Paperback 
Annotation Queries Linking the Log and Graph Panels
Video Lecture
Description
In this video, I enhance the quick dashboard that I created in the LogQL section and add an annotation query to help me visualize invalid user login attempts much better.
The queries I demonstrated in this video were
{job="varlogs"}
and
count_over_time({job="varlogs"}[1m])
The annotation queries I demonstrated in this video were,
{job="varlogs"} |= "invalid user"
and
{job="varlogs"} |= "invalid user" != "level=info"
This final annotation query could also have been written as,
{filename="/var/log/auth.log"} |= "invalid user"
You have many options.
Grafana 9 and Ubuntu 22.04 Notes
There are no considerable differences to be aware of as shown and discussed in the video.