ThousandEyes Integration with Splunk Observability Cloud
Run a ThousandEyes Enterprise Agent in Kubernetes, stream synthetics into Splunk Observability Cloud, and pivot between ThousandEyes tests and Splunk APM traces.
This workshop demonstrates integrating ThousandEyes with Splunk Observability Cloud to provide unified visibility across your synthetic monitoring and observability data.
What You’ll Learn #
By the end of this workshop, you will:
- Deploy a ThousandEyes Enterprise Agent as a containerized workload in Kubernetes
- Deploy the included Spring PetClinic application as an internal Kubernetes test target
- Integrate ThousandEyes metrics with Splunk Observability Cloud using OpenTelemetry
- Configure distributed tracing so ThousandEyes and Splunk APM can link to the same requests
- Create synthetic tests for internal Kubernetes services and external dependencies
- Monitor test results in Splunk Observability Cloud dashboards
- Move from ThousandEyes into Splunk APM traces and back to the originating ThousandEyes test
Sections #
Core path #
- Overview - Understand ThousandEyes agent types and architecture
- Deployment - Deploy the Enterprise Agent in Kubernetes
- Splunk Integration - Stream ThousandEyes metrics into Splunk Observability Cloud
- Distributed Tracing - Enable supported bi-directional drilldowns between ThousandEyes and Splunk APM
Scenario extensions #
- Kubernetes Testing - Create internal tests that are useful for both synthetic monitoring and trace correlation
- RUM - Correlate ThousandEyes network signals with Splunk RUM for end-user investigations
Support #
- Troubleshooting - Common issues and solutions
Tip
Think of this scenario as two connected integrations: the OpenTelemetry stream gets ThousandEyes metrics into Splunk, and distributed tracing gives you the reverse path back into ThousandEyes from Splunk APM.Prerequisites #
- A Kubernetes cluster (v1.16+)
- RBAC permissions to deploy resources in your chosen namespace (Note: In this workshop we will use the default namespace)
- A ThousandEyes account with access to Enterprise Agent tokens
- A Splunk Observability Cloud account with ingest token access and permission to create an API token for APM lookups
Benefits of Integration #
By connecting ThousandEyes to Splunk Observability Cloud, you gain:
- 🔗 Unified visibility: Correlate synthetic test results with RUM, APM traces, and infrastructure metrics
- 📊 Enhanced dashboards: Visualize ThousandEyes data alongside your existing Splunk observability metrics
- 🔄 Bi-directional drilldowns: Move from ThousandEyes Service Map to Splunk traces and from Splunk APM back to the ThousandEyes test that generated the request
- 🚨 Centralized alerting: Configure alerts based on ThousandEyes test results within Splunk
- 🔍 Root cause analysis: Quickly identify if issues are network-related (ThousandEyes) or application-related (APM)
- 📈 Comprehensive analytics: Analyze synthetic monitoring trends with Splunk’s powerful analytics engine