otelcol.exporter.otlp
otelcol.exporter.otlp accepts telemetry data from other otelcol components and writes them over the network using the OTLP gRPC protocol.
Note
otelcol.exporter.otlpis a wrapper over the upstream OpenTelemetry Collectorotlpexporter. Bug reports or feature requests will be redirected to the upstream repository, if necessary.
You can specify multiple otelcol.exporter.otlp components by giving them different labels.
Usage
otelcol.exporter.otlp "<LABEL>" {
client {
endpoint = "<HOST>:<PORT>"
}
}Arguments
You can use the following argument with otelcol.exporter.otlp:
Blocks
You can use the following blocks with otelcol.exporter.otlp:
The > symbol indicates deeper levels of nesting.
For example, client > tls refers to a tls block defined inside a client block.
client
RequiredThe client block configures the gRPC client used by the component.
The following arguments are supported:
By default, requests are compressed with Gzip.
The compression argument controls which compression mechanism to use. Supported strings are:
"gzip""zlib""deflate""snappy""zstd"
If you set compression to "none" or an empty string "", the requests aren’t compressed.
The supported values for balancer_name are listed in the gRPC documentation on Load balancing:
pick_first: Tries to connect to the first address. It uses the address for all RPCs if it connects, or if it fails, it tries the next address and keeps trying until one connection is successful. Because of this, all the RPCs are sent to the same backend.round_robin: Connects to all the addresses it sees and sends an RPC to each backend one at a time in order. For example, the first RPC is sent to backend-1, the second RPC is sent to backend-2, and the third RPC is sent to backend-1.
The :authority header in gRPC specifies the host to which the request is being sent.
It’s similar to the Host header in HTTP requests.
By default, the value for :authority is derived from the endpoint URL used for the gRPC call.
Overriding :authority could be useful when routing traffic using a proxy like Envoy, which makes routing decisions based on the value of the :authority header.
An HTTP proxy can be configured through the following environment variables:
HTTPS_PROXYNO_PROXY
The HTTPS_PROXY environment variable specifies a URL to use for proxying requests.
Connections to the proxy are established via the HTTP CONNECT method.
The NO_PROXY environment variable is an optional list of comma-separated hostnames for which the HTTPS proxy should not be used.
Each hostname can be provided as an IP address (1.2.3.4), an IP address in CIDR notation (1.2.3.4/8), a domain name (example.com), or *.
A domain name matches that domain and all subdomains.
A domain name with a leading “.” (.example.com) matches subdomains only.
NO_PROXY is only read when HTTPS_PROXY is set.
Because otelcol.exporter.otlp uses gRPC, the configured proxy server must be able to handle and proxy HTTP/2 traffic.
keepalive
The keepalive block configures keepalive settings for gRPC client connections.
The following arguments are supported:
tls
The tls block configures TLS settings used for the connection to the gRPC
server.
The following arguments are supported:
If the server doesn’t support TLS, you must set the insecure argument to true.
To disable tls for connections to the server, set the insecure argument to true.
If you set reload_interval to "0s", the certificate never reloaded.
The following pairs of arguments are mutually exclusive and can’t both be set simultaneously:
ca_pemandca_filecert_pemandcert_filekey_pemandkey_file
If cipher_suites is left blank, a safe default list is used.
Refer to the Go TLS documentation for a list of supported cipher suites.
The curve_preferences argument determines the set of elliptic curves to prefer during a handshake in preference order.
If not provided, a default list is used.
The set of elliptic curves available are X25519, P521, P256, and P384.
tpm
The tpm block configures retrieving the TLS key_file from a trusted device.
The following arguments are supported:
The trusted platform module (TPM) configuration can be used for loading TLS key from TPM. Currently only TSS2 format is supported.
The path attribute is not supported on Windows.
Example
otelcol.example.component "<LABEL>" {
...
tls {
...
key_file = "my-tss2-key.key"
tpm {
enabled = true
path = "/dev/tpmrm0"
}
}
}In the above example, the private key my-tss2-key.key in TSS2 format will be loaded from the TPM device /dev/tmprm0.
Note
otelcol.exporter.otlpuses gRPC, which doesn’t allow you to send sensitive credentials likeauthover insecure channels. Sending sensitive credentials over insecure non-TLS connections is supported by non-gRPC exporters such asotelcol.exporter.otlphttp.
debug_metrics
The debug_metrics block configures the metrics that this component generates to monitor its state.
The following arguments are supported:
disable_high_cardinality_metrics is the Alloy equivalent to the telemetry.disableHighCardinalityMetrics feature gate in the OpenTelemetry Collector.
It removes attributes that could cause high cardinality metrics.
For example, attributes with IP addresses and port numbers in metrics about HTTP and gRPC connections are removed.
Note
If configured,
disable_high_cardinality_metricsonly applies tootelcol.exporter.*andotelcol.receiver.*components.
retry_on_failure
The retry_on_failure block configures how failed requests to the gRPC server are retried.
The following arguments are supported:
When enabled is true, failed batches are retried after a given interval.
The initial_interval argument specifies how long to wait before the first retry attempt.
If requests continue to fail, the time to wait before retrying increases by the factor specified by the multiplier argument, which must be greater than 1.0.
The max_interval argument specifies the upper bound of how long to wait between retries.
The randomization_factor argument is useful for adding jitter between retrying Alloy instances.
If randomization_factor is greater than 0, the wait time before retries is multiplied by a random factor in the range [ I - randomization_factor * I, I + randomization_factor * I], where I is the current interval.
If a batch hasn’t been sent successfully, it’s discarded after the time specified by max_elapsed_time elapses.
If max_elapsed_time is set to "0s", failed requests are retried forever until they succeed.
sending_queue
The sending_queue block configures queueing and batching for the exporter.
The following arguments are supported:
The blocking argument is deprecated in favor of the block_on_overflow argument.
When block_on_overflow is true, the component will wait for space. Otherwise, operations will immediately return a retryable error.
When enabled is true, data is first written to an in-memory buffer before sending it to the configured server.
Batches sent to the component’s input exported field are added to the buffer as long as the number of unsent batches doesn’t exceed the configured queue_size.
queue_size determines how long an endpoint outage is tolerated.
Assuming 100 requests/second, the default queue size 1000 provides about 10 seconds of outage tolerance.
To calculate the correct value for queue_size, multiply the average number of outgoing requests per second by the time in seconds that outages are tolerated. A very high value can cause Out Of Memory (OOM) kills.
The sizer argument could be set to:
requests: number of incoming batches of metrics, logs, traces (the most performant option).items: number of the smallest parts of each signal (spans, metric data points, log records).bytes: the size of serialized data in bytes (the least performant option).
The num_consumers argument controls how many readers read from the buffer and send data in parallel.
Larger values of num_consumers allow data to be sent more quickly at the expense of increased network traffic.
If an otelcol.storage.* component is configured and provided in the queue’s storage argument, the queue uses the
provided storage extension to provide a persistent queue and the queue is no longer stored in memory.
Any data persisted will be processed on startup if Alloy is killed or restarted.
Refer to the
exporterhelper documentation in the OpenTelemetry Collector repository for more details.
batch
The batch block configures batching requests based on a timeout and a minimum number of items.
By default, the batch block is not used.
The following arguments are supported:
max_size must be greater than or equal to min_size.
The sizer argument can be set to:
items: The number of the smallest parts of each span, metric data point, or log record.bytes: the size of serialized data in bytes (the least performant option).
Exported fields
The following fields are exported and can be referenced by other components:
input accepts otelcol.Consumer data for any telemetry signal (metrics, logs, or traces).
Component health
otelcol.exporter.otlp is only reported as unhealthy if given an invalid configuration.
Debug information
otelcol.exporter.otlp doesn’t expose any component-specific debug information.
Debug metrics
otelcol_exporter_queue_capacity(gauge): Fixed capacity of the retry queue (in batches)otelcol_exporter_queue_size(gauge): Current size of the retry queue (in batches)otelcol_exporter_send_failed_spans_total(counter): Number of spans in failed attempts to send to destination.otelcol_exporter_sent_spans_total(counter): Number of spans successfully sent to destination.rpc_client_duration_milliseconds(histogram): Measures the duration of inbound RPC.rpc_client_request_size_bytes(histogram): Measures size of RPC request messages (uncompressed).rpc_client_requests_per_rpc(histogram): Measures the number of messages received per RPC. Should be 1 for all non-streaming RPCs.rpc_client_response_size_bytes(histogram): Measures size of RPC response messages (uncompressed).rpc_client_responses_per_rpc(histogram): Measures the number of messages received per RPC. Should be 1 for all non-streaming RPCs.
Examples
The following examples show you how to create an exporter to send data to different destinations.
Send data to a local Tempo instance
You can create an exporter that sends your data to a local Grafana Tempo instance without TLS:
otelcol.exporter.otlp "tempo" {
client {
endpoint = "tempo:4317"
tls {
insecure = true
insecure_skip_verify = true
}
}
}Send data to a managed service
You can create an otlp exporter that sends your data to a managed service, for example, Grafana Cloud.
The Tempo username and Grafana Cloud API Key are injected in this example through environment variables.
otelcol.exporter.otlp "grafana_cloud_traces" {
client {
endpoint = "tempo-xxx.grafana.net/tempo:443"
auth = otelcol.auth.basic.grafana_cloud_traces.handler
}
}
otelcol.auth.basic "grafana_cloud_traces" {
username = sys.env("TEMPO_USERNAME")
password = sys.env("GRAFANA_CLOUD_API_KEY")
}Compatible components
otelcol.exporter.otlp has exports that can be consumed by the following components:
- Components that consume OpenTelemetry
otelcol.Consumer
Note
Connecting some components may not be sensible or components may require further configuration to make the connection work correctly. Refer to the linked documentation for more details.



