Prevent from brute force

My Grafana is now online but I want to limit attack risks.
I have seen that there is an option in ini file :

# disable protection against brute force login attempts
disable_brute_force_login_protection = false

I have uncomment this line, restart grafana.
Trying to log with wrong password, I was able to maque may tests without any issues. Why it is not working ?