The Splunk Distribution of the OpenTelemetry Collector supports the ECS Observer extension. Documentation is planned for a future release.

To find information about this component in the meantime, see ECS Observer extension on GitHub.