Splunk Enterprise

Open Telemetry Exporter to a Cluster

robertlynch2020
Influencer

Hi -

We have been using OT to send data into a single Splunk install and it is working very well.

I am now looking to move this to production and send the data for my Cluster.

3 indexers, but I am unsure how to tell the exporter to do this?
In a forwarder I would give it the host and post of the 3 indexers, but how do I do this in an exporter?

Configure the exportor
exporters:
otlp/aggregation: # push to the aggregator
endpoint: ${AGGREGATOR_HOST}:${AGGREGATOR_PORT}
insecure: true
splunk_hec: # pushed to splunk
token: "a04daf32-68b9-48b2-88a0-6ac53b3ec002"
endpoint: "https://mx33456vm:8088/services/collector"
source: "mx"
sourcetype: "otel"
index: "metrics_test"
insecur...

Thanks for you help in advance 🙂

Labels (1)
Tags (1)
0 Karma
1 Solution

robertlynch2020
Influencer

IN the end i set up an heavy forwarder and this sent the data to multiple indexers that I had on a cluster

View solution in original post

0 Karma

robertlynch2020
Influencer

IN the end i set up an heavy forwarder and this sent the data to multiple indexers that I had on a cluster

0 Karma

robertlynch2020
Influencer

Or do I just configure one HEC on the cluster and push this on the configuration bundle to all the indexers?

If I do that what is the endpoint - as we are moving from one machine to 3 indexers?

endpoint: "https://mx33456vm:8088/services/collector"

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

How much can you really learn in 3 minutes?

Observability can certainly be hard to understand – there's a lot of jargon and buzzwords and it seems to ...

Event Series: The Agentic SOC: Trust Before Autonomy

AI is fundamentally changing security operations, but true progress requires more than just automation—it ...

Free Professional Services for .conf26 Attendees

This year at .conf26, we are doing something a little different. We are bringing the best minds from ...