Research
Security News
Threat Actor Exposes Playbook for Exploiting npm to Build Blockchain-Powered Botnets
A threat actor's playbook for exploiting the npm ecosystem was exposed on the dark web, detailing how to build a blockchain-powered botnet.
@opentelemetry/exporter-trace-otlp-http
Advanced tools
OpenTelemetry Collector Trace Exporter allows user to send collected traces to the OpenTelemetry Collector
The @opentelemetry/exporter-trace-otlp-http npm package is designed to export telemetry data (specifically traces) from applications to a backend that supports the OpenTelemetry Protocol (OTLP) over HTTP. This is part of the broader OpenTelemetry project, which aims to provide observability through tools for collecting and exporting telemetry data such as traces, metrics, and logs.
Exporting Traces
This feature allows the user to export trace data to an OTLP-compatible backend. The code sample demonstrates how to initialize the OTLPTraceExporter with a specific endpoint URL.
const { OTLPTraceExporter } = require('@opentelemetry/exporter-trace-otlp-http');
const exporter = new OTLPTraceExporter({
url: 'http://your-otlp-endpoint:4318/v1/traces'
});
This package is similar to @opentelemetry/exporter-trace-otlp-http but uses gRPC as the transport protocol instead of HTTP. It is suitable for environments where gRPC is preferred over HTTP for performance reasons or due to existing infrastructure.
The Jaeger exporter sends trace data to Jaeger, a different backend that is popular for tracing. It differs from @opentelemetry/exporter-trace-otlp-http in that it targets Jaeger's own protocol rather than OTLP.
Similar to the Jaeger exporter, the Zipkin exporter sends trace data to a Zipkin backend. This package is for those who use Zipkin as their trace data visualization and storage tool, offering an alternative to OTLP.
Note: This is an experimental package under active development. New releases may include breaking changes.
This module provides a trace-exporter for OTLP (http/json) using protocol version v0.20.0
.
npm install --save @opentelemetry/exporter-trace-otlp-http
The OpenTelemetry Collector Exporter does not have a service name configuration.
In order to set the service name, use the service.name
resource attribute as prescribed in the OpenTelemetry Resource Semantic Conventions.
To see documentation and sample code for the metric exporter, see the exporter-metrics-otlp-http package
The OTLPTraceExporter in Web expects the endpoint to end in /v1/traces
.
import {
BatchSpanProcessor,
WebTracerProvider,
} from '@opentelemetry/sdk-trace-web';
import { OTLPTraceExporter } from '@opentelemetry/exporter-trace-otlp-http';
const collectorOptions = {
url: '<opentelemetry-collector-url>', // url is optional and can be omitted - default is http://localhost:4318/v1/traces
headers: {}, // an optional object containing custom headers to be sent with each request
concurrencyLimit: 10, // an optional limit on pending requests
};
const exporter = new OTLPTraceExporter(collectorOptions);
const provider = new WebTracerProvider({
spanProcessors: [
new BatchSpanProcessor(exporter, {
// The maximum queue size. After the size is reached spans are dropped.
maxQueueSize: 100,
// The maximum batch size of every export. It must be smaller or equal to maxQueueSize.
maxExportBatchSize: 10,
// The interval between two consecutive exports
scheduledDelayMillis: 500,
// How long the export can run before it is cancelled
exportTimeoutMillis: 30000,
})
]
});
provider.register();
const { BasicTracerProvider, BatchSpanProcessor } = require('@opentelemetry/sdk-trace-base');
const { OTLPTraceExporter } = require('@opentelemetry/exporter-trace-otlp-http');
const collectorOptions = {
url: '<opentelemetry-collector-url>', // url is optional and can be omitted - default is http://localhost:4318/v1/traces
headers: {
foo: 'bar'
}, // an optional object containing custom headers to be sent with each request will only work with http
concurrencyLimit: 10, // an optional limit on pending requests
};
const exporter = new OTLPTraceExporter(collectorOptions);
const provider = new BasicTracerProvider({
spanProcessors: [
new BatchSpanProcessor(exporter, {
// The maximum queue size. After the size is reached spans are dropped.
maxQueueSize: 1000,
// The interval between two consecutive exports
scheduledDelayMillis: 30000,
})
]
});
provider.register();
For GRPC please check npm-url-grpc
For PROTOBUF please check npm-url-proto
Instead of providing options to OTLPTraceExporter
explicitly, environment variables may be provided instead.
OTEL_EXPORTER_OTLP_ENDPOINT=https://localhost:4318
# this will automatically append the version and signal path
# e.g. https://localhost:4318/v1/traces for `OTLPTraceExporter` and https://localhost:4318/v1/metrics for `OTLPMetricExporter`
If the trace and metric exporter endpoints have different providers, the env var for per-signal endpoints are available to use
OTEL_EXPORTER_OTLP_TRACES_ENDPOINT=https://trace-service:4318/v1/traces
OTEL_EXPORTER_OTLP_METRICS_ENDPOINT=https://metric-service:4318/v1/metrics
# version and signal needs to be explicit
The per-signal endpoints take precedence and overrides
OTEL_EXPORTER_OTLP_ENDPOINT
For more details, see OpenTelemetry Specification on Protocol Exporter.
The OTLPTraceExporter has a timeout configuration option which is the maximum time, in milliseconds, the OTLP exporter will wait for each batch export. The default value is 10000ms.
To override the default timeout duration, use the following options:
Set with environment variables:
Environment variable | Description |
---|---|
OTEL_EXPORTER_OTLP_TRACES_TIMEOUT | The maximum waiting time, in milliseconds, allowed to send each OTLP trace batch. Default is 10000. |
OTEL_EXPORTER_OTLP_TIMEOUT | The maximum waiting time, in milliseconds, allowed to send each OTLP trace and metric batch. Default is 10000. |
OTEL_EXPORTER_OTLP_TRACES_TIMEOUT
takes precedence and overridesOTEL_EXPORTER_OTLP_TIMEOUT
.
Provide timeoutMillis
to OTLPTraceExporter with collectorOptions
:
const collectorOptions = {
timeoutMillis: 15000,
url: '<opentelemetry-collector-url>', // url is optional and can be omitted - default is http://localhost:4318/v1/traces
headers: {
foo: 'bar'
}, // an optional object containing custom headers to be sent with each request will only work with http
concurrencyLimit: 10, // an optional limit on pending requests
};
const exporter = new OTLPTraceExporter(collectorOptions);
Providing
timeoutMillis
withcollectorOptions
takes precedence and overrides timeout set with environment variables.
OTLP requires that transient errors be handled with a retry strategy.
This retry policy has the following configuration, which there is currently no way to customize.
DEFAULT_EXPORT_MAX_ATTEMPTS
: The maximum number of attempts, including the original request. Defaults to 5.DEFAULT_EXPORT_INITIAL_BACKOFF
: The initial backoff duration. Defaults to 1 second.DEFAULT_EXPORT_MAX_BACKOFF
: The maximum backoff duration. Defaults to 5 seconds.DEFAULT_EXPORT_BACKOFF_MULTIPLIER
: The backoff multiplier. Defaults to 1.5.This retry policy first checks if the response has a 'Retry-After'
header. If there is a 'Retry-After'
header, the exporter will wait the amount specified in the 'Retry-After'
header before retrying. If there is no 'Retry-After'
header, the exporter will use an exponential backoff with jitter retry strategy.
The exporter will retry exporting within the exporter timeout configuration time.
examples/otlp-exporter-node
Apache 2.0 - See LICENSE for more information.
FAQs
OpenTelemetry Collector Trace Exporter allows user to send collected traces to the OpenTelemetry Collector
We found that @opentelemetry/exporter-trace-otlp-http demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A threat actor's playbook for exploiting the npm ecosystem was exposed on the dark web, detailing how to build a blockchain-powered botnet.
Security News
NVD’s backlog surpasses 20,000 CVEs as analysis slows and NIST announces new system updates to address ongoing delays.
Security News
Research
A malicious npm package disguised as a WhatsApp client is exploiting authentication flows with a remote kill switch to exfiltrate data and destroy files.