Splunk Enterprise

Open Telemetry Exporter to a Cluster

robertlynch2020
Influencer

Hi -

We have been using OT to send data into a single Splunk install and it is working very well.

I am now looking to move this to production and send the data for my Cluster.

3 indexers, but I am unsure how to tell the exporter to do this?
In a forwarder I would give it the host and post of the 3 indexers, but how do I do this in an exporter?

Configure the exportor
exporters:
otlp/aggregation: # push to the aggregator
endpoint: ${AGGREGATOR_HOST}:${AGGREGATOR_PORT}
insecure: true
splunk_hec: # pushed to splunk
token: "a04daf32-68b9-48b2-88a0-6ac53b3ec002"
endpoint: "https://mx33456vm:8088/services/collector"
source: "mx"
sourcetype: "otel"
index: "metrics_test"
insecur...

Thanks for you help in advance 🙂

Labels (1)
Tags (1)
0 Karma
1 Solution

robertlynch2020
Influencer

IN the end i set up an heavy forwarder and this sent the data to multiple indexers that I had on a cluster

View solution in original post

0 Karma

robertlynch2020
Influencer

IN the end i set up an heavy forwarder and this sent the data to multiple indexers that I had on a cluster

0 Karma

robertlynch2020
Influencer

Or do I just configure one HEC on the cluster and push this on the configuration bundle to all the indexers?

If I do that what is the endpoint - as we are moving from one machine to 3 indexers?

endpoint: "https://mx33456vm:8088/services/collector"

0 Karma
Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.
Get Updates on the Splunk Community!

Data Persistence in the OpenTelemetry Collector

This blog post is part of an ongoing series on OpenTelemetry. What happens if the OpenTelemetry collector ...

Introducing Splunk 10.0: Smarter, Faster, and More Powerful Than Ever

Now On Demand Whether you're managing complex deployments or looking to future-proof your data ...

Community Content Calendar, September edition

Welcome to another insightful post from our Community Content Calendar! We're thrilled to continue bringing ...