Configure Splunk Enterprise and enable OpenTelemetry Collectors

To be able to use the OTel Collectors feature in agent management, you have to configure Splunk Enterprise. This topic presents an example of configuration.

The following configuration in this topic is only an example.

  1. Log in to Splunk Enterprise as an admin.
  2. Enable the feature using one of the following options:
    1. In Splunk Enterprise, follow these steps:
      1. Select Settings and then select OTel Collectors under the Distributed Environment section.
      2. If you use this feature for the first time, you have to enable OTel Collectors management. Select Enable OTel Collectors management.
      3. Select Restart Splunk. The restart might take some time.
    2. In the server.conf file, follow these steps:
      1. Use the following settings: 
        [data_management]
otel_collector_management_enabled = true
      2. Restart Splunk Enterprise.
  3. After enabling the feature, refresh the page to access the empty list of OTel Collectors.
  4. Copy the IP address of your Agent Management Splunk server for later use.
  5. Set up access tokens:
    1. Log in to Splunk Enterprise as an admin.
    2. Go to Settings, select Tokens, and then select New Token. For more information about token creation, see Create authentication tokens in the Securing Splunk Enterprise manual.
    3. Create a new token, such as with the following settings:
      • User = admin
      • Audience = general
      • Expiration = Never
      Note: The default value for Expiration is +30 d. It means that the token expires after 30 days. To create a token that never expires, you can set the value to Never.
    4. Select Create.
    5. The token is displayed in the Token field. Copy the token and paste it into the config.yaml configuration file as described in the next section.
    6. Select Close.

Next step

Configure the open-source OpenTelemetry Collector