How it works
Midaz uses a dual observability model:
- Client side — For local development, the collector configuration lives in
components/infra/grafana/otelcol-config.yaml, mounted read-only into the bundled all-in-one Grafana/OTel container. It sets the collector’s processors, filters, and exporters. For production and BYOC, configure theotel-collector-leriansubchart values instead. - Lerian side — Lerian operates the managed collector and storage stack. Lerian keeps it secure and consistent.
The bundled collector config masks known sensitive keys — credentials, tokens,
legalDocument, accountAlias — in log bodies and in the app.request.payload span attribute. Masking happens in the collector, so it applies after telemetry leaves the application process. The bundled local-development exporters run with TLS disabled (insecure: true); enable TLS on the collector exporters for any non-local deployment.Key benefits
- Unified view of metrics, logs, and traces in Grafana
- Built on OpenTelemetry standards
- Grafana preconfigured and operated by Lerian
- Secure routing and tenant isolation

