Project

General

Profile

Actions

Feature #9260

open
AD CT

stats: output stats in an OpenTelemetry-compatible format

Feature #9260: stats: output stats in an OpenTelemetry-compatible format

Added by Andreas Dolp 23 days ago. Updated 12 days ago.

Status:
Triaged
Priority:
Normal
Target version:
Effort:
Difficulty:
Label:

Description

Suricata stats are currently available as EVE `stats` events and via `dump-counters`.

To use them in a metrics backend, every consumer (Telegraf, Prometheus exporters, custom tooling) has to maintain its own mapping of counters to metric types (e.g. counter vs. gauge). These mappings could possibly drift between Suricata releases and it's sometimes not clear how to interpret the counters.

It would be useful if Suricata could output its stats in an OpenTelemetry-compatible format directly, so that the mapping is maintained where the counters are defined.

Implementation details (core output vs. plugin, transport, which stats sources are covered) are left open for discussion.
This ticket is just a kick-off to document the idea of an OpenTelemetry-compatible output.

JI Updated by Jason Ish 12 days ago Actions #1

  • Status changed from New to Triaged
  • Assignee set to Community Ticket
Actions

Also available in: PDF Atom