The following example demonstrates a complete setup of the OpenTelemetry collector for audit log export from XProtect services. In this setup, audit logs are ingested over HTTP using the OpenTelemetry Protocol (OTLP) [8]. Authentication is handled through bearer tokens validated against our Identity Provider [11], and the audit logs are enriched with identity metadata.

These logs are then exported to a designated backend system using OTLP over HTTP [18], with authentication handled via an API key or token generated by this backend. This authentication method ensures secure transmis-sion and access control without requiring services to manage backend-specific credentials.

Additionally, to guarantee durability and prevent data loss during outages, the configuration also includes persis-tent file-based storage [12] and retry mechanisms [17].