Observability: optional OpenObserve/OTLP support via config #4

New issue

Open

opened 2026-09-09 14:25:43 +00:00 by nsaspy · 0 comments

nsaspy commented

2026-09-09 14:25:43 +00:00

Owner

Coordinate with https://github.com/lost-rob0t/starintel-server/issues/128.

Add optional operator-controlled OTLP observability to the DNS hunting actor/tool.

Optional init/config observability block; default OFF/no exporter/no outbound observability traffic.
No OpenObserve/collector dependency for normal operation.
Configure endpoint/protocol/service/environment/stream and secrets through env/secret references.
Instrument job lifecycle, DNS request latency/status, rate/retry/error counts, queue/backpressure, and output publication.
Do not export discovered/raw DNS result payloads, target lists, resolver credentials, or investigation contents by default; allow-list safe metadata.
Exporter failure is bounded/non-fatal.
Tests cover disabled zero-network, configured export, and exporter outage.
Document generic OTLP/OpenObserve setup.

Docs: https://openobserve.ai/docs/ingestion/

Operator observability only; no anonymous/product telemetry.

Coordinate with https://github.com/lost-rob0t/starintel-server/issues/128. Add optional operator-controlled OTLP observability to the DNS hunting actor/tool. - [ ] Optional init/config observability block; default OFF/no exporter/no outbound observability traffic. - [ ] No OpenObserve/collector dependency for normal operation. - [ ] Configure endpoint/protocol/service/environment/stream and secrets through env/secret references. - [ ] Instrument job lifecycle, DNS request latency/status, rate/retry/error counts, queue/backpressure, and output publication. - [ ] Do not export discovered/raw DNS result payloads, target lists, resolver credentials, or investigation contents by default; allow-list safe metadata. - [ ] Exporter failure is bounded/non-fatal. - [ ] Tests cover disabled zero-network, configured export, and exporter outage. - [ ] Document generic OTLP/OpenObserve setup. Docs: https://openobserve.ai/docs/ingestion/ Operator observability only; no anonymous/product telemetry.