Observability: optional OpenObserve/OTLP support via config

No labels

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference

nsaspy/auto-dig-quasar#51

nsaspy commented

2026-09-09 13:52:14 +00:00

Owner

Coordinate with https://github.com/lost-rob0t/starintel-server/issues/128.

Add optional operator-controlled OpenTelemetry/OTLP observability for Auto-Dig Quasar.

Requirements

Add an optional observability block to the normal init/config path.
Default OFF; no config means no exporter, no outbound observability traffic, and no OpenObserve/collector requirement.
Support endpoint/protocol, service/environment/stream identity, signal toggles, bounded batching/queue/timeouts, and auth via environment/secret reference.
Exporter failures are non-fatal and cannot block run/actor execution.
Instrument run state transitions, actor/worker lifecycle, queue/dispatch, StarIntel/Quasar API boundaries, retries, report/output publication, and errors.
Metrics cover run outcomes/duration, queue/worker state, retries/errors, and external dependency latency with bounded cardinality.
Correlate logs with run/job and trace IDs.
Redact prompts, credentials, raw target/investigation payloads, and sensitive documents by default.
Test disabled mode for zero network activity.
Test configured export and exporter-down behavior.
Document OpenObserve plus generic OTLP configuration.

Docs: https://openobserve.ai/docs/ingestion/

Exclusion

Operator observability only. No anonymous analytics, installation identifiers, or StarIntel-owned telemetry endpoint.

Coordinate with https://github.com/lost-rob0t/starintel-server/issues/128. Add optional operator-controlled OpenTelemetry/OTLP observability for Auto-Dig Quasar. ## Requirements - [ ] Add an optional observability block to the normal init/config path. - [ ] Default OFF; no config means no exporter, no outbound observability traffic, and no OpenObserve/collector requirement. - [ ] Support endpoint/protocol, service/environment/stream identity, signal toggles, bounded batching/queue/timeouts, and auth via environment/secret reference. - [ ] Exporter failures are non-fatal and cannot block run/actor execution. - [ ] Instrument run state transitions, actor/worker lifecycle, queue/dispatch, StarIntel/Quasar API boundaries, retries, report/output publication, and errors. - [ ] Metrics cover run outcomes/duration, queue/worker state, retries/errors, and external dependency latency with bounded cardinality. - [ ] Correlate logs with run/job and trace IDs. - [ ] Redact prompts, credentials, raw target/investigation payloads, and sensitive documents by default. - [ ] Test disabled mode for zero network activity. - [ ] Test configured export and exporter-down behavior. - [ ] Document OpenObserve plus generic OTLP configuration. Docs: https://openobserve.ai/docs/ingestion/ ## Exclusion Operator observability only. No anonymous analytics, installation identifiers, or StarIntel-owned telemetry endpoint.

Rows
Columns

Observability: optional OpenObserve/OTLP support via config #51

Requirements

Exclusion