OpenTelemetry with Splunk

Note

Before you configure the application, check that:

• You have configured OpenTelemetry in your application.
• You have configured Splunk for the Tenant.

This guide helps you to configure OpenTelemetry to send log data to Splunk.

Sidecar

To send data to Splunk using OpenTelemetry, you need to add an OpenTelemetry sidecar collector to your application. The sidecar collector is a container that runs alongside your application and collects telemetry data. FLOW provides a pre-configured collector sidecar that sends only audit log data to Splunk. All other data is sent to the generic OpenTelemetry Collector.

The annotation sidecar.opentelemetry.io/inject: "splunk" tells the OpenTelemetry Operator to inject the sidecar collector into your application.

Instrumentation

In order to configure the application to sent data to the sidecar collector, you need to add the appropriate instrumentation.

You will need to change the annotation instrumentation.opentelemetry.io/inject-* to the appropriate instrumentation. FLOW offers two Instrumentation configurations:

• splunk-http-protobuf
• splunk-grpc

Example

The following example demonstrates how to configure OpenTelemetry to send data to Splunk using the sidecar collector using the Java SDK and gRPC.

Example

spec:
  template:
    metadata:
      annotations:
        sidecar.opentelemetry.io/inject: "splunk"
        instrumentation.opentelemetry.io/inject-java: splunk-grpc

External Documentation

• OpenTelemetry Operator
• OpenTelemetry SDK