[exporter/signalfx] Update *.signalfx.com to *.observability.splunkcloud.com in exporter/signalfxexporter (#47670)

akhileshsingh85 · web-flow · commit 3cbf39cf512b · 2026-04-17T22:53:56.000-07:00
#### Description Splunk Observability Cloud is moving customer-facing ingest and API endpoints from the legacy <code class="md-inline-variable-like" style="padding: 1.5px 4px; border-radius: 5px; background-color: color(srgb 0.231373 0.231373 0.231373 / 0.08); color: color(srgb 0.231373 0.231373 0.231373 / 0.94); font-family: Menlo, Monaco, &quot;Courier New&quot;, monospace; font-size: 0.9em; line-height: 1.4; word-break: break-all;">*.signalfx.com</code> hostnames to <code class="md-inline-variable-like" style="padding: 1.5px 4px; border-radius: 5px; background-color: color(srgb 0.231373 0.231373 0.231373 / 0.08); color: color(srgb 0.231373 0.231373 0.231373 / 0.94); font-family: Menlo, Monaco, &quot;Courier New&quot;, monospace; font-size: 0.9em; line-height: 1.4; word-break: break-all;">*.observability.splunkcloud.com</code>. This change updates the SignalFx exporter so that when realm is set and api_url/ingest_url are not explicitly configured, the derived defaults use the new domain: <br> <table border=1> <tr> <td>Setting</td><td>Previous default (from realm)</td><td>New default</td> </tr> <tr> <td>ingest_url</td><td>https://ingest.{realm}.signalfx.com</td><td>https://ingest.{realm}.observability.splunkcloud.com</td> </tr> <tr> <td>api_url</td><td>https://api.{realm}.signalfx.com</td><td>https://api.{realm}.observability.splunkcloud.com</td> </tr> </table> <br> </div></div></div><p style="--tw-space-y-reverse: 0; margin-block: 0px 16px; margin: 6px 0px; word-break: break-word; color: rgb(59, 59, 59); font-family: -apple-system, &quot;system-ui&quot;, sans-serif; font-size: 13px; font-style: normal; font-variant-ligatures: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; orphans: 2; text-align: start; text-indent: 0px; text-transform: none; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; white-space: normal; background-color: rgb(255, 255, 255); text-decoration-thickness: initial; text-decoration-style: initial; text-decoration-color: initial;"><span class="font-semibold" data-streamdown="strong" style="--tw-font-weight: 600; font-weight: 600;">Explicit</span><span> </span><code class="md-inline-variable-like" style="padding: 1.5px 4px; border-radius: 5px; background-color: color(srgb 0.231373 0.231373 0.231373 / 0.08); color: color(srgb 0.231373 0.231373 0.231373 / 0.94); font-family: Menlo, Monaco, &quot;Courier New&quot;, monospace; font-size: 0.9em; line-height: 1.4; word-break: break-all;">api_url</code><span> </span>and<span> </span><code class="md-inline-variable-like" style="padding: 1.5px 4px; border-radius: 5px; background-color: color(srgb 0.231373 0.231373 0.231373 / 0.08); color: color(srgb 0.231373 0.231373 0.231373 / 0.94); font-family: Menlo, Monaco, &quot;Courier New&quot;, monospace; font-size: 0.9em; line-height: 1.4; word-break: break-all;">ingest_url</code><span> </span>values in configuration are unchanged and continue to take precedence over<span> </span><code class="" style="padding: 1.5px 4px; border-radius: 5px; background-color: color(srgb 0.231373 0.231373 0.231373 / 0.08); color: color(srgb 0.231373 0.231373 0.231373 / 0.94); font-family: Menlo, Monaco, &quot;Courier New&quot;, monospace; font-size: 0.9em; line-height: 1.4; word-break: break-all;">realm</code>-based derivation.</p><p style="--tw-space-y-reverse: 0; margin-block: 0px 16px; margin: 6px 0px; word-break: break-word; color: rgb(59, 59, 59); font-family: -apple-system, &quot;system-ui&quot;, sans-serif; font-size: 13px; font-style: normal; font-variant-ligatures: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; orphans: 2; text-align: start; text-indent: 0px; text-transform: none; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; white-space: normal; background-color: rgb(255, 255, 255); text-decoration-thickness: initial; text-decoration-style: initial; text-decoration-color: initial;"><span class="font-semibold" data-streamdown="strong" style="--tw-font-weight: 600; font-weight: 600;">User impact</span></p><ul class="list-inside list-disc whitespace-normal [li_&amp;]:pl-6" data-streamdown="unordered-list" style="--tw-space-y-reverse: 0; margin-block: 0px 16px; list-style-type: disc; white-space: normal; padding-left: 2em; display: flex !important; flex-direction: column !important; gap: 6px !important; margin: 6px 0px !important; color: rgb(59, 59, 59); font-family: -apple-system, &quot;system-ui&quot;, sans-serif; font-size: 13px; font-style: normal; font-variant-ligatures: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; orphans: 2; text-align: start; text-indent: 0px; text-transform: none; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; background-color: rgb(255, 255, 255); text-decoration-thickness: initial; text-decoration-style: initial; text-decoration-color: initial;"><li class="py-1 [&amp;&gt;p]:inline" data-streamdown="list-item" style="padding-block: 4px; word-break: break-word; padding: 0px !important;"><span class="font-semibold" data-streamdown="strong" style="--tw-font-weight: 600; font-weight: 600;">Breaking (behavioral):</span><span> </span>Any deployment that relied on implicit URLs from<span> </span><code class="" style="padding: 1.5px 4px; border-radius: 5px; background-color: color(srgb 0.231373 0.231373 0.231373 / 0.08); color: color(srgb 0.231373 0.231373 0.231373 / 0.94); font-family: Menlo, Monaco, &quot;Courier New&quot;, monospace; font-size: 0.9em; line-height: 1.4; word-break: break-all;">realm</code><span> </span>only will now send traffic to different hostnames. Operators who maintain egress firewalls, proxies, TLS inspection, or service mesh allowlists must ensure<span> </span><code class="" style="padding: 1.5px 4px; border-radius: 5px; background-color: color(srgb 0.231373 0.231373 0.231373 / 0.08); color: color(srgb 0.231373 0.231373 0.231373 / 0.94); font-family: Menlo, Monaco, &quot;Courier New&quot;, monospace; font-size: 0.9em; line-height: 1.4; word-break: break-all;">*.observability.splunkcloud.com</code><span> </span>(and the concrete hosts for their realm) are permitted if they were previously scoped only to<span> </span><code class="" style="padding: 1.5px 4px; border-radius: 5px; background-color: color(srgb 0.231373 0.231373 0.231373 / 0.08); color: color(srgb 0.231373 0.231373 0.231373 / 0.94); font-family: Menlo, Monaco, &quot;Courier New&quot;, monospace; font-size: 0.9em; line-height: 1.4; word-break: break-all;">*.signalfx.com</code>.</li><li class="py-1 [&amp;&gt;p]:inline" data-streamdown="list-item" style="padding-block: 4px; word-break: break-word; padding: 0px !important;">Deployments that already set full<span> </span><code class="md-inline-variable-like" style="padding: 1.5px 4px; border-radius: 5px; background-color: color(srgb 0.231373 0.231373 0.231373 / 0.08); color: color(srgb 0.231373 0.231373 0.231373 / 0.94); font-family: Menlo, Monaco, &quot;Courier New&quot;, monospace; font-size: 0.9em; line-height: 1.4; word-break: break-all;">api_url</code><span> </span>and<span> </span><code class="md-inline-variable-like" style="padding: 1.5px 4px; border-radius: 5px; background-color: color(srgb 0.231373 0.231373 0.231373 / 0.08); color: color(srgb 0.231373 0.231373 0.231373 / 0.94); font-family: Menlo, Monaco, &quot;Courier New&quot;, monospace; font-size: 0.9em; line-height: 1.4; word-break: break-all;">ingest_url</code><span> </span>are unaffected.</li></ul>  #### Testing Ran the SignalFx exporter module tests: `cd exporter/signalfxexporter && go test ./... -short`  #### Documentation README updates describe the new {realm}.observability.splunkcloud.com defaults for metrics configuration (api_url, ingest_url) and traces/correlation (api_url, correlation.endpoint defaults).
diff --git a/.chloggen/signalfxexporter-splunkcloud-default-urls.yaml b/.chloggen/signalfxexporter-splunkcloud-default-urls.yaml
@@ -0,0 +1,7 @@
+change_type: breaking
+component: exporter/signalfx
+note: Default `api_url` and `ingest_url` values derived from `realm` now use `*.observability.splunkcloud.com` instead of `*.signalfx.com`.
+issues: [47670]
+subtext: |
+  Explicit `api_url` and `ingest_url` settings are unchanged. Update network allowlists if they targeted only `*.signalfx.com`.
+change_logs: [user]
diff --git a/exporter/signalfxexporter/README.md b/exporter/signalfxexporter/README.md
@@ -33,12 +33,12 @@ The following configuration options are required:
   - `api_url` (no default): Destination to which [properties and
     tags](https://help.splunk.com/en/splunk-observability-cloud/data-tools/metric-finder-and-metadata-catalogue)
     are sent. If `realm` is set, this option is derived and will be
-    `https://api.{realm}.signalfx.com`. If a value is explicitly set, the
+    `https://api.{realm}.observability.splunkcloud.com`. If a value is explicitly set, the
     value of `realm` will not be used in determining `api_url`. The explicit
     value will be used instead.
   - `ingest_url` (no default): Destination where SignalFx metrics are sent. If
     `realm` is set, this option is derived and will be
-    `https://ingest.{realm}.signalfx.com`. If a value is
+    `https://ingest.{realm}.observability.splunkcloud.com`. If a value is
     explicitly set, the value of `realm` will not be used in determining
     `ingest_url`. The explicit value will be used instead. The exporter will 
     automatically append the appropriate path: "/v2/datapoint" for metrics, 
@@ -168,11 +168,11 @@ One of `realm` and `api_url` are required.
 - `access_token` (required, no default): The access token is the authentication token
   provided by SignalFx.
 - `realm` (no default): SignalFx realm where the data will be received.
-- `api_url` (default = `https://api.{realm}.signalfx.com/`): Destination to which correlation updates
+- `api_url` (default = `https://api.{realm}.observability.splunkcloud.com/`): Destination to which correlation updates
    are sent. If a value is explicitly set, the value of `realm` will not be used in determining `api_url`.
    The explicit value will be used instead.
 - `correlation` Contains options controlling the syncing of service and environment properties onto dimensions.
-  - `endpoint` (required, default = `api_url` or `https://api.{realm}.signalfx.com/`): This is the base URL for API requests (e.g. `https://api.us0.signalfx.com`).
+  - `endpoint` (required, default = `api_url` or `https://api.{realm}.observability.splunkcloud.com/`): This is the base URL for API requests (e.g. `https://api.us0.observability.splunkcloud.com`).
   - `timeout` (default = 5s): Is the timeout for every attempt to send data to the backend.
   - `stale_service_timeout` (default = 5 minutes): How long to wait after a span's service name is last seen before uncorrelating it.
   - `max_requests` (default = 20): Max HTTP requests to be made in parallel.
diff --git a/exporter/signalfxexporter/config.go b/exporter/signalfxexporter/config.go
@@ -185,7 +185,7 @@ func (cfg *Config) getMetricTranslator(done chan struct{}) (*translation.MetricT
 func (cfg *Config) getIngestURL() (*url.URL, error) {
 	strURL := cfg.IngestURL
 	if cfg.IngestURL == "" {
-		strURL = fmt.Sprintf("https://ingest.%s.signalfx.com", cfg.Realm)
+		strURL = fmt.Sprintf("https://ingest.%s.observability.splunkcloud.com", cfg.Realm)
 	}
 
 	ingestURL, err := url.Parse(strURL)
@@ -198,7 +198,7 @@ func (cfg *Config) getIngestURL() (*url.URL, error) {
 func (cfg *Config) getAPIURL() (*url.URL, error) {
 	strURL := cfg.APIURL
 	if cfg.APIURL == "" {
-		strURL = fmt.Sprintf("https://api.%s.signalfx.com", cfg.Realm)
+		strURL = fmt.Sprintf("https://api.%s.observability.splunkcloud.com", cfg.Realm)
 	}
 
 	apiURL, err := url.Parse(strURL)
diff --git a/exporter/signalfxexporter/config_test.go b/exporter/signalfxexporter/config_test.go
@@ -339,19 +339,19 @@ func TestConfigGetIngestURL(t *testing.T) {
 			},
 			want: &url.URL{
 				Scheme: "https",
-				Host:   "ingest.us0.signalfx.com",
+				Host:   "ingest.us0.observability.splunkcloud.com",
 				Path:   "",
 			},
 		},
 		{
 			name: "Test URL overrides",
 			cfg: &Config{
 				Realm:     "us0",
-				IngestURL: "https://ingest.us1.signalfx.com/",
+				IngestURL: "https://ingest.us1.observability.splunkcloud.com/",
 			},
 			want: &url.URL{
 				Scheme: "https",
-				Host:   "ingest.us1.signalfx.com",
+				Host:   "ingest.us1.observability.splunkcloud.com",
 				Path:   "/",
 			},
 		},
@@ -390,18 +390,18 @@ func TestConfigGetAPIURL(t *testing.T) {
 			},
 			want: &url.URL{
 				Scheme: "https",
-				Host:   "api.us0.signalfx.com",
+				Host:   "api.us0.observability.splunkcloud.com",
 			},
 		},
 		{
 			name: "Test URL overrides",
 			cfg: &Config{
 				Realm:  "us0",
-				APIURL: "https://api.us1.signalfx.com/",
+				APIURL: "https://api.us1.observability.splunkcloud.com/",
 			},
 			want: &url.URL{
 				Scheme: "https",
-				Host:   "api.us1.signalfx.com",
+				Host:   "api.us1.observability.splunkcloud.com",
 				Path:   "/",
 			},
 		},
@@ -439,14 +439,14 @@ func TestConfigValidateErrors(t *testing.T) {
 			name: "Test empty realm and API URL",
 			cfg: &Config{
 				AccessToken: "access_token",
-				IngestURL:   "https://ingest.us1.signalfx.com/",
+				IngestURL:   "https://ingest.us1.observability.splunkcloud.com/",
 			},
 		},
 		{
 			name: "Test empty realm and Ingest URL",
 			cfg: &Config{
 				AccessToken: "access_token",
-				APIURL:      "https://api.us1.signalfx.com/",
+				APIURL:      "https://api.us1.observability.splunkcloud.com/",
 			},
 		},
 		{
