Skip to main content

Configuration

Availability

Open core · self-host + all Splyntra Cloud plans

Splyntra services are configured through environment variables. This page lists the common ones for the collector and the dashboard.

Collector​

VariablePurpose
PORTOTLP/HTTP listen port (default 4318).
ENVEnvironment name; development enables the splyntra_dev_key fallback, otherwise it is rejected.
POSTGRES_DSNPostgres connection string (metadata).
CLICKHOUSE_DSNClickHouse connection string (traces, logs, metrics).
NATS_URLNATS / JetStream URL (messaging).
VALKEY_ADDRValkey address (cache / queue).
RATE_LIMIT_RPSIngest rate limit in requests per second (default 1000).
CORS_ORIGINSAllowed CORS origins for the query API.
COLLECTOR_SERVICE_TOKENTrusted service token for the dashboard-to-collector channel. See tenancy below.

Alerts and export​

VariablePurpose
ALERT_WEBHOOK_URLGeneric webhook for alert notifications.
ALERT_SLACK_WEBHOOK_URLSlack webhook for alert notifications.
SMTP_*SMTP settings for email alerts.
SPLYNTRA_EXPORT_URLDestination URL for SIEM export.
SPLYNTRA_EXPORT_TOKENBearer token for SIEM export.

Dashboard​

VariablePurpose
NEXT_PUBLIC_API_URLBase URL the browser uses for the API.
COLLECTOR_URLCollector URL the dashboard calls server-side (for example http://collector:4318).
EVAL_URLEvaluation service URL.
NEXTAUTH_SECRETSecret for dashboard session/auth.
SPLYNTRA_API_KEYAPI key the dashboard uses to ingest / query.

Single-tenant vs. multi-tenant​

COLLECTOR_SERVICE_TOKEN controls tenancy at the collector boundary:

  • Blank — single-tenant. The collector serves one implicit tenant.
  • Set — the dashboard's backend presents this trusted token on the dashboard-to-collector channel, and requests are scoped per organization via the X-Splyntra-Org-Id header. Use the same value on both the dashboard and the collector.
warning

Tenant isolation lives at the collector boundary. In a multi-tenant deployment, COLLECTOR_SERVICE_TOKEN must match on both sides and must be kept secret.