We saw a lot of grafana-server log in /var/log/messages, this should log into grafana.log instead of /var/log/messages.
Mar 25 13:34:48 sps-me-us-oame-1 grafana-server[84532]: logger=context userId=0 orgId=0 uname= t=2024-03-25T13:34:48.197913127-04:00 level=info msg=“Request Completed” method=GET path=/api/live/ws status=401 remote_addr=10.139.40.14 time_ms=0 duration=4
69.851µs size=27 referer= handler=/api/live/ws
Mar 25 13:34:48 sps-me-us-oame-1 grafana-server[84532]: logger=context userId=0 orgId=0 uname= t=2024-03-25T13:34:48.40066506-04:00 level=info msg=“Request Completed” method=GET path=/api/live/ws status=401 remote_addr=10.139.40.14 time_ms=0 duration=47
0.422µs size=27 referer= handler=/api/live/ws
Mar 25 13:34:48 sps-me-us-oame-1 grafana-server[84532]: logger=context userId=0 orgId=0 uname= t=2024-03-25T13:34:48.572702103-04:00 level=info msg=“Request Completed” method=GET path=/api/live/ws status=401 remote_addr=10.139.40.14 time_ms=0 duration=4
49.2µs size=27 referer= handler=/api/live/ws