fleet every PDP shows the same number. A mismatch usually means an instance is still on an older bundle or a [rollout](https://www.cerbos.dev/features-benefits-and-use-cases/coordinated-rollout-and-monitoring) has not reached it yet, and it is much easier to spot as a number on a panel than by comparing logs across pods.

**The traffic panels cover request, response and error rates** with histograms and percentiles, so you can see whether a latency spike is across the board or confined to one instance or one call type. Below that sit CPU and memory usage, including the internal caches, and the subset of Go runtime metrics that are actually useful when a process is under pressure.

**Instance restarts and Hub disconnections are overlaid as annotations** on every time series, so when you look at a spike the event that caused it is drawn on the same graph. That removes the usual step of cross-referencing timestamps against deployment history.

## **Importing the dashboard**

In Grafana, go to Dashboards, choose New and then Import, and enter the ID 25769\. Pick your Prometheus data source and you are done. If your scrape config already labels PDPs with `instance` and `job=cerbos`, every panel populates on first load. If you use different labels, the dashboard JSON is on the same page and the label names are easy to change.

For the metrics themselves, Cerbos PDP serves them at `/_cerbos/metrics` in Prometheus format and can also push them over OTLP. Both options are covered in the [observability docs](https://docs.cerbos.dev/cerbos/latest/configuration/observability).

## **Metrics tell you the PDP is healthy, audit logs tell you what it decided**

The dashboard answers operational questions. Is the fleet up, is it keeping up with traffic, is it on the current policy. It does not tell you why a particular request was allowed or denied. 

That is what [audit logs](https://www.cerbos.dev/features-benefits-and-use-cases/audit-logs) in Cerbos Hub are for, and the two work together. A restart annotation on the dashboard tells you when a PDP came back, and the audit log tells you what it decided in the minutes around it. Together they cover the full picture of [observability](https://www.cerbos.dev/features-benefits-and-use-cases/advanced-observability) for the authorization layer, from process health down to individual decisions.

If you have built your own panels on the Cerbos metrics over the years, we would love to see them. The published dashboard is a starting point and revisions are welcome.

_[Try Cerbos Hub](https://hub.cerbos.cloud) to connect your PDPs and see the health and policy panels light up, or [book a call](https://www.cerbos.dev/workshop) to walk through your deployment with our team._

## FAQ

### What does the Cerbos PDP Grafana dashboard show?

The Cerbos PDP Grafana dashboard shows the operational health of every PDP instance in your fleet on one screen. It covers PDP health and Cerbos Hub connectivity, the loaded policy count per instance, request, response and error rates with histograms and percentiles, CPU and memory usage including internal caches, and a subset of Go runtime metrics. Instance restarts and Hub disconnections are overlaid as annotations, so a latency spike sits next to the event that caused it.

### How do I import the Cerbos PDP dashboard into Grafana?

You import the Cerbos PDP dashboard into Grafana by going to Dashboards, choosing New and then Import, and entering the dashboard ID 25769. Select your Prometheus data source and every panel populates on first load, as long as your scrape config labels each PDP with a per-instance instance label and job=cerbos. If you use different labels, the dashboard JSON is available on the same Grafana Cloud page and the label names are simple to change.

### Does Cerbos PDP expose Prometheus metrics?

Yes, Cerbos PDP has exposed Prometheus metrics since its first release, so there is nothing new to configure to use the Grafana dashboard. The PDP serves metrics at /_cerbos/metrics in Prometheus format and can also push them over OTLP, and both options are covered in the [observability docs](https://docs.cerbos.dev/cerbos/latest/configuration/observability). Metrics cover process health and traffic, while [audit logs](https://www.cerbos.dev/features-benefits-and-use-cases/audit-logs) in Cerbos Hub record what each PDP decided and why.
