eduroam Monitoring Portal

Dashboards & Visibility

Grafana

Real-time dashboards — fleet health, per-node auth accept/reject rates, roaming-in breakdown, top 5 realms per node, F-Ticks federation stats, EAP method distribution, SLA compliance, and node OS/patch status.

Use for: Daily operations, SLA reporting, NRO reports, trend analysis
Node auth & roaming: /grafana/d/node-auth/

🖥️

Thruk

Active Checks

Active service checks per FreeRADIUS node via Naemon — RADIUS auth probes, EAP certificate expiry, OS patch compliance, disk usage, and process health. Real-time Livestatus data with acknowledgement and downtime scheduling.

Use for: Stats triage, per-node service status, maintenance windows

🔎

Session Lookup

Loki

Per-user session lookup across all FreeRADIUS nodes — auth events, session start/stop times, bandwidth, device MAC, NAS IP. Queries Loki logs shipped from every node via Promtail. No database access needed.

Use for: Helpdesk — search any username across all nodes instantly

Metrics Infrastructure

🔥

Prometheus

Raw metric explorer, PromQL console, scrape target status, and rule evaluation. Covers auth, accounting, SLA, OS health, and F-Ticks across all FreeRADIUS nodes.

Use for: Debugging metrics, writing PromQL queries, target health

🔔

AlertManager

Firing alerts, silence management, and inhibition rules. Routes critical alerts every 30 min, auth alerts hourly, and NRO accounting alerts every 2 hours.

Use for: Silencing during maintenance, reviewing active alerts

Node Deployment

📦

Node Agent

One command deploys: node_exporter, freeradius_exporter, Promtail, EAP method & TLS version collector, EAP certificate expiry monitor, bandwidth, DNS, F-Ticks, federation, and OS patch collectors. Auto-registers with Prometheus, Naemon, and Thruk.

Default deploy:

curl -fsSL https://monitor.eduroam.ke/agent/setup-node-agent.sh | sudo bash

Custom RADIUS secret:

curl -fsSL https://monitor.eduroam.ke/agent/setup-node-agent.sh | sudo FR_SECRET=your_secret bash