Skip to main content

Overview

This guide shows you how to log spans to Splunk Agent Observability using the SplunkAOLogger. The Splunk Agent Observability wrappers and @log decorator are the preferred way to create log traces and spans, but there are times when you need to manually create a trace or a span to give you more granular control over the data you are logging. This guide shows how to manually log a number of spans when calling an LLM. This pattern can be used for times with the wrapper or decorator are not applicable, such as when using a unsupported LLM SDK such as the Azure AI inference SDK. You will be using OpenAI for this example. In this guide you will:
  1. Set up a project with Splunk Agent Observability
  1. Create a basic app to call OpenAI
  2. Create a new Splunk Agent Observability logger to log traces and spans to
  3. Add spans
  4. Add more details to the trace

Before you start

To complete this how-to, you will need:

Install dependencies

To use Splunk Agent Observability, you need to install some package dependencies, and configure environment variables.
1

Install Required Dependencies

Install the required dependencies for your app. If you are using Python, create a virtual environment using your preferred method, then install dependencies inside that environment:
2

Create a .env file, and add the following values

Create a basic app to call OpenAI

1

Create a file for your application called app.py or app.ts.

2

Add the following code to call OpenAI to ask a question

3

Run the app to ensure everything is working

You should see a description of Newton’s first law.

Create a new Splunk Agent Observability logger to log traces and spans to

If you are using the Splunk Agent Observability wrappers or decorators, Splunk Agent Observability automatically create new logging sessions, traces, and spans for you. Seeing as you are doing everything manually, you will need to create a new logger.
1

Import the Splunk Agent Observability logger

At the top of your file, add an import for the Splunk Agent Observability logger:
2

Create a logger instance

Create a new Splunk Agent Observability logger instance. In Python, do this at the start of the main function.
This will pick up the project and Agent Stream from the SPLUNK_AO_PROJECT and SPLUNK_AO_AGENT_STREAM environment variables. You can override these if required by setting the relevant constructor parameters.
3

Create a new trace

The hierarchy for Agent Streams is Sessions contain traces, which contain spans. If you start a new trace, a session is created automatically.Create a new trace using the logger by adding the following code just below the declaration of the logger:
4

Conclude the trace

Once you have finished logging a trace, conclude it by passing in the output. Concluding the trace enqueues it for export automatically.Add the following lines to the bottom of the main function in Python:
Your full code should now look like this:
5

Run the app to log the trace

6

View the logged trace

From your Splunk Agent Observability homepage, open the Agent Stream for your project. You will see a trace in the traces table.A trace in a table showing the input and output
7

View details of the trace

Select the trace to view details. Currently it contains no spans, and shows the question and the LLM response as input and output.A trace details showing no spans

Add spans

The next step is to add spans to the trace. You will be adding an LLM span. LLM spans can contain a range of details about the LLM call. As well as the input and output text, you can add properties such as the number of tokens used, temperature, and more.
1

Pass the logger to the prompt OpenAI function

To use the logger, first you need to pass it to the prompt OpenAI function.Update the function definition to the following:
Update the call to this function in the main function to pass the logger:
2

Log the LLM span

After the call to the LLM in the prompt OpenAI function, add the following to create an LLM span. Pass in the prompt, and the response from the LLM, along with details of the model and a name.
3

Run the app to log the trace

4

View the logged trace

Select the new trace to view details. You will see a single LLM span called “OpenAI GPT-4o-mini response”.A trace details showing an LLM span

Add more details to the trace

Now you have a span, you can add more details to both the span and the trace, such as duration to help measure latency in your app, and number of tokens to help understand usage and cost.
1

Add the number of tokens to the LLM span

Update the call that adds the LLM span to include the details of the tokens returned by the call to OpenAI:
2

Add the duration of the LLM call

If you time the call to the LLM, you can pass this duration to the LLM span.If you are using Python, add an import for time to the top of the file:
app.py
Add code to time the LLM call:
Add this duration to the LLM span:
3

Add the total duration

It can also be helpful to time the entire trace. This allows you to spot bottlenecks in your application.Add similar code to time the code between starting the trace and concluding it. Then pass this to the logger.conclude call:
4

Run the app to log the trace

5

View the details of the logged trace

Select the new trace to view details. In the Evaluators tab you will see the latency.A trace details showing a latency of 1.43 secondsYou can select the LLM span to see more details for that span.
Your logging is now set up! You are ready to configure evaluators for your project.

See also