Trying to setup splunk otel collector using the image quay.io/signalfx/splunk-otel-collector:latest in docker desktop or Azure Container App to read the log from file using file receiver and splunk_hec exporter. Howerver the receiving following error.
2024-03-07 12:56:27 2024-03-07T17:56:27.001Z info exporterhelper/retry_sender.go:118 Exporting failed. Will retry the request after interval. {"kind": "exporter", "data_type": "logs", "name": "splunk_hec", "error": "Post https://splunkcnqa-hf-east.com.cn:8088/services/collector/event\": dial tcp 42.159.148.223:8088: i/o timeout (Client.Timeout exceeded while awaiting headers)", "interval": "2.984810083s"}
using the below config
============================
extensions:
memory_ballast:
size_mib: 500
receivers:
filelog:
include:
- /var/log/*.log
encoding: utf-8
fingerprint_size: 1kb
force_flush_period: "0"
include_file_name: false
include_file_path: true
max_concurrent_files: 100
max_log_size: 1MiB
operators:
- id: parser-docker
timestamp:
layout: '%Y-%m-%dT%H:%M:%S.%LZ'
parse_from: attributes.time
type: json_parser
poll_interval: 200ms
start_at: beginning
processors:
batch:
exporters:
splunk_hec:
token: "XXXXXX"
endpoint: "https://splunkcnqa-hf-east.com.cn:8088/services/collector/event"
source: "otel"
sourcetype: "otel"
index: "index_preprod"
profiling_data_enabled: true
tls:
insecure_skip_verify: true
service:
pipelines:
logs:
receivers: [filelog]
processors: [batch]
exporters: [splunk_hec]
