
Security News
November CVEs Fell 25% YoY, Driven by Slowdowns at Major CNAs
November CVE publications fell 25% YoY even as 2025 totals rose, showing how a few major CNAs can swing “global” counts and skew perceived risk.
@instana/opentelemetry-exporter
Advanced tools
An OpenTelemetry exporter to Instana specific span format.
$ npm i --save @instana/opentelemetry-exporter
Even though the Instana Node.js SDK supports several versions of Node.js, users of the Instana Exporter must take into consideration the versions supported by the OpenTelemetry instrumentator.
Making sure that the Node.js version used in your application fulfills both Instana Exporter and OpenTelemetry SDK versions is particularly important for Instana customers who wish to migrate from the Instana Collector to OpenTelemetry.
The Instana Node.js OpenTelemetry exporter for serverless works just like any OpenTelemetry exporter. Once you have your application properly set to be monitored by the OpenTelemetry SDK, the injected tracing module expects an exporter. In our case, the Instana exporter must be imported and instantiated to be used by the OpenTelemetry tracing.
The code sample below demonstrates how the tracing module could look like with the Instana exporter:
'use strict';
const process = require('process');
require('@opentelemetry/api');
const opentelemetry = require('@opentelemetry/sdk-node');
const { getNodeAutoInstrumentations } = require('@opentelemetry/auto-instrumentations-node');
const { Resource } = require('@opentelemetry/resources');
const { SemanticResourceAttributes } = require('@opentelemetry/semantic-conventions');
// Import the Instana OpenTelemetry Exporter
const { InstanaExporter } = require('@instana/opentelemetry-exporter');
// Instantiate the Instana Exporter.
// Make sure to provide the proper agent key and backend endpoint URL.
// You can provide the agent key and backend endpoint URL via the following environment variables:
// * INSTANA_AGENT_KEY
// * INSTANA_ENDPOINT_URL
//
// Alternatively, you can pass these values as an argument to the constructor (see bellow), although it is strongly
// recommended that such sensitive data is not hard coded in the code base.
// Eg: const instanaTraceExporter = new InstanaExporter({ agentKey: 'agent_key', endpointUrl: 'endpoint_url' });
const instanaTraceExporter = new InstanaExporter();
const nodeAutoInstrumentations = getNodeAutoInstrumentations();
const sdk = new opentelemetry.NodeSDK({
resource: new Resource({
[SemanticResourceAttributes.SERVICE_NAME]: 'my-service'
}),
// Configure OpenTelemetry to use the Instana Exporter
traceExporter: instanaTraceExporter,
instrumentations: [nodeAutoInstrumentations]
});
sdk
.start()
.then(() => console.log('Tracing initialized'))
.catch(error => console.log('Error initializing tracing', error));
process.on('SIGTERM', () => {
sdk
.shutdown()
.then(() => console.log('Tracing terminated'))
.catch(error => console.log('Error terminating tracing', error))
.finally(() => process.exit(0));
});
Assuming that your main application is already importing the tracing module, this is all you have to do. Your spans will be properly exported from your OpenTelemetry tracer to the Instana backend.
FAQs
OpenTelemetry Instana Exporter
The npm package @instana/opentelemetry-exporter receives a total of 1,172 weekly downloads. As such, @instana/opentelemetry-exporter popularity was classified as popular.
We found that @instana/opentelemetry-exporter demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 4 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
November CVE publications fell 25% YoY even as 2025 totals rose, showing how a few major CNAs can swing “global” counts and skew perceived risk.

Security News
React disclosed a CVSS 10.0 RCE in React Server Components and is advising users to upgrade affected packages and frameworks to patched versions now.

Research
/Security News
We spotted a wave of auto-generated “elf-*” npm packages published every two minutes from new accounts, with simple malware variants and early takedowns underway.