Compute basis
Two L workloads: metrics and logs; Zabbix, Grafana and identity. Ingest, cardinality and retention determine storage and memory.
Monitoring platform with Grafana, Prometheus and Loki
Metrics, logs and alerts on your own platform: Grafana for dashboards, Prometheus and Loki for the data, Zabbix for host monitoring, sign-in through your identity service.
- Grafana, Prometheus, Loki, Zabbix
- Keycloak or Authentik included
- Your platform, your data
Starting point
Why teams run their own monitoring platform
Anyone who wants to observe systems themselves needs a platform they control, not a service that reads along.
Metrics and logs together
Time series and logs come together in one interface.
Alerts by your rules
You define rules, thresholds and notification paths; Zabbix monitors the hosts.
Define retention
Data volume and retention determine storage and memory and are defined beforehand.
How it fits together
Grafana, Prometheus, Loki and Zabbix working together
Grafana
Dashboards and alert rules; sign-in through generic OAuth.
Prometheus
Metrics and time series; access through a reverse proxy and defined machine access.
Loki
Log storage for Grafana; access through a reverse proxy.
Zabbix
Host monitoring and alerting; sign-in through SAML.
Keycloak or Authentik
Included in the package price. Protocols and roles are defined per application.
Extensions and scope limits
The package provides your own platform. Server monitoring by WZ-IT is the Monitoring offer. Automatic alert forwarding is not part of the package.
Operations
How your monitoring stack is operated
Core apps, monitoring and updates within the agreed scope.
Restore order
Planned restore order: identity, Zabbix database and configuration, Grafana dashboards and data sources, rules; measurement data and configuration have separate recovery targets.
Checks before release
Check versions of Grafana, Prometheus, Loki and Zabbix individually; verify data sources, rules and notification paths after the update.
Offer
What does the monitoring platform cost?
The price includes Grafana, Prometheus, Loki and Zabbix on 2 L workloads. Keycloak or Authentik comes with the package at no extra charge.
Essential, Compute Lfrom €639.40 net per monthEstimate before setup and separate licences.
Calculation
- 2 workloads, one app each included
- €259.80 net per month
- Compute L, 2 workloads
- €179.80 net per month
- 2 additional apps
- €199.80 net per month
- Keycloak or Authentik
- included in the package
- Service level: Essential
- included in price
- Total with Business
- €769.20 net per month
- Total with Priority
- €879.20 net per month
Straightforward provisioning within a few business days
Payment
- Bank transfer
One-time setup based on scope, specified in the proposal. Additional storage is booked in 50 GB steps: €4.99 net per month. Assess Priority for a platform that alerts depend on. The service level remains selectable; the published ladder applies.
Selection
Sign-in for Grafana and Zabbix: Keycloak or Authentik
Keycloak or Authentik is included in the package price. You choose the identity service that fits your organisation.
| Choice | Scope | Configurator entry |
|---|---|---|
| Keycloak | OIDC/SAML, brokering and LDAP/AD federation. Realm and client configuration are operating tasks. | Configure package: Keycloak |
| Authentik | OIDC/SAML, sources, flows and LDAP/proxy providers. Account for outposts per integration. | Configure package: Authentik |
Selection
Which size fits your data volume?
Single-app hosting operates one application. The package adds further apps and shared identity planning; integrations are scoped in the proposal.
| Compute | Resources from registry | Essential, net per month |
|---|---|---|
| S | 2 vCPU · 4 GB RAM · 80 GB NVMe SSD | €459.60 net per month |
| M | 4 vCPU · 8 GB RAM · 80 GB NVMe SSD | €519.40 net per month |
| L | 8 vCPU · 16 GB RAM · 80 GB NVMe SSD | €639.40 net per month |
- L is the starting size. WZ-IT checks which size your use needs before the proposal, based on data volume, cardinality and retention. Users are not limited; XL can be selected in the configurator.
Licences and editions
Licences and editions: Grafana, Prometheus, Loki, Zabbix
As of 25 October 2026. Free cores form the pricing basis. Commercial editions and vendor services are separate.
| Licence | Function and boundary |
|---|---|
| Grafana (AGPL-3.0) | Generic OAuth with a Keycloak guide, LDAP and auth proxy belong to the free core. SAML, team sync and enhanced LDAP belong to Grafana Enterprise. Licence file · Feature documentation · Edition boundary |
| Prometheus (Apache-2.0) | Built in are only TLS, client certificates and basic auth. Sign-in through OIDC or SAML is implemented through an upstream reverse proxy. Licence file · Feature documentation |
| Grafana Loki (AGPL-3.0) | Loki has no sign-in of its own; an authenticating reverse proxy is expected. Token authentication and label-based access control belong to Grafana Enterprise Logs. Licence file · Feature documentation · Edition boundary |
| Zabbix (AGPL-3.0) | AGPL-3.0 from version 7.0. LDAP and SAML 2.0 belong to the core; OpenID Connect is not documented. Subscriptions are support tiers without feature gates. Licence file · Feature documentation · Edition boundary |
| Keycloak (Apache-2.0) | OIDC, SAML and identity brokering in the free core. Licence file · Feature documentation |
| Authentik (MIT) | MIT core with OIDC, SAML, LDAP and proxy providers. Enterprise features have a separate licence and are not included. Licence file · Feature documentation · Edition boundary |
Questions about the monitoring platform
Answers to the most important questions
- Workload, compute, additional apps, storage and service level are summed from the registry. Keycloak or Authentik is included in the package price. One-time setup is based on scope and defined in the proposal; commercial licences are separate.
- Yes. The two entry links select exactly one identity service in the configurator. An existing customer identity provider can be connected after technical review. Sign-in, roles, blocking and emergency access are reviewed together before approval.
- The Monitoring offer lets WZ-IT monitor your servers. This package provides your own platform for metrics, logs and dashboards that you or your team use.
- Retention and data volume are defined in the proposal per data type. More retention needs more storage, which is added in steps at the registry price.
- Backup scope and retention are specified in the proposal using the registry components and your requirements. The recovery order shown describes the planning for this package.
- Original files, databases, configuration and customer-owned exportable keys are recorded in the exit scope. Export formats and handover are specified per app. See the data portability framework.
- Operations in German data centres. A subdomain under wz-it.cloud and one .de domain are included; your own domain can be connected by CNAME. Monthly cancellation with 30 days notice to month-end, no minimum term. WZ-IT sets no user limit; size depends on Compute S to XL and edition limits.
Knowledge
Monitoring and observability in detail
Operations and handover
Related articles
- Zabbix, Checkmk, Prometheus or Netdata: monitoring compared 2026Monitoring comparisons usually list features side by side and arrive at the conclusion that all candidates do essentially the same thing. That misleads, because the...
- ThingsBoard, Grafana & ChirpStack in the Modern IoT Stack: Roles, Integration and Use CasesIoT projects face a central challenge: Which components are needed for a functional IoT stack? From the sensor layer to data collection and visualization, various...
Reviews & projects
Managed open source with consulting and operations
Customer feedback on open-source selection, implementation, maintenance and long-term operations.
WZ-IT moved our studio infrastructure from decentralised individual devices to a central platform: every site is securely connected via VPN, new devices are onboarded automatically and an entire site is provisioned from a template, without manual steps on location. What impressed me most is the breadth and depth of their knowledge: Timo and Robin are not a typical IT provider who sets up a server and leaves. The two of them think their way into highly complex infrastructure and software topics, work through every requirement we put in front of them, and build networking, provisioning and operations so that everything fits together in the end. WZ-IT is an excellent partner for complex software, network and architecture projects.
Steve KirchnerManaging Director, nextGYM GmbH
International
Built in Germany's Ruhr Valley. Running worldwide.
WZ-IT designs, develops and operates infrastructure and software for clients in Germany and internationally. We deliver projects remotely and continue supporting them in ongoing operations after go-live.
Selected projects
- LiveRemote access platform for distributed water treatment plantsABCO Water Systems · Australia · Secure Access & OT
- 81%AWS migration with substantially lower operating costsEVA Real Estate · UAE · Cloud exit & infrastructure
- 98%Provision new sites in minutes instead of hoursnextGYM GmbH · Germany · Automation & IoT
Read client reviews
Observability platform
Configure Observability platform and request an offer
Choose the identity service and add requirements in the configurator. WZ-IT specifies setup, sizing and operating scope in the proposal.
- Straight with Timo and Robin - no sales team, no pitch
- A professional assessment of your situation
- Concrete next steps for infrastructure, software or AI
The conversation is free and non-binding.
WZ-IT's advice on our Azure migration was technically sound and completely non-binding right from the intro call - we took away a great deal.
Jakob ÖschlbergerInno7 GmbH
WZ-IT's advice on our Azure migration was technically sound and completely non-binding right from the intro call - we took away a great deal.