Getting Data In

Ingest Claude OpenTelemetry logs

becksyboy1
Engager

Hi All,

Has anyone tried to ingest Claude OpenTelemetry logs into Splunk? I'd be interested in understanding what approach was taken.

 

thanks

 

 

Labels (1)
0 Karma

isoutamo
SplunkTrust
SplunkTrust
I need to add here that now we are talking about use of O11y not traditional SCP or Enterprise stacks.
0 Karma

becksyboy1
Engager

Thanks, yep I did see some info around this but not this link, i will take a look.

0 Karma

kknairr
Contributor

@becksyboy1 No worries, let us know how it goes. The below Claude documentation on enabling and configuring OpenTelemetry for Claude Code might as well help to setup.

Monitoring - Claude Code Docs

>>

If this post addressed your question, you can:

  • Give it karma to show appreciation 👍
  • Mark it as the solution if it solved your issue ✔️ 
  • Add a comment if you’d like more details ✏️

Acknowledging helpful answers keeps the community strong and motivates contributors to continue sharing their expertise.

>>

0 Karma

kknairr
Contributor

@becksyboy1 There is no Claude-specific TA in Splunkbase, but the Splunk Distribution of OpenTelemetry Collector could be the official supported path. You can configure the collector to receive Claude’s OTLP logs and forward them into Splunk via HEC. 

Ref: Get started with the Splunk Distribution of the OpenTelemetry Collector | Observability Cloud (last ...

>>

If this post addressed your question, you can:

  • Give it karma to show appreciation 👍
  • Mark it as the solution if it solved your issue ✔️
  • Add a comment if you’d like more details ✏️

Acknowledging helpful answers keeps the community strong and motivates contributors to continue sharing their expertise.

>>

Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Persistent Queue at TcpOut — One of Splunk's Most Practical Features

Splunk introduced persistent queueing at the tcpout layer as one of the most practical resilience features in ...

Skip the Awkward Silence: Have a .conf-ersation at .conf26

Picture this. You arrive at .conf26 already having your socializing and networking plans mapped out. No ...

Rethinking Zero Trust: From Product Purchases to Logical Control Evidence

Implementing Zero Trust (ZT) across complex environments often falters at the very beginning due to a ...