fluent-plugin-prometheus 2.2.1 → 2.3.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 98f287173d66fb76c109519b9b81e230e13a324dd1b1388b644b57d29aff872a
-  data.tar.gz: 8bf951166f0a76ebaf12bc55e67c774ee8788f69fd74c60ae9168ab0729424ef
+  metadata.gz: c10a2e202128626380ce6fd1003ca82baa6f1ae55bd41642b8f6c0bc44670abc
+  data.tar.gz: 34a77887e5da8f4bb4dc08018478a1592d7dec51411e338b4773ab41ec281e06
 SHA512:
-  metadata.gz: 4e7f3fae38dd44efa082be764b65d610649aa6d6449d159fffb380bfe71464c79bd7764c492c2518ea6a100105910e9ae38b2e37b6327754b442fc780f81d975
-  data.tar.gz: 7a5235458808bf4d9eb9b60994688171d45c455c703dcc55062432765b84d9e7e800043bde6e59d4507a45330461e2554b7631ca69fbaa4e2d8fd523ed664625
+  metadata.gz: 131d844af8a45deb00d2ee53dba0928534a104193aec9a26f5d0760600ffefa2c11cb284fa6e49ae81f1cb4e17520db1b62a2a1acc6af295b964bdfa4c35aa5c
+  data.tar.gz: b9da9de5e2019b290ccd45bfca81ad59cdf7942109e961f8919d1121596e00bc63661cf76825251e4f0a9b796929830a6a7a7dade75ddcc00785f0c901317476

data/.github/ISSUE_TEMPLATE/bug_report.yaml

@@ -0,0 +1,72 @@
+name: Bug Report
+description: Create a report with a procedure for reproducing the bug
+labels: "waiting-for-triage"
+body:
+  - type: markdown
+    attributes:
+      value: |
+        Please check the [README](https://github.com/fluent/fluent-plugin-prometheus/blob/master/README.md) first. To help us investigate the problem, please provide the following information.
+  - type: textarea
+    id: description
+    attributes:
+      label: Describe the bug
+      description: A clear and concise description of what the bug is
+    validations:
+      required: true
+  - type: textarea
+    id: reproduce
+    attributes:
+      label: To Reproduce
+      description: Steps to reproduce the behavior
+    validations:
+      required: true
+  - type: textarea
+    id: expected
+    attributes:
+      label: Expected behavior
+      description: A clear and concise description of what you expected to happen
+    validations:
+      required: true
+  - type: textarea
+    id: environment
+    attributes:
+      label: Your Environment
+      description: |
+        - Fluentd or td-agent version: `fluentd --version` or `td-agent --version`
+        - Operating system: `cat /etc/os-release`
+        - Kernel version: `uname -r`
+
+        Tip: If you hit the problem with older fluentd version, try latest version first.
+      value: |
+        - Fluentd version:
+        - TD Agent/Fluent Package version:
+        - fluent-plugin-prometheus version:
+        - prometheus-client version:
+        - Operating system:
+        - Kernel version:
+      render: markdown
+    validations:
+      required: true
+  - type: textarea
+    id: configuration
+    attributes:
+      label: Your Configuration
+      description: |
+        Write your configuration here. Minimum reproducible fluentd.conf is recommended.
+    validations:
+      required: true
+  - type: textarea
+    id: logs
+    attributes:
+      label: Your Error Log
+      description: Write your ALL error log here
+      render: shell
+    validations:
+      required: true
+  - type: textarea
+    id: addtional-context
+    attributes:
+      label: Additional context
+      description: Add any other context about the problem here.
+    validations:
+      required: false

data/.github/ISSUE_TEMPLATE/config.yml

@@ -0,0 +1,5 @@
+blank_issues_enabled: false
+contact_links:
+  - name: Ask a Question
+    url: https://discuss.fluentd.org/
+    about: I have questions about fluent-plugin-prometheus. Please ask and answer questions at https://discuss.fluentd.org/.

data/.github/ISSUE_TEMPLATE/feature_request.yaml

@@ -0,0 +1,38 @@
+name: Feature request
+description: Suggest an idea for this project
+labels: "waiting-for-triage"
+body:
+  - type: markdown
+    attributes:
+      value: |
+        Please check the [README](https://github.com/fluent/fluent-plugin-prometheus/blob/master/README.md) first. To help us understand the request, please provide the following information.
+  - type: textarea
+    id: description
+    attributes:
+      label: Is your feature request related to a problem? Please describe.
+      description: |
+        A clear and concise description of what the problem is.
+        Ex. I'm always frustrated when [...]
+    validations:
+      required: true
+  - type: textarea
+    id: solution
+    attributes:
+      label: Describe the solution you'd like
+      description: A clear and concise description of what you want to happen.
+    validations:
+      required: true
+  - type: textarea
+    id: alternative
+    attributes:
+      label: Describe alternatives you've considered
+      description: A clear and concise description of any alternative solutions or features you've considered.
+    validations:
+      required: true
+  - type: textarea
+    id: addtional-context
+    attributes:
+      label: Additional context
+      description: Add any other context or screenshots about the feature request here.
+    validations:
+      required: false

data/.github/dependabot.yml

@@ -3,4 +3,21 @@ updates:
   - package-ecosystem: 'github-actions'
     directory: '/'
     schedule:
-      interval: 'weekly'
+      interval: 'monthly'
+    groups:
+      # PR: "Security update [package] from [old] to [new]"
+      # This PR should be merged in hurry
+      security-updates:
+        applies-to: security-updates
+        patterns:
+          - '*'
+
+      # PR: "Bump [package] from [old] to [new]"
+      # No need to be merged this PR in hurry. It is enough to merge
+      # once in a month.
+      monthly-updates:
+        applies-to: version-updates
+        patterns:
+          - '*'
+    # Allow to create PR both of security and normal updates.
+    open-pull-requests-limit: 1

data/.github/workflows/add-to-project.yml

@@ -0,0 +1,24 @@
+name: Add bugs to fluent project
+
+on:
+  issues:
+    types:
+      - opened
+
+jobs:
+  add-to-project:
+    name: Add issue to project
+    runs-on: ubuntu-latest
+    steps:
+      - name: Generate token
+        id: generate_token
+        uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3.2.0
+        with:
+          app-id: ${{ secrets.PROJECT_APP_ID }}
+          private-key: ${{ secrets.PROJECT_APP_PRIVATE_KEY }}
+          owner: fluent
+      - uses: actions/add-to-project@5afcf98fcd03f1c2f92c3c83f58ae24323cc57fd # v2.0.0
+        with:
+          project-url: https://github.com/orgs/fluent/projects/4
+          github-token: ${{ steps.generate_token.outputs.token }}
+          labeled: waiting-for-triage

data/.github/workflows/linux.yml

@@ -4,21 +4,31 @@ on:
     branches: [master]
   pull_request:
     branches: [master]
+  schedule:
+    - cron: '0 0 1 * *'
 jobs:
+  ruby-versions:
+    uses: ruby/actions/.github/workflows/ruby_versions.yml@master
+    with:
+      engine: cruby
+      min_version: 2.7
   build:
+    needs: ruby-versions
     runs-on: ${{ matrix.os }}
     continue-on-error: ${{ matrix.experimental }}
     strategy:
       fail-fast: false
       matrix:
-        ruby: [ '3.4', '3.3', '3.2', '3.1', '3.0', '2.7' ]
+        ruby: ${{ fromJson(needs.ruby-versions.outputs.versions) }}
+        exclude:
+          - ruby: head
         os:
           - ubuntu-latest
         experimental: [false]
     name: Ruby ${{ matrix.ruby }} unit testing on ${{ matrix.os }}
     steps:
-    - uses: actions/checkout@v4
-    - uses: ruby/setup-ruby@v1
+    - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+    - uses: ruby/setup-ruby@95ef2b042f9d7a56d8268cba8559e2842e2ad01b # v1.321.0
       with:
         ruby-version: ${{ matrix.ruby }}
     - name: unit testing

data/.gitignore

@@ -14,3 +14,4 @@
 *.o
 *.a
 mkmf.log
+/vendor/

data/ChangeLog

@@ -1,3 +1,20 @@
+Release 2.3.0 - 2026/09/02
+
+	* in_prometheus: Change default bind address to 127.0.0.1. (#258)
+          This is incompatible behavior change.
+	* in_prometheus: Do not disclosure error details for client (#259)
+	* in_prometheus: Add `ignore_error_log_interval` parameter to suppress repeated error logs (#259,#264)
+          This introduces the log throttling feature.
+	* filter_prometheus: Do not let placeholders built from records override the tag ones (#262)
+	* out_prometheus: Fix a bug that a failing record never reached to @ERROR (#263)
+	* Support `max_series_per_metric` to limit label sets cardinarity. (#265)
+	* Refuse wrong <initlabels> which cannot fit into `max_series_per_metric` (#266,#267)
+          This blocks `max_series_per_metric` mis-configuration on startup.
+
+Release 2.2.2 - 2026/03/27
+
+	* in_prometheus: fix: Add IPv6 support for bind parameter (#240)
+
 Release 2.2.1 - 2025/03/24
 
 	* in_prometheus_tail_monitor: Add throttling metrics as `fluentd_tail_file_throttled`. (GitHub#227)

data/README.md

@@ -1,6 +1,6 @@
 # fluent-plugin-prometheus, a plugin for [Fluentd](https://www.fluentd.org)
 
-[![Build Status](https://travis-ci.org/fluent/fluent-plugin-prometheus.svg?branch=master)](https://travis-ci.org/fluent/fluent-plugin-prometheus)
+[![linux](https://github.com/fluent/fluent-plugin-prometheus/actions/workflows/linux.yml/badge.svg)](https://github.com/fluent/fluent-plugin-prometheus/actions/workflows/linux.yml)
 
 A fluent plugin that instruments metrics from records and exposes them via web interface. Intended to be used together with a [Prometheus server](https://github.com/prometheus/prometheus).
 
@@ -59,11 +59,12 @@ With following configuration, you can access http://localhost:24231/metrics on a
 
 More configuration parameters:
 
-- `bind`: binding interface (default: '0.0.0.0')
+- `bind`: binding interface (default: '127.0.0.1')
 - `port`: listen port (default: 24231)
 - `metrics_path`: metrics HTTP endpoint (default: /metrics)
 - `aggregated_metrics_path`: metrics HTTP endpoint (default: /aggregated_metrics)
 - `content_encoding`: encoding format for the exposed metrics (default: identity). Supported formats are {identity, gzip}
+- `ignore_error_log_interval`: Suppress repeated error logs in a certain period of time or until message was changed (default: 1h)
 
 When using multiple workers, each worker binds to port + `fluent_worker_id`.
 To scrape metrics from all workers at once, you can access http://localhost:24231/aggregated_metrics.
@@ -265,6 +266,132 @@ You can access nested keys in records via dot or bracket notation (https://docs.
 
 See Supported Metric Type and Labels for more configuration parameters.
 
+#### Limiting label expansion
+
+Label values come from records, so a metric grows unboundedly when a label is
+bound to a field with many distinct values. Both plugins can bound it with
+`max_series_per_metric`: once a metric holds that many label sets, a record
+which brings a new one is dropped, while the label sets already known keep
+being instrumented.
+
+|parameter|description|default|
+|---|---|---|
+|max_series_per_metric|The maximum number of label sets a metric can hold. `0` means unlimited.|0|
+|ignore_error_log_interval|The interval in seconds to suppress the repeated warning about the drops. `0` logs every occurrence.|3600|
+
+**The limit is disabled by default and must be enabled explicitly**, since a
+dropped record is lost and cannot be recovered. A `<metric>` section overrides
+the value given to the plugin, so that a metric which expands faster than the
+others is bound on its own, while one whose labels are known to be bounded
+stays unlimited with `0`:
+
+```
+<filter message>
+  @type prometheus
+  max_series_per_metric 1000
+  <metric>
+    name message_foo_counter
+    type counter
+    desc The total number of foo in message.
+    key foo
+    max_series_per_metric 10
+    <labels>
+      path $.kubernetes.pod_name
+    </labels>
+  </metric>
+</filter>
+```
+
+The label sets are counted per metric name, not per `<metric>` section: sections
+with the same `name`, in one plugin or in two, share one count. Each of them
+refuses a new label set once that shared count reaches its own limit, so a
+section which stays at `0` adds label sets without counting them. Its
+`<initlabels>` are counted anyway. They come from the configuration and their
+number is fixed. The metric holds them in every section.
+
+The count is per worker process as well, since a worker has its own registry and
+exposes the metrics it holds itself. With `workers N`, a metric can hold up to N
+times `max_series_per_metric` label sets in total, so divide the number of label
+sets the metric may reach by the number of workers.
+
+A record which fails to be instrumented, for example when the value of `key` is
+not a number, does not consume the limit. A pre-initialized label set
+(`initialized` and `<initlabels>`) consumes it from the start, since the metric
+holds it before any record arrives.
+
+A `<metric>` section is refused at startup with a configuration error when the
+`<initlabels>` label sets already fill its limit. The limit is exceeded before
+any record arrives, and the section can never take a new label set.
+
+These label sets are shared by every section with the same `name`. A section can
+be refused because of another section:
+
+```
+<metric>
+  name shared
+  type counter
+  desc Something foo.
+  max_series_per_metric 2
+  initialized true
+  <labels>
+    path $.path
+  </labels>
+  <initlabels>
+    path /a
+  </initlabels>
+  <initlabels>
+    path /b
+  </initlabels>
+</metric>
+<metric>
+  name shared               # the same name, so the 2 label sets count here too
+  type counter
+  desc Something foo.
+  max_series_per_metric 1   # refused: 2 label sets do not fit into 1
+  <labels>
+    path $.path
+  </labels>
+</metric>
+```
+
+The second section is refused even though it declares no `<initlabels>` of its
+own. The same happens when the first section sets `max_series_per_metric 0`.
+The metric holds its label sets in both cases. A limit equal to their number is
+fine because all label sets of the metric are known in advance.
+
+The check runs after every `<metric>` section of a plugin is read. It does not
+depend on the order of the sections. Sections that share a `name` across two
+plugins are only checked against the sections read before them.
+
+The check runs again when Fluentd reloads the configuration. It counts only the
+label sets from `<initlabels>`. It does not count the label sets that records
+brought, so the metric does not make the reload fail with the label sets it took
+while it was running.
+
+A reload does not clear the registry. The metric still holds the label sets from
+the `<initlabels>` of the old configuration, and the check counts them too. So
+it can refuse a new configuration which has fewer `<initlabels>` than the old
+one. Restart the worker to drop them.
+
+##### Observing what the limit leaves out
+
+A dropped label set is not routed to `@ERROR`, because it is what the
+configuration asks for. It is reported in two ways instead:
+
+* a warning in the Fluentd log, throttled per metric: it is suppressed for
+  `ignore_error_log_interval` seconds and reports how many warnings were
+  suppressed in the meantime.
+* `fluentd_prometheus_dropped_label_sets_total{name}`, which counts the records
+  the metric `name` did not instrument. It is registered on the first drop, so
+  it does not show up as long as nothing is dropped, and its label comes from
+  the configuration and not from a record, so it cannot expand on its own.
+
+Alert on the counter to notice that a metric is losing records:
+
+```
+rate(fluentd_prometheus_dropped_label_sets_total[5m]) > 0
+```
+
 ## Supported Metric Types
 
 For details of each metric type, see [Prometheus documentation](http://prometheus.io/docs/concepts/metric_types/). Also see [metric name guide](http://prometheus.io/docs/practices/naming/).

data/fluent-plugin-prometheus.gemspec

@@ -1,6 +1,6 @@
 Gem::Specification.new do |spec|
   spec.name          = "fluent-plugin-prometheus"
-  spec.version       = "2.2.1"
+  spec.version       = "2.3.0"
   spec.authors       = ["Masahiro Sano"]
   spec.email         = ["sabottenda@gmail.com"]
   spec.summary       = %q{A fluent plugin that collects metrics and exposes for Prometheus.}

data/lib/fluent/plugin/filter_prometheus.rb

@@ -19,7 +19,7 @@ module Fluent::Plugin
     def configure(conf)
       super
       labels = parse_labels_elements(conf)
-      @metrics = Fluent::Plugin::Prometheus.parse_metrics_elements(conf, @registry, labels)
+      @metrics = Fluent::Plugin::Prometheus.parse_metrics_elements(conf, @registry, labels, metric_options)
     end
 
     def filter(tag, time, record)

data/lib/fluent/plugin/in_prometheus/async_wrapper.rb

@@ -4,13 +4,20 @@ module Fluent::Plugin
   class PrometheusInput
     module AsyncWrapper
       def do_request(host:, port:, secure:)
+        # Format host for URI - bracket IPv6 addresses if not already bracketed
+        uri_host = if host.include?(':') && !host.start_with?('[')
+                     "[#{host}]"
+                   else
+                     host
+                   end
+        
         endpoint =
           if secure
             context = OpenSSL::SSL::SSLContext.new
             context.verify_mode = OpenSSL::SSL::VERIFY_NONE
-            Async::HTTP::Endpoint.parse("https://#{host}:#{port}", ssl_context: context)
+            Async::HTTP::Endpoint.parse("https://#{uri_host}:#{port}", ssl_context: context)
           else
-            Async::HTTP::Endpoint.parse("http://#{host}:#{port}")
+            Async::HTTP::Endpoint.parse("http://#{uri_host}:#{port}")
           end
 
         Async::HTTP::Client.open(endpoint) do |client|

data/lib/fluent/plugin/in_prometheus.rb

@@ -11,7 +11,7 @@ module Fluent::Plugin
 
     helpers :thread, :http_server
 
-    config_param :bind, :string, default: '0.0.0.0'
+    config_param :bind, :string, default: '127.0.0.1'
     config_param :port, :integer, default: 24231
     config_param :metrics_path, :string, default: '/metrics'
     config_param :aggregated_metrics_path, :string, default: '/aggregated_metrics'
@@ -36,10 +36,14 @@ module Fluent::Plugin
     desc 'Content encoding of the exposed metrics, Currently supported encoding is identity, gzip. Ref: https://prometheus.io/docs/instrumenting/exposition_formats/#basic-info'
     config_param :content_encoding, :enum, list: [:identity, :gzip], default: :identity
 
+    desc 'Suppress repeated error logs in a certain period of time (1h) or until message was changed'
+    config_param :ignore_error_log_interval, :time, default: 3600
+
     def initialize
       super
       @registry = ::Prometheus::Client.registry
       @secure = nil
+      @error_log_throttle = nil
     end
 
     def configure(conf)
@@ -58,6 +62,8 @@ module Fluent::Plugin
 
       @base_port = @port
       @port += fluentd_worker_id
+
+      @error_log_throttle = Fluent::Plugin::Prometheus::LogThrottle.new(@ignore_error_log_interval)
     end
 
     def multi_workers_ready?
@@ -67,12 +73,25 @@ module Fluent::Plugin
     def start
       super
 
+      # Normalize bind address: strip brackets if present (for consistency)
+      # Brackets are only for URI formatting, not for socket binding
+      @bind = @bind[1..-2] if @bind.start_with?('[') && @bind.end_with?(']')
+
       scheme = @secure ? 'https' : 'http'
-      log.debug "listening prometheus http server on #{scheme}:://#{@bind}:#{@port}/#{@metrics_path} for worker#{fluentd_worker_id}"
+      # Format bind address properly for URLs (add brackets for IPv6)
+      bind_display = @bind.include?(':') ? "[#{@bind}]" : @bind
+      log.debug "listening prometheus http server on #{scheme}://#{bind_display}:#{@port}/#{@metrics_path} for worker#{fluentd_worker_id}"
 
       proto = @secure ? :tls : :tcp
 
-      if @ssl && @ssl['enable'] && @ssl['extra_conf']
+      # IPv6 + TLS combination is not currently supported
+      if @bind.include?(':') && @secure
+        raise Fluent::ConfigError, 'IPv6 with <transport tls> is not currently supported. Use bind 0.0.0.0 with TLS, or bind ::1 without TLS.'
+      end
+
+      # Use webrick for IPv6 or SSL extra_conf
+      # The http_server helper has issues with IPv6 URI construction
+      if (@ssl && @ssl['enable'] && @ssl['extra_conf']) || @bind.include?(':')
         start_webrick
         return
       end
@@ -110,6 +129,8 @@ module Fluent::Plugin
                   ssl_config
                 end
 
+      # Use raw bind address for socket binding (no brackets)
+      # Brackets are only for URL/URI formatting, not for bind()
       http_server_create_http_server(:in_prometheus_server, addr: @bind, port: @port, logger: log, proto: proto, tls_opts: tls_opt) do |server|
         server.get(@metrics_path) { |_req| all_metrics }
         server.get(@aggregated_metrics_path) { |_req| all_workers_metrics }
@@ -127,6 +148,7 @@ module Fluent::Plugin
     private
 
     # For compatiblity because http helper can't support extra_conf option
+    # Also used for IPv6 addresses since http helper has IPv6 URI issues
     def start_webrick
       require 'webrick/https'
       require 'webrick'
@@ -138,28 +160,32 @@ module Fluent::Plugin
         Logger: WEBrick::Log.new(STDERR, WEBrick::Log::FATAL),
         AccessLog: [],
       }
-      if (@ssl['certificate_path'] && @ssl['private_key_path'].nil?) || (@ssl['certificate_path'].nil? && @ssl['private_key_path'])
-        raise RuntimeError.new("certificate_path and private_key_path most both be defined")
-      end
+      
+      # Configure SSL if enabled
+      if @ssl && @ssl['enable']
+        if (@ssl['certificate_path'] && @ssl['private_key_path'].nil?) || (@ssl['certificate_path'].nil? && @ssl['private_key_path'])
+          raise RuntimeError.new("certificate_path and private_key_path most both be defined")
+        end
 
-      ssl_config = {
-        SSLEnable: true,
-        SSLCertName: [['CN', 'nobody'], ['DC', 'example']]
-      }
+        ssl_config = {
+          SSLEnable: true,
+          SSLCertName: [['CN', 'nobody'], ['DC', 'example']]
+        }
 
-      if @ssl['certificate_path']
-        cert = OpenSSL::X509::Certificate.new(File.read(@ssl['certificate_path']))
-        ssl_config[:SSLCertificate] = cert
-      end
+        if @ssl['certificate_path']
+          cert = OpenSSL::X509::Certificate.new(File.read(@ssl['certificate_path']))
+          ssl_config[:SSLCertificate] = cert
+        end
 
-      if @ssl['private_key_path']
-        key = OpenSSL::PKey.read(@ssl['private_key_path'])
-        ssl_config[:SSLPrivateKey] = key
-      end
+        if @ssl['private_key_path']
+          key = OpenSSL::PKey.read(@ssl['private_key_path'])
+          ssl_config[:SSLPrivateKey] = key
+        end
 
-      ssl_config[:SSLCACertificateFile] = @ssl['ca_path'] if @ssl['ca_path']
-      ssl_config = ssl_config.merge(@ssl['extra_conf']) if @ssl['extra_conf']
-      config = ssl_config.merge(config)
+        ssl_config[:SSLCACertificateFile] = @ssl['ca_path'] if @ssl['ca_path']
+        ssl_config = ssl_config.merge(@ssl['extra_conf']) if @ssl['extra_conf']
+        config = ssl_config.merge(config)
+      end
 
       @log.on_debug do
         @log.debug("WEBrick conf: #{config}")
@@ -190,7 +216,8 @@ module Fluent::Plugin
     def all_metrics
       response(::Prometheus::Client::Formats::Text.marshal(@registry))
     rescue => e
-      [500, { 'Content-Type' => 'text/plain' }, e.to_s]
+      log_error_throttled(:metrics, "in_prometheus: failed to render metrics", error: e)
+      [500, { 'Content-Type' => 'text/plain' }, "in_prometheus server error: <#{e.class}>"]
     end
 
     def all_workers_metrics
@@ -203,11 +230,21 @@ module Fluent::Plugin
       end
       response(full_result.get_metrics)
     rescue => e
-      [500, { 'Content-Type' => 'text/plain' }, e.to_s]
+      log_error_throttled(:workers_metrics, "in_prometheus: failed to render workers metrics", error: e)
+      [500, { 'Content-Type' => 'text/plain' }, "in_prometheus server error: <#{e.class}>"]
     end
 
     def send_request_to_each_worker
-      bind = (@bind == '0.0.0.0') ? '127.0.0.1' : @bind
+      # Convert bind address to localhost for inter-worker communication
+      # 0.0.0.0 and :: are not connectable, use localhost instead
+      bind = case @bind
+             when '0.0.0.0'
+               '127.0.0.1'
+             when '::'
+               '::1'  # IPv6 localhost
+             else
+               @bind
+             end
       [*(@base_port...(@base_port + @num_workers))].each do |worker_port|
         do_request(host: bind, port: worker_port, secure: @secure) do |http|
           yield(http.get(@metrics_path))
@@ -242,5 +279,17 @@ module Fluent::Plugin
       end
       [200, { 'Content-Type' => ::Prometheus::Client::Formats::Text::CONTENT_TYPE, 'Content-Encoding' => @content_encoding.to_s }, body]
     end
+
+    def log_error_throttled(scope, message, error:)
+      fingerprint = [error.class, error.message]
+      emit, suppressed = @error_log_throttle.check(scope, fingerprint)
+      return unless emit
+
+      if suppressed > 0
+        log.error message, error_class: error.class, error: error, suppressed_log_count: suppressed
+      else
+        log.error message, error_class: error.class, error: error
+      end
+    end
   end
 end

data/lib/fluent/plugin/out_prometheus.rb

@@ -7,6 +7,8 @@ module Fluent::Plugin
     include Fluent::Plugin::PrometheusLabelParser
     include Fluent::Plugin::Prometheus
 
+    helpers :event_emitter
+
     def initialize
       super
       @registry = ::Prometheus::Client.registry
@@ -19,7 +21,7 @@ module Fluent::Plugin
     def configure(conf)
       super
       labels = parse_labels_elements(conf)
-      @metrics = Fluent::Plugin::Prometheus.parse_metrics_elements(conf, @registry, labels)
+      @metrics = Fluent::Plugin::Prometheus.parse_metrics_elements(conf, @registry, labels, metric_options)
     end
 
     def process(tag, es)