diff --git a/INDEX.md b/INDEX.md
index a3555c7..68fb863 100644
--- a/INDEX.md
+++ b/INDEX.md
@@ -315,7 +315,7 @@ Based on the export collected 2026-03-31, your environment includes:
 | VM ID | Name | Status | vCPU | RAM | Disk | Purpose |
 |-------|------|--------|------|-----|------|---------|
 | 100 | docker-hub | Running | 4 | 10GB | 100GB | Container registry / Docker hub mirror |
-| 101 | monitoring-docker | Running | 2 | 8GB | 50GB | Monitoring stack (Grafana / Prometheus / PVE Exporter) |
+| 101 | monitoring-docker | Running | 2 | 8GB | 50GB | Monitoring stack (Grafana / Prometheus / PVE Exporter / Loki) — 192.168.2.114 |
 | 102 | CML | Running | 8 | 32GB | 200GB | Cisco Modeling Labs — network simulation |
 | 104 | ubuntu-dev | Stopped (Template) | 2 | 5GB | 32GB | Ubuntu dev environment template |
 | 105 | pfSense-Firewall | Stopped | 2 | 2GB | 16GB | Firewall lab VM |
@@ -456,29 +456,35 @@ For detailed troubleshooting, see: **[troubleshooting/BUGFIX-SUMMARY.md](trouble
 
 ## Monitoring Stack
 
-The infrastructure includes a comprehensive monitoring and observability stack deployed on VM 101 (monitoring-docker):
+All monitoring and log aggregation runs on **VM 101 (monitoring-docker)** at **192.168.2.114** via Docker Compose.
+SSH access: `ssh server-admin@192.168.2.114` (jump through `root@192.168.2.100`)
 
 ### Components
-- **Grafana** (Port 3000): Visualization and dashboards
-- **Prometheus** (Port 9090): Metrics collection and time-series database
-- **PVE Exporter** (Port 9221): Proxmox VE metrics exporter
 
-### Features
-- Real-time Proxmox infrastructure monitoring
-- VM and container resource utilization tracking
-- Storage pool metrics and capacity planning
-- Network traffic analysis
-- Pre-configured dashboards for Proxmox VE
-- Alerting capabilities (configurable)
+| Service | Port | Purpose |
+|---------|------|---------|
+| Grafana | 3000 | Visualization and dashboards |
+| Prometheus | 9090 | Metrics collection and time-series database |
+| PVE Exporter | 9221 | Proxmox VE metrics scraper |
+| Loki | 3100 | Log aggregation |
+| Promtail | 1514 (syslog), 9080 | Log shipping agent |
 
 ### Access
-- **Grafana UI**: http://192.168.2.101:3000 (VM 101)
-- **Prometheus UI**: http://192.168.2.101:9090 (VM 101)
-- **Metrics Endpoint**: http://192.168.2.101:9221/pve
+
+| Service | URL |
+|---------|-----|
+| Grafana | http://192.168.2.114:3000 |
+| Prometheus | http://192.168.2.114:9090 |
+| PVE Exporter | http://192.168.2.114:9221/pve |
+| Loki | http://192.168.2.114:3100 |
+| Loki (public) | https://loki.apophisnetworking.net |
+
+Config files on host: `/home/server-admin/loki-stack/`
 
 ### Documentation
 For comprehensive setup, configuration, and troubleshooting:
 - **Monitoring Guide**: `monitoring/README.md`
+- **Loki/Promtail Config**: `services/loki-stack/`
 - **Docker Compose Configs**: `monitoring/grafana/`, `monitoring/prometheus/`, `monitoring/pve-exporter/`
 
 ### Key Metrics