agent_config.yaml

extensions:
  health_check:
  smartagent:
    bundleDir: "${SPLUNK_BUNDLE_DIR}"
    collectd:
      configDir: "${SPLUNK_COLLECTD_DIR}"
  zpages:
  #endpoint: 0.0.0.0:55679

receivers:
  filelog:
    include: [ /gethdata/geth.log ]
    operators:
      - type: regex_parser
        regex: '^(?P<loglevel>\w+)\s\[(?P<timestamp_field>.*)\]\s(?P<message>.*)'
        timestamp:
          parse_from: timestamp_field
          layout_type: gotime
          layout: '01-02|15:04:05.000'
  hostmetrics:
    collection_interval: 10s
    scrapers:
      cpu:
      disk:
      filesystem:
      memory:
      network:
      # System load average metrics https://en.wikipedia.org/wiki/Load_(computing)
      load:
      # Paging/Swap space utilization and I/O metrics
      paging:
      # Aggregated system process count metrics
      processes:
      # System processes metrics, disabled by default
      # process:
  otlp:
    protocols:
      grpc:
      http:
  prometheus:
    config:
      scrape_configs:
        - job_name: 'geth'
          scrape_interval: 10s
          metrics_path: '/debug/metrics/prometheus'
          static_configs:
            - targets: ['127.0.0.1:6060']
        - job_name: 'otel-collector'
          scrape_interval: 10s
          static_configs:
            - targets: ['0.0.0.0:8888']
          metric_relabel_configs:
            - source_labels: [ __name__ ]
              regex: '.*grpc_io.*'
              action: drop

processors:
  batch:
  memory_limiter:
    ballast_size_mib: ${SPLUNK_BALLAST_SIZE_MIB}
    check_interval: 2s
    limit_mib: ${SPLUNK_MEMORY_LIMIT_MIB}
  resourcedetection:
    detectors: [system]
    override: false

exporters:
  # Logs
  splunk_hec:
    token: "$SPLUNK_HEC_TOKEN"
    endpoint: "$SPLUNK_HEC_URL"
    index: "$SPLUNK_INDEX"
    source: "eth-hosting"
    sourcetype: "logs"
    insecure_skip_verify: "$INSECURE_SKIP_VERIFY"
  splunk_hec/metrics:
    token: "$SPLUNK_HEC_TOKEN"
    endpoint: "$SPLUNK_HEC_URL"
    index: "$SPLUNK_METRICS_INDEX"
    source: "eth-hosting"
    sourcetype: "otel:metrics"
    insecure_skip_verify: "$INSECURE_SKIP_VERIFY"
  # Send to gateway
  otlp:
    endpoint: "${SPLUNK_GATEWAY_URL}:4317"
    insecure: true
  # Debug
  logging:
    loglevel: debug

service:
  extensions: [health_check, zpages]
  pipelines:
    metrics:
      receivers: [hostmetrics, otlp, prometheus]
      processors: [memory_limiter, batch, resourcedetection]
      exporters: [splunk_hec/metrics]
    logs:
      receivers: [filelog]
      processors:
        - memory_limiter
        - batch
        - resourcedetection
      exporters: [splunk_hec]