Six findings from the review of #6494 survived independent verification. Each was checked against the branch tip, and where behaviour was in question, against a live collector and Loki rather than from the reviewer's claim or from documentation alone. Plan-doc section numbering. 06-implementation-phases.md used "## 6.9" twice: for the new Phase 8 section and for the pre-existing Risk Assessment. Three references already pointed at 6.8.1 and none at 6.9, and the later phases are numbered 6.8.2 through 6.8.4, so Phase 8 becomes 6.8.1 and the sequence is monotonic. Renumbering to 6.10, as suggested on the PR, would have collided with Success Metrics. filelog read position. The receiver relied on the upstream default start_at=end, which skips everything a node wrote before the first poll and reads nothing at all from a log that has stopped being written to. Read from the beginning instead, paired with a file_storage extension so a restart resumes at the last offset rather than re-ingesting the file. The collector image runs as 10001:10001 and ships no writable directory, and a fresh named volume is root-owned, so a one-shot init service prepares the volume first. It reuses an image the stack already pulls, adding no new dependency. Loki log stream label. The job resource attribute did not become a Loki index label, so the documented {job="xrpld"} queries matched nothing. Verified against grafana/loki:3.4.2 with its default config: only service_name and deployment_environment are indexed, and job arrives as structured metadata, which a stream selector cannot match. Dropped the attribute and moved the twelve queries this branch introduced to {service_name="xrpld"}. Three further occurrences in 07-observability-backends.md originate on the phase-1a branch and are left for a commit there. Trace ids on unsampled spans. Logs::format emitted trace_id and span_id whenever the span context was valid. A span dropped by the ParentBasedSampler still carries its parent's ids, so log lines advertised traces that were never exported and the log-to-trace link resolved to nothing. Require the sampled flag as well, and correct the task list and the documentation that promised the fields unconditionally. The remaining two findings were refuted. The reported risk of signing material reaching Loki does not hold: Logs::format already scrubs seven sensitive fields, and there is a single write path to the log file, so every JLOG site is covered. The suggestion to add internalLink to the Loki derived field is not applicable, because that key is not part of Grafana's schema.
20 KiB
OpenTelemetry Integration Testing Guide
This document describes how to verify the xrpld OpenTelemetry telemetry pipeline end-to-end, from span generation through the observability stack (otel-collector, Tempo, Prometheus, Grafana).
Prerequisites
Build xrpld with telemetry
conan install . --build=missing -o telemetry=True
cmake --preset default -Dtelemetry=ON
cmake --build --preset default --target xrpld
The binary is at .build/xrpld.
Required tools
- Docker with
docker compose(v2) - curl
- jq (JSON processor)
Verify binary
.build/xrpld --version
Test 1: Single-Node Standalone (Quick Verification)
This test verifies RPC and transaction spans in standalone mode. Consensus spans will not fire because standalone mode does not run consensus.
Step 1: Start the observability stack
docker compose -f docker/telemetry/docker-compose.yml up -d
Wait for services to be ready:
# otel-collector health
curl -sf http://localhost:13133/ && echo "collector ready"
# Tempo readiness
curl -sf http://localhost:3200/ready >/dev/null && echo "tempo ready"
Step 2: Start xrpld in standalone mode
.build/xrpld --conf docker/telemetry/xrpld-telemetry.cfg -a --start
Wait a few seconds for the node to initialize.
Step 3: Exercise RPC spans
# server_info
curl -s http://localhost:5005 \
-d '{"method":"server_info"}' | jq .result.info.server_state
# server_state
curl -s http://localhost:5005 \
-d '{"method":"server_state"}' | jq .result.state.server_state
# ledger
curl -s http://localhost:5005 \
-d '{"method":"ledger","params":[{"ledger_index":"current"}]}' |
jq .result.ledger_current_index
Step 4: Submit a transaction
Close the ledger first (required in standalone mode):
curl -s http://localhost:5005 -d '{"method":"ledger_accept"}'
Submit a Payment from the genesis account:
curl -s http://localhost:5005 -d '{
"method": "submit",
"params": [{
"secret": "snoPBrXtMeMyMHUVTgbuqAfg1SUTb",
"tx_json": {
"TransactionType": "Payment",
"Account": "rHb9CJAWyB4rj91VRWn96DkukG4bwdtyTh",
"Destination": "rPMh7Pi9ct699iZUTWzJaUMR1o42VEfGqF",
"Amount": "10000000"
}
}]
}' | jq .result.engine_result
Expected result: "tesSUCCESS".
Close the ledger again to finalize:
curl -s http://localhost:5005 -d '{"method":"ledger_accept"}'
Step 5: Verify traces in Tempo
Wait 5 seconds for the batch export, then:
TEMPO="http://localhost:3200"
# Check xrpld service is registered
curl -s "$TEMPO/api/v2/search/tag/resource.service.name/values" | jq '.tagValues[].value'
# Check RPC spans
curl -s "$TEMPO/api/search" \
--data-urlencode 'q={resource.service.name="xrpld" && name="rpc.http_request"}' \
--data-urlencode 'limit=5' | jq '.traces | length'
curl -s "$TEMPO/api/search" \
--data-urlencode 'q={resource.service.name="xrpld" && name="rpc.process"}' \
--data-urlencode 'limit=5' | jq '.traces | length'
curl -s "$TEMPO/api/search" \
--data-urlencode 'q={resource.service.name="xrpld" && name="rpc.command.server_info"}' \
--data-urlencode 'limit=5' | jq '.traces | length'
# Check transaction spans
curl -s "$TEMPO/api/search" \
--data-urlencode 'q={resource.service.name="xrpld" && name="tx.process"}' \
--data-urlencode 'limit=5' | jq '.traces | length'
Or open Grafana Explore with Tempo datasource: http://localhost:3000
Step 6: Teardown
# Kill xrpld (Ctrl+C or)
kill $(pgrep -f 'xrpld.*xrpld-telemetry')
# Stop observability stack
docker compose -f docker/telemetry/docker-compose.yml down
# Clean xrpld data
rm -rf data/
Expected spans (standalone mode)
| Span Name | Expected | Notes |
|---|---|---|
rpc.http_request |
Yes | Every HTTP RPC call |
rpc.process |
Yes | Every RPC processing |
rpc.command.server_info |
Yes | server_info RPC |
rpc.command.server_state |
Yes | server_state RPC |
rpc.command.ledger |
Yes | ledger RPC |
rpc.command.submit |
Yes | submit RPC |
rpc.command.ledger_accept |
Yes | ledger_accept RPC |
tx.process |
Yes | Transaction submission |
tx.receive |
No | No peers in standalone |
consensus.* |
No | Consensus disabled standalone |
Test 2: 6-Node Consensus Network (Full Verification)
This test verifies ALL span categories including consensus and peer transaction relay, using a 6-node validator network.
Automated
Run the integration test script:
bash docker/telemetry/integration-test.sh
The script will:
- Start the observability stack
- Generate 6 validator key pairs
- Create config files for each node
- Start all 6 nodes
- Wait for consensus ("proposing" state)
- Exercise RPC, submit transactions
- Verify all span categories in Tempo
- Verify spanmetrics in Prometheus
- Print results and leave the stack running
Manual
If you prefer to run the steps manually:
Step 1: Start observability stack
docker compose -f docker/telemetry/docker-compose.yml up -d
Step 2: Generate validator keys
Start a temporary standalone xrpld:
.build/xrpld --conf docker/telemetry/xrpld-telemetry.cfg -a --start &
TEMP_PID=$!
sleep 5
Generate 6 key pairs:
for i in $(seq 1 6); do
curl -s http://localhost:5005 \
-d '{"method":"validation_create"}' | jq '.result'
done
Record the validation_seed and validation_public_key for each.
Kill the temporary node:
kill $TEMP_PID
rm -rf data/
Step 3: Create node configs
For each node (1-6), create a config file. Template:
[server]
port_rpc
port_peer
[port_rpc]
port = {5004 + node_number}
ip = 127.0.0.1
admin = 127.0.0.1
protocol = http
[port_peer]
port = {51234 + node_number}
ip = 0.0.0.0
protocol = peer
[node_db]
type=NuDB
path=/tmp/xrpld-integration/node{N}/nudb
online_delete=256
[database_path]
/tmp/xrpld-integration/node{N}/db
[debug_logfile]
/tmp/xrpld-integration/node{N}/debug.log
[validation_seed]
{seed from step 2}
[validators_file]
/tmp/xrpld-integration/validators.txt
[ips_fixed]
127.0.0.1 51235
127.0.0.1 51236
127.0.0.1 51237
127.0.0.1 51238
127.0.0.1 51239
127.0.0.1 51240
[peer_private]
1
[telemetry]
enabled=1
endpoint=http://localhost:4318/v1/traces
batch_size=512
batch_delay_ms=2000
max_queue_size=2048
trace_rpc=1
trace_transactions=1
trace_consensus=1
trace_peer=1
trace_ledger=1
[rpc_startup]
{ "command": "log_level", "severity": "warning" }
[ssl_verify]
0
Step 4: Create validators.txt
[validators]
{public_key_1}
{public_key_2}
{public_key_3}
{public_key_4}
{public_key_5}
{public_key_6}
Step 5: Start all 6 nodes
for i in $(seq 1 6); do
.build/xrpld --conf /tmp/xrpld-integration/node$i/xrpld.cfg --start &
echo $! >/tmp/xrpld-integration/node$i/xrpld.pid
done
Step 6: Wait for consensus
Poll each node until server_state = "proposing":
for port in 5005 5006 5007 5008 5009 5010; do
while true; do
state=$(curl -s http://localhost:$port \
-d '{"method":"server_info"}' |
jq -r '.result.info.server_state')
echo "Port $port: $state"
[ "$state" = "proposing" ] && break
sleep 5
done
done
Step 7: Exercise RPC and submit transaction
# RPC calls
curl -s http://localhost:5005 -d '{"method":"server_info"}'
curl -s http://localhost:5005 -d '{"method":"server_state"}'
curl -s http://localhost:5005 -d '{"method":"ledger","params":[{"ledger_index":"current"}]}'
# Submit transaction
curl -s http://localhost:5005 -d '{
"method": "submit",
"params": [{
"secret": "snoPBrXtMeMyMHUVTgbuqAfg1SUTb",
"tx_json": {
"TransactionType": "Payment",
"Account": "rHb9CJAWyB4rj91VRWn96DkukG4bwdtyTh",
"Destination": "rPMh7Pi9ct699iZUTWzJaUMR1o42VEfGqF",
"Amount": "10000000"
}
}]
}'
Wait 15 seconds for consensus and batch export.
Step 8: Verify in Tempo
See the "Verification Queries" section below.
Expected Span Catalog
All 16 production span names:
| Span Name | Source File | Key Attributes | How to Trigger |
|---|---|---|---|
rpc.http_request |
ServerHandler.cpp | -- | Any HTTP RPC call |
rpc.ws_upgrade |
ServerHandler.cpp | -- | WebSocket upgrade |
rpc.ws_message |
ServerHandler.cpp | -- | WebSocket RPC message |
rpc.process |
ServerHandler.cpp | -- | RPC processing |
rpc.command.<name> |
RPCHandler.cpp | xrpl.rpc.command, xrpl.rpc.version, xrpl.rpc.role |
Any RPC command |
tx.process |
NetworkOPs.cpp | xrpl.tx.hash, xrpl.tx.local, xrpl.tx.path |
Submit transaction |
tx.receive |
PeerImp.cpp | xrpl.peer.id |
Peer relays transaction |
consensus.proposal.send |
RCLConsensus.cpp | xrpl.consensus.round |
Consensus proposing phase |
consensus.ledger_close |
RCLConsensus.cpp | xrpl.consensus.ledger.seq, xrpl.consensus.mode |
Ledger close event |
consensus.accept |
RCLConsensus.cpp | xrpl.consensus.proposers, xrpl.consensus.round_time_ms |
Ledger accepted |
consensus.validation.send |
RCLConsensus.cpp | xrpl.consensus.ledger.seq, xrpl.consensus.proposing |
Validation sent |
consensus.accept.apply |
RCLConsensus.cpp | xrpl.consensus.close_time, close_time_correct, close_resolution_ms, state |
Ledger apply + close time |
tx.apply |
BuildLedger.cpp | xrpl.ledger.tx_count, xrpl.ledger.tx_failed |
Ledger close (tx set) |
ledger.build |
BuildLedger.cpp | xrpl.ledger.seq, xrpl.ledger.close_time, close_time_correct, close_resolution_ms |
Ledger build |
ledger.validate |
LedgerMaster.cpp | xrpl.ledger.seq, xrpl.ledger.validations |
Ledger validated |
ledger.store |
LedgerMaster.cpp | xrpl.ledger.seq |
Ledger stored |
peer.proposal.receive |
PeerImp.cpp | xrpl.peer.id, xrpl.peer.proposal.trusted |
Peer sends proposal |
peer.validation.receive |
PeerImp.cpp | xrpl.peer.id, xrpl.peer.validation.trusted |
Peer sends validation |
Verification Queries
Tempo API
Base URL: http://localhost:3200
TEMPO="http://localhost:3200"
# List all services
curl -s "$TEMPO/api/v2/search/tag/resource.service.name/values" | jq '.tagValues[].value'
# Query traces by operation
for op in "rpc.http_request" "rpc.ws_upgrade" "rpc.ws_message" "rpc.process" \
"rpc.command.server_info" "rpc.command.server_state" "rpc.command.ledger" \
"tx.process" "tx.receive" "tx.apply" \
"consensus.proposal.send" "consensus.ledger_close" \
"consensus.accept" "consensus.accept.apply" \
"consensus.validation.send" \
"ledger.build" "ledger.validate" "ledger.store" \
"peer.proposal.receive" "peer.validation.receive"; do
count=$(curl -s "$TEMPO/api/search" \
--data-urlencode "q={resource.service.name=\"xrpld\" && name=\"$op\"}" \
--data-urlencode "limit=5" |
jq '.traces | length')
printf "%-35s %s traces\n" "$op" "$count"
done
Prometheus API
Base URL: http://localhost:9090
PROM="http://localhost:9090"
# Span call counts (from spanmetrics connector)
curl -s "$PROM/api/v1/query?query=traces_span_metrics_calls_total" |
jq '.data.result[] | {span: .metric.span_name, count: .value[1]}'
# Latency histogram
curl -s "$PROM/api/v1/query?query=traces_span_metrics_duration_milliseconds_count" |
jq '.data.result[] | {span: .metric.span_name, count: .value[1]}'
# RPC calls by command
curl -s "$PROM/api/v1/query?query=traces_span_metrics_calls_total{span_name=~\"rpc.command.*\"}" |
jq '.data.result[] | {command: .metric["xrpl.rpc.command"], count: .value[1]}'
# Deployment-tier labels present on metrics (set by the collector's
# resource/tier processor and promoted via resource_to_telemetry_conversion).
# Expect deployment_environment and xrpl_network_type on each series.
curl -s "$PROM/api/v1/query?query=traces_span_metrics_calls_total" |
jq '.data.result[0].metric | {deployment_environment, xrpl_network_type, service_name}'
Grafana
Open http://localhost:3000 (anonymous admin access enabled).
Pre-configured dashboards:
- RPC Performance: Request rates, latency percentiles by command, top commands, WebSocket rate
- Transaction Overview: Transaction processing rates, apply duration, peer relay, failed tx rate
- Consensus Health: Consensus round duration, proposer counts, mode tracking, accept heatmap
- Ledger Operations: Build/validate/store rates and durations, TX apply metrics
- Peer Network: Proposal/validation receive rates, trusted vs untrusted breakdown (requires
trace_peer=1)
Pre-configured datasources:
- Tempo: Trace data at
http://tempo:3200 - Prometheus: Metrics at
http://prometheus:9090 - Loki: Log data at
http://loki:3100(via Grafana Explore)
Test 3: Log-Trace Correlation
xrpld injects trace_id and span_id into its log output when
a log line is emitted within an active OTel span. This test verifies the
end-to-end log-trace correlation pipeline.
Step 1: Verify trace_id in log output
After running Test 1 or Test 2 (which generate RPC spans), check the xrpld debug.log for trace context:
grep 'trace_id=[a-f0-9]\{32\} span_id=[a-f0-9]\{16\}' /path/to/debug.log
Expected: log lines with trace_id=<32hex> span_id=<16hex> between the
severity code and the message. Example:
2024-Jan-15 10:30:45.123456 UTC RPCHandler:NFO trace_id=abc123def456789012345678abcdef01 span_id=0123456789abcdef Calling server_info
Lines emitted outside of an active span (background tasks, startup) will NOT have trace context — this is expected.
Step 2: Cross-check trace_id in Tempo
Extract a trace_id from the log and verify it exists in Tempo:
TRACE_ID=$(grep -o 'trace_id=[a-f0-9]\{32\}' /path/to/debug.log | head -1 | cut -d= -f2)
echo "Checking trace: $TRACE_ID"
curl -s "http://localhost:3200/api/traces/$TRACE_ID" | jq '.data | length'
Expected result: 1 (the trace exists in Tempo).
Step 3: Verify Loki log ingestion
The OTel Collector's filelog receiver tails xrpld's debug.log and exports parsed entries to Loki. Verify Loki has received entries:
# Query Loki for any xrpld logs
curl -sG "http://localhost:3100/loki/api/v1/query" \
--data-urlencode 'query={service_name="xrpld"}' \
--data-urlencode 'limit=5' | jq '.data.result | length'
Expected: > 0 results.
Step 4: Verify Grafana Tempo-to-Loki correlation
- Open Grafana at http://localhost:3000
- Navigate to Explore -> select Tempo datasource
- Search for a trace (e.g., operation
rpc.command.server_info) - Click "Logs for this trace" in the trace detail view
- Verify that Loki log lines appear, filtered by the trace's
trace_id
Step 5: Verify Grafana Loki-to-Tempo correlation
- In Grafana Explore, select Loki datasource
- Query:
{service_name="xrpld"} |= "trace_id=" - In the log results, click the TraceID derived field link
- Verify it navigates to the full trace in Tempo
Expected results
| Check | Expected |
|---|---|
trace_id= in debug.log |
Present in log lines within active spans |
span_id= in debug.log |
Present alongside trace_id |
| Logs without active span | No trace_id/span_id fields |
| trace_id in Tempo | Matches a valid trace |
| Loki log ingestion | Logs visible via LogQL |
| Tempo -> Loki "Logs for trace" | Shows correlated log lines |
| Loki -> Tempo TraceID link | Navigates to correct trace |
Troubleshooting
No traces in Tempo
- Check otel-collector logs:
docker compose -f docker/telemetry/docker-compose.yml logs otel-collector - Verify xrpld telemetry config has
enabled=1and correct endpoint - Check that otel-collector port 4318 is accessible:
curl -sf http://localhost:4318 && echo "reachable" - Increase
batch_delay_msor decreasebatch_sizein xrpld config
Nodes not reaching "proposing" state
- Check that all peer ports (51235-51240) are not in use:
for p in 51235 51236 51237 51238 51239 51240; do ss -tlnp | grep ":$p " && echo "port $p in use" done - Verify
[ips_fixed]lists all 6 peer ports - Verify
validators.txthas all 6 public keys - Check node debug logs:
tail -50 /tmp/xrpld-integration/node1/debug.log - Ensure
[peer_private]is set to1(prevents reaching out to public network)
Transaction not processing
- Verify genesis account exists:
curl -s http://localhost:5005 \ -d '{"method":"account_info","params":[{"account":"rHb9CJAWyB4rj91VRWn96DkukG4bwdtyTh"}]}' | jq .result.account_data.Balance - Check submit response for error codes
- In standalone mode, remember to call
ledger_acceptafter submitting
No trace_id in log output
- Verify xrpld was built with
telemetry=ON(-Dtelemetry=ONin CMake) - Verify
enabled=1in the[telemetry]config section - Log lines only contain trace context when emitted inside an active span.
Background logs (startup, periodic tasks outside spans) will not have
trace_id/span_id. - Ensure the trace category is enabled (e.g.,
trace_rpc=1for RPC logs)
No logs in Loki
- Verify the log file mount in docker-compose.yml:
The mount source defaults to the repo-relative
volumes: - ${XRPLD_LOG_DIR:-./data/logs}:/var/log/xrpld:rodocker/telemetry/data/logs(where the telemetry configs write). OverrideXRPLD_LOG_DIRto tail logs from another root. - Check OTel Collector logs for filelog receiver errors:
docker compose -f docker/telemetry/docker-compose.yml logs otel-collector | grep -i "filelog\|loki\|error" - Verify Loki is running:
curl -s http://localhost:3100/ready - Verify the filelog receiver glob pattern matches your log files:
The default pattern is
/var/log/xrpld/*/debug.log
Grafana trace-log links not working
- Verify
tracesToLogsis configured in the Tempo datasource provisioning (docker/telemetry/grafana/provisioning/datasources/tempo.yaml) - Verify
derivedFieldsis configured in the Loki datasource provisioning (docker/telemetry/grafana/provisioning/datasources/loki.yaml) - Restart Grafana after changing provisioning files:
docker compose -f docker/telemetry/docker-compose.yml restart grafana
Spanmetrics not appearing in Prometheus
- Verify otel-collector config has
spanmetricsconnector - Check that the metrics pipeline is configured:
service: pipelines: metrics: receivers: [spanmetrics] exporters: [prometheus] - Verify Prometheus can reach collector:
curl -s http://localhost:9090/api/v1/targets | jq '.data.activeTargets'