howler-api 3.3.0.dev721__tar.gz → 3.3.0.dev735__tar.gz

{howler_api-3.3.0.dev721 → howler_api-3.3.0.dev735}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: howler-api
-Version: 3.3.0.dev721
+Version: 3.3.0.dev735
 Summary: Howler - API server
 License: MIT
 Keywords: howler,alerting,gc,canada,cse-cst,cse,cst,cyber,cccs
@@ -21,10 +21,10 @@ Classifier: Programming Language :: Python :: 3.14
 Classifier: Topic :: Software Development :: Libraries
 Requires-Dist: apscheduler (==3.11.2)
 Requires-Dist: authlib (>=1.6.0,<2.0.0)
+Requires-Dist: azure-monitor-opentelemetry (>=1.8.7,<2.0.0)
 Requires-Dist: bcrypt (==4.3.0)
 Requires-Dist: chardet (==5.2.0)
 Requires-Dist: chevron (==0.14.0)
-Requires-Dist: elastic-apm[flask] (>=6.22.0,<7.0.0)
 Requires-Dist: elasticsearch (==8.19.3)
 Requires-Dist: flasgger (>=0.9.7.1,<0.10.0.0)
 Requires-Dist: flask (==3.1.3)
@@ -33,6 +33,9 @@ Requires-Dist: gevent (==23.9.1)
 Requires-Dist: gunicorn (==23.0.0)
 Requires-Dist: luqum (>=1.0.0,<2.0.0)
 Requires-Dist: mergedeep (>=1.3.4,<2.0.0)
+Requires-Dist: opentelemetry-exporter-otlp-proto-http (==1.40.0)
+Requires-Dist: opentelemetry-instrumentation-flask (==0.61b0)
+Requires-Dist: opentelemetry-sdk (==1.40.0)
 Requires-Dist: packaging (<25.0)
 Requires-Dist: passlib (==1.7.4)
 Requires-Dist: prometheus-client (==0.24.1)

{howler_api-3.3.0.dev721 → howler_api-3.3.0.dev735}/howler/api/socket.py

@@ -4,6 +4,7 @@ import os
 from typing import Any
 
 from flask import Blueprint, request
+from opentelemetry import trace
 
 import howler.services.event_service as event_service
 from howler.api import ok, unauthorized
@@ -21,10 +22,12 @@ socket_api = Blueprint("socket", "socket", url_prefix="/socket/v1")
 socket_api._doc = "Endpoints concerning websocket connectivity between the client and server"  # type: ignore
 
 logger = get_logger(__file__)
+tracer = trace.get_tracer(__name__)
 
 hit_helper = OdmHelper(Hit)
 
 
+@tracer.start_as_current_span(f"{__name__}.emit")
 @socket_api.route("/emit/<event>", methods=["POST"])
 def emit(event: str):
     """Emit an event to all listening websockets"""
@@ -46,6 +49,7 @@ def emit(event: str):
     return ok()
 
 
+@tracer.start_as_current_span(f"{__name__}.connect")
 @socket_api.route("/connect", websocket=True)  # type: ignore
 @websocket_auth(required_priv=["R"])
 def connect(ws: Server, *args: Any, ws_id: str, **kwargs):

{howler_api-3.3.0.dev721 → howler_api-3.3.0.dev735}/howler/api/v1/clue.py

@@ -3,7 +3,6 @@ import time
 from typing import Callable, Optional
 
 import requests
-from elasticapm.traces import capture_span
 from flask import request
 
 from howler.api import bad_gateway, make_subapi_blueprint, ok
@@ -74,22 +73,21 @@ def proxy_to_clue(path, **kwargs):
     clue_token = get_token(auth_token)
 
     start = time.perf_counter()
-    with capture_span("clue", span_type="http"):
-        if request.method.lower() == "get":
-            response = requests.get(
-                f"{config.core.clue.url}/{path}",
-                headers={"Authorization": f"Bearer {clue_token}", "Accept": "application/json"},
-                params=request.args.to_dict(),
-                timeout=5 * 60,
-            )
-        else:
-            response = requests.post(
-                f"{config.core.clue.url}/{path}",
-                json=request.json,
-                headers={"Authorization": f"Bearer {clue_token}", "Accept": "application/json"},
-                params=request.args.to_dict(),
-                timeout=5 * 60,
-            )
+    if request.method.lower() == "get":
+        response = requests.get(
+            f"{config.core.clue.url}/{path}",
+            headers={"Authorization": f"Bearer {clue_token}", "Accept": "application/json"},
+            params=request.args.to_dict(),
+            timeout=5 * 60,
+        )
+    else:
+        response = requests.post(
+            f"{config.core.clue.url}/{path}",
+            json=request.json,
+            headers={"Authorization": f"Bearer {clue_token}", "Accept": "application/json"},
+            params=request.args.to_dict(),
+            timeout=5 * 60,
+        )
 
     logger.debug("Request to clue completed in %s ms", round(time.perf_counter() - start))
 

{howler_api-3.3.0.dev721 → howler_api-3.3.0.dev735}/howler/app.py

@@ -24,7 +24,6 @@ import logging
 from typing import Any, cast
 
 from authlib.integrations.flask_client import OAuth
-from elasticapm.contrib.flask import ElasticAPM
 from flasgger import Swagger
 from flask import Flask
 from flask.blueprints import Blueprint
@@ -62,14 +61,19 @@ from howler.config import (
 from howler.cronjobs import setup_jobs
 from howler.error import errors
 from howler.healthz import healthz
+from howler.telemetry import setup_telemetry
 
 logger = get_logger(__file__)
 
+
 app = Flask(
     "howler-api",
     static_url_path="/api/static",
     static_folder=config.ui.static_folder,
 )
+if config.core.telemetry.enabled:
+    setup_telemetry(app)
+
 # Disable strict check on trailing slashes for endpoints
 app.url_map.strict_slashes = False
 app.config["JSON_SORT_KEYS"] = False
@@ -204,15 +208,6 @@ if logger.parent:
     for ph in logger.parent.handlers:
         app.logger.addHandler(ph)
 
-# Setup APMs
-if config.core.metrics.apm_server.server_url is not None:
-    logger.info("Exporting application metrics to: %s", config.core.metrics.apm_server.server_url)
-    ElasticAPM(
-        app,
-        server_url=config.core.metrics.apm_server.server_url,
-        service_name="howler_api",
-    )
-
 wlog = logging.getLogger("werkzeug")
 wlog.setLevel(logging.WARNING)
 if logger.parent:  # pragma: no cover

{howler_api-3.3.0.dev721 → howler_api-3.3.0.dev735}/howler/datastore/collection.py

@@ -16,6 +16,7 @@ from typing import Any, Dict, Generic, Literal, Optional, TypeVar, Union, overlo
 import elasticsearch
 from datemath import dm
 from datemath.helpers import DateMathException
+from opentelemetry import trace
 
 from howler import odm
 from howler.common.exceptions import HowlerRuntimeError, HowlerValueError, NonRecoverableError
@@ -66,6 +67,8 @@ console.setLevel(logging.INFO)
 console.setFormatter(logging.Formatter(HWL_LOG_FORMAT, HWL_DATE_FORMAT))
 logger.addHandler(console)
 
+tracer = trace.get_tracer(__name__)
+
 ModelType = TypeVar("ModelType", bound=Model)
 
 
@@ -524,6 +527,7 @@ class ESCollection(Generic[ModelType]):
             else:
                 updated += res["updated"]
 
+    @tracer.start_as_current_span(f"{__name__}.commit")
     def commit(self):
         """This function should be overloaded to perform a commit of the index data of all the different hosts
         specified in self.datastore.hosts.

{howler_api-3.3.0.dev721 → howler_api-3.3.0.dev735}/howler/helper/oauth.py

@@ -5,7 +5,6 @@ from typing import Any, Optional
 
 import requests
 from authlib.integrations.flask_client import OAuth
-from elasticapm.traces import capture_span
 
 from howler.common.exceptions import HowlerException, HowlerValueError
 from howler.common.loader import USER_TYPES
@@ -30,7 +29,6 @@ def reorder_name(name: Optional[str]) -> Optional[str]:
     return " ".join(name.split(", ", 1)[::-1])
 
 
-@capture_span(span_type="authentication")
 def parse_profile(profile: dict[str, Any], provider_config: OAuthProvider) -> dict[str, Any]:  # noqa: C901
     """Parse a raw profile dict into a useful user data dict"""
     # Find email address and normalize it for further processing

{howler_api-3.3.0.dev721 → howler_api-3.3.0.dev735}/howler/odm/models/config.py

@@ -305,27 +305,6 @@ class Auth(BaseModel):
     oauth: OAuth = OAuth()
 
 
-class APMServer(BaseModel):
-    """Application Performance Monitoring (APM) server configuration.
-
-    Defines the connection details for an external APM server used to
-    collect and analyze application performance metrics.
-    """
-
-    server_url: Optional[str] = Field(default=None, description="URL to API server")
-    token: Optional[str] = Field(default=None, description="Authentication token for server")
-
-
-class Metrics(BaseModel):
-    """Metrics collection configuration.
-
-    Configures how Howler collects and exports application metrics,
-    including integration with external APM servers.
-    """
-
-    apm_server: APMServer = APMServer()
-
-
 class Retention(BaseModel):
     """Hit retention policy configuration.
 
@@ -459,18 +438,36 @@ class Notebook(BaseModel):
     )
 
 
+class Telemetry(BaseModel):
+    """Telemetry configuration for Howler.
+
+    Controls whether tracing is enabled and which backend to use.
+    When using ``opentelemetry``, the OTLP exporter is configured via
+    standard OTEL environment variables such as OTEL_EXPORTER_OTLP_ENDPOINT
+    and OTEL_EXPORTER_OTLP_HEADERS.
+    When using ``azure_monitor``, the Azure Monitor exporter is used instead,
+    configured via the APPLICATIONINSIGHTS_CONNECTION_STRING environment variable.
+    """
+
+    enabled: bool = Field(default=False, description="Enable telemetry tracing?")
+    backend: str = Field(
+        default="opentelemetry",
+        description="Telemetry backend to use (e.g. 'opentelemetry', 'azure_monitor')",
+    )
+
+
 class Core(BaseModel):
     """Core application configuration for Howler.
 
-    Aggregates all core service configurations including Redis, metrics,
+    Aggregates all core service configurations including Redis, telemetry,
     and external integrations like Clue and nbgallery notebooks.
     Also manages the loading of external plugins.
     """
 
     plugins: set[str] = Field(description="A list of external plugins to load", default=set())
 
-    metrics: Metrics = Metrics()
-    "Configuration for Metrics Collection"
+    telemetry: Telemetry = Telemetry()
+    "Configuration for OpenTelemetry"
 
     redis: Redis = Redis()
     "Configuration for Redis instances"

{howler_api-3.3.0.dev721 → howler_api-3.3.0.dev735}/howler/security/__init__.py

@@ -3,7 +3,6 @@ import sys
 from typing import Optional
 
 import requests
-from elasticapm.traces import set_user_context
 from flask import request
 from flask import session as flsk_session
 from jwt import ExpiredSignatureError
@@ -214,13 +213,6 @@ class api_login(object):  # noqa: D101, N801
                 FAILED_ATTEMPTS.labels("500").inc()
                 return internal_error(err=e.message)
 
-            if config.core.metrics.apm_server.server_url is not None:
-                set_user_context(
-                    username=user.get("name", None),
-                    email=user.get("email", None),
-                    user_id=user.get("uname", None),
-                )
-
             if request.path.startswith("/api/v1/clue"):
                 logger.debug("Bypassing quota limits for clue enrichment")
             elif self.enforce_quota:

{howler_api-3.3.0.dev721 → howler_api-3.3.0.dev735}/howler/security/utils.py

@@ -4,11 +4,13 @@ import re
 from typing import List, Optional
 from urllib.parse import urlparse
 
-from elasticapm.traces import capture_span
+from opentelemetry import trace
 from passlib.hash import bcrypt
 
 from howler.config import config
 
+tracer = trace.get_tracer(__name__)
+
 UPPERCASE = r"[A-Z]"
 LOWERCASE = r"[a-z]"
 NUMBER = r"[0-9]"
@@ -48,7 +50,7 @@ def get_password_hash(password: Optional[str]) -> Optional[str]:
     return bcrypt.hash(password)
 
 
-@capture_span(span_type="authentication")
+@tracer.start_as_current_span("verify_password")
 def verify_password(password: str, pw_hash: str):
     """Use bcrypt to verify a user's password against the hash"""
     try:

{howler_api-3.3.0.dev721 → howler_api-3.3.0.dev735}/howler/services/auth_service.py

@@ -4,8 +4,8 @@ import hmac
 from datetime import datetime
 from typing import Optional, Union
 
-from elasticapm.traces import capture_span
 from flask import request
+from opentelemetry import trace
 
 import howler.services.jwt_service as jwt_service
 import howler.services.user_service as user_service
@@ -25,6 +25,7 @@ from howler.remote.datatypes.set import ExpiringSet
 from howler.security.utils import generate_random_secret, verify_password
 
 logger = get_logger(__file__)
+tracer = trace.get_tracer(__name__)
 
 nonpersistent_config: dict[str, Union[str, int]] = {
     "host": config.core.redis.nonpersistent.host,
@@ -213,7 +214,7 @@ def validate_token(username: str, token: str) -> Optional[list[str]]:
     return None
 
 
-@capture_span(span_type="authentication")
+@tracer.start_as_current_span("bearer_auth")
 def bearer_auth(
     data: str, skip_jwt: bool = False, skip_internal: bool = False
 ) -> tuple[Optional[User], Optional[list[str]]]:
@@ -257,7 +258,7 @@ def bearer_auth(
             raise InvalidDataException("Not a valid authentication type for this endpoint.")
 
 
-@capture_span(span_type="authentication")
+@tracer.start_as_current_span("validate_apikey")
 def validate_apikey(  # noqa: C901
     username: str, apikey: str, impersonator: Optional[User] = None
 ) -> tuple[Optional[User], Optional[list[str]]]:
@@ -321,6 +322,7 @@ def validate_apikey(  # noqa: C901
         raise AccessDeniedException("API Key authentication disabled")
 
 
+@tracer.start_as_current_span("validate_userpass")
 def validate_userpass(username: str, password: str) -> tuple[Optional[User], Optional[list[str]]]:
     """This function identifies the user via the user/pass functionality
 
@@ -363,7 +365,7 @@ def decode_b64(b64_str: str) -> str:
         raise InvalidDataException("Basic authentication data must be base64 encoded") from e
 
 
-@capture_span(span_type="authentication")
+@tracer.start_as_current_span("basic_auth")
 def basic_auth(
     data: str, is_base64: bool = True, skip_apikey: bool = False, skip_password: bool = False
 ) -> tuple[User | None, list[str] | None]:

{howler_api-3.3.0.dev721 → howler_api-3.3.0.dev735}/howler/services/config_service.py

@@ -3,6 +3,7 @@ from math import ceil
 from typing import Optional
 
 from flask import request
+from opentelemetry import trace
 
 import howler.services.hit_service as hit_service
 from howler.common.exceptions import ForbiddenException, HowlerException
@@ -19,6 +20,8 @@ from howler.utils.str_utils import default_string_value
 
 classification_definition = CLASSIFICATION.get_parsed_classification_definition()
 
+tracer = trace.get_tracer(__name__)
+
 lookups = get_lookups()
 
 logger = get_logger()
@@ -61,6 +64,7 @@ def _get_apikey_max_duration():
         return amount, unit
 
 
+@tracer.start_as_current_span(f"{__name__}.get_configuration")
 def get_configuration(user: User | None, **kwargs):
     """Get system configration data for the Howler API
 

{howler_api-3.3.0.dev721 → howler_api-3.3.0.dev735}/howler/services/event_service.py

@@ -2,18 +2,21 @@ import os
 from typing import Any, Callable
 
 import requests
+from opentelemetry import trace
 from requests.auth import HTTPBasicAuth
 
 from howler.common.logging import get_logger
 from howler.config import DEBUG, HWL_USE_WEBSOCKET_API, config
 
 logger = get_logger(__file__)
+tracer = trace.get_tracer(__name__)
 
 handlers: dict[str, list[Callable]] = {}
 
 HWL_INTERPOD_COMMS_SECRET = os.getenv("HWL_INTERPOD_COMMS_SECRET", "secret")
 
 
+@tracer.start_as_current_span(f"{__name__}.emit")
 def emit(event: str, data: Any):
     """Emit a new instance of the specified event, with additional data related to that event
 

{howler_api-3.3.0.dev721 → howler_api-3.3.0.dev735}/howler/services/hit_service.py

@@ -5,6 +5,7 @@ import typing
 from hashlib import sha256
 from typing import Any, Literal, Optional, Union, cast, overload
 
+from opentelemetry import trace
 from prometheus_client import Counter
 
 import howler.services.event_service as event_service
@@ -36,9 +37,11 @@ from howler.utils.uid import get_random_id
 
 logger = get_logger(__file__)
 
+tracer = trace.get_tracer(__name__)
 odm_helper = OdmHelper(Hit)
 
 
+@tracer.start_as_current_span(f"{__name__}.get_hit_workflow")
 def get_hit_workflow() -> Workflow:
     """Get the workflow that is used for transitioning between howler statuses
 
@@ -212,6 +215,7 @@ def get_hit_workflow() -> Workflow:
     )
 
 
+@tracer.start_as_current_span(f"{__name__}._modifies_prop")
 def _modifies_prop(prop: str, operations: list[OdmUpdateOperation]) -> bool:
     """Check if the list of provided operations modifies the specified property
 
@@ -225,6 +229,7 @@ def _modifies_prop(prop: str, operations: list[OdmUpdateOperation]) -> bool:
     return any(op for op in operations if op.key == prop)
 
 
+@tracer.start_as_current_span(f"{__name__}.does_hit_exist")
 def does_hit_exist(hit_id: str) -> bool:
     """Checks if the provided ID matches any entries in the database
 
@@ -237,6 +242,7 @@ def does_hit_exist(hit_id: str) -> bool:
     return datastore().hit.exists(hit_id)
 
 
+@tracer.start_as_current_span(f"{__name__}.validate_hit_ids")
 def validate_hit_ids(hit_ids: list[str]) -> bool:
     """Checks if all hit_ids are available
 
@@ -249,6 +255,7 @@ def validate_hit_ids(hit_ids: list[str]) -> bool:
     return not any(does_hit_exist(hit_id) for hit_id in hit_ids)
 
 
+@tracer.start_as_current_span(f"{__name__}.convert_hit")
 def convert_hit(data: dict[str, Any], unique: bool, ignore_extra_values: bool = False) -> tuple[Hit, list[str]]:  # noqa: C901
     """Validate and convert a dictionary to a Hit ODM object.
 
@@ -354,6 +361,7 @@ def convert_hit(data: dict[str, Any], unique: bool, ignore_extra_values: bool =
     return odm, warnings
 
 
+@tracer.start_as_current_span(f"{__name__}.exists")
 def exists(id: str):
     """Check if a hit exists in the datastore.
 
@@ -394,6 +402,7 @@ def get_hit(id: str, as_odm: Literal[False], version: Literal[False]) -> dict[st
 def get_hit(id: str, as_odm: Literal[False]) -> dict[str, Any]: ...
 
 
+@tracer.start_as_current_span(f"{__name__}.get_hit")
 def get_hit(
     id: str,
     as_odm: bool = False,
@@ -420,6 +429,7 @@ CREATED_HITS = Counter(
 )
 
 
+@tracer.start_as_current_span(f"{__name__}.create_hit")
 def create_hit(
     id: str,
     hit: Hit,
@@ -453,6 +463,7 @@ def create_hit(
     return datastore().hit.save(id, hit)
 
 
+@tracer.start_as_current_span(f"{__name__}.update_hit")
 def update_hit(
     hit_id: str,
     operations: list[OdmUpdateOperation],
@@ -486,6 +497,7 @@ def update_hit(
 
 
 @typing.no_type_check
+@tracer.start_as_current_span(f"{__name__}.save_hit")
 def save_hit(hit: Hit, version: Optional[str] = None) -> tuple[Hit, str]:
     """Save a hit to the datastore and emit an event notification.
 
@@ -506,6 +518,7 @@ def save_hit(hit: Hit, version: Optional[str] = None) -> tuple[Hit, str]:
     return data, _version
 
 
+@tracer.start_as_current_span(f"{__name__}._update_hit")
 def _update_hit(
     hit_id: str,
     operations: list[OdmUpdateOperation],
@@ -593,6 +606,7 @@ def _update_hit(
     return data, _version
 
 
+@tracer.start_as_current_span(f"{__name__}.get_transitions")
 def get_transitions(status: HitStatus) -> list[str]:
     """Get a list of the valid transitions beginning from the specified status
 
@@ -605,6 +619,7 @@ def get_transitions(status: HitStatus) -> list[str]:
     return get_hit_workflow().get_transitions(status)
 
 
+@tracer.start_as_current_span(f"{__name__}.get_all_children")
 def get_all_children(hit: dict[str, Any]) -> list[dict[str, Any]]:
     """Get a list of all child hits for a given hit, including nested children.
 
@@ -632,6 +647,7 @@ def get_all_children(hit: dict[str, Any]) -> list[dict[str, Any]]:
     return child_hits
 
 
+@tracer.start_as_current_span(f"{__name__}.transition_hit")
 def transition_hit(
     id: str,
     transition: HitStatusTransition,
@@ -736,6 +752,7 @@ def transition_hit(
 DELETED_HITS = Counter(f"{APP_NAME.replace('-', '_')}_deleted_hits_total", "The number of deleted hits")
 
 
+@tracer.start_as_current_span(f"{__name__}.delete_hits")
 def delete_hits(hit_ids: list[str]) -> bool:
     """Delete a set of hits from the database
 
@@ -791,6 +808,7 @@ def search(
 ) -> SearchResult[dict[str, Any]]: ...
 
 
+@tracer.start_as_current_span(f"{__name__}.search")
 def search(
     query: str,
     as_obj: bool = True,

{howler_api-3.3.0.dev721 → howler_api-3.3.0.dev735}/howler/services/user_service.py

@@ -1,8 +1,8 @@
 from typing import Any, Literal, Optional, overload
 
 from authlib.integrations.flask_client import OAuth
-from elasticapm.traces import capture_span
 from flask import current_app, request
+from opentelemetry import trace
 
 from howler.common.exceptions import AccessDeniedException, HowlerValueError, InvalidDataException
 from howler.common.loader import datastore
@@ -16,6 +16,7 @@ from howler.utils.str_utils import safe_str
 ACCOUNT_USER_MODIFIABLE = ["name", "email", "avatar", "password", "dashboard", "refresh_rate"]
 
 logger = get_logger(__file__)
+tracer = trace.get_tracer(__name__)
 
 
 @overload
@@ -89,7 +90,7 @@ def convert_user(user: User) -> dict[str, Any]:
     return user_data
 
 
-@capture_span(span_type="authentication")
+@tracer.start_as_current_span(f"{__name__}.parse_user_data")
 def parse_user_data(  # noqa: C901
     data: dict,
     oauth_provider: str,

howler_api-3.3.0.dev735/howler/telemetry.py

@@ -0,0 +1,65 @@
+"""Telemetry setup for Howler API."""
+
+import os
+
+from flask import Flask
+
+from howler.common.logging import get_logger
+
+logger = get_logger(__file__)
+
+
+def setup_telemetry(app: Flask) -> None:
+    """Initialize telemetry and library instrumentors.
+
+    The backend is selected via ``config.core.telemetry.backend``.
+
+    For ``opentelemetry``, a TracerProvider with the OTLP exporter is created
+    manually. Environment variables control the exporter:
+        - OTEL_EXPORTER_OTLP_ENDPOINT
+        - OTEL_EXPORTER_OTLP_HEADERS
+
+    See https://opentelemetry.io/docs/specs/otel/configuration/sdk-environment-variables/
+
+    For ``azure_monitor``, ``configure_azure_monitor`` from
+    ``azure-monitor-opentelemetry`` handles the full setup (provider,
+    exporters, and instrumentation). Requires the
+    ``APPLICATIONINSIGHTS_CONNECTION_STRING`` environment variable.
+    """
+    from howler.odm.models.config import config
+
+    backend = config.core.telemetry.backend
+
+    try:
+        if backend == "opentelemetry":
+            from opentelemetry import trace
+            from opentelemetry.exporter.otlp.proto.http.trace_exporter import OTLPSpanExporter
+            from opentelemetry.instrumentation.flask import FlaskInstrumentor
+            from opentelemetry.sdk.resources import Resource
+            from opentelemetry.sdk.trace import TracerProvider
+            from opentelemetry.sdk.trace.export import BatchSpanProcessor
+
+            resource = Resource.create({"service.name": "howler-api"})
+            provider = TracerProvider(resource=resource)
+            provider.add_span_processor(BatchSpanProcessor(OTLPSpanExporter()))
+            trace.set_tracer_provider(provider)
+            FlaskInstrumentor().instrument_app(app)
+        elif backend == "azure_monitor":
+            from azure.monitor.opentelemetry import configure_azure_monitor
+            from opentelemetry.instrumentation.flask import FlaskInstrumentor
+
+            if not os.environ.get("APPLICATIONINSIGHTS_CONNECTION_STRING"):
+                logger.error(
+                    "Azure Monitor telemetry backend selected but APPLICATIONINSIGHTS_CONNECTION_STRING is not set."
+                )
+                return
+
+            configure_azure_monitor()
+            FlaskInstrumentor().instrument_app(app)
+        else:
+            logger.error("Unsupported telemetry backend '%s'.", backend)
+            return
+
+        logger.info("Telemetry configured successfully (backend=%s).", backend)
+    except Exception:
+        logger.exception("Failed to configure telemetry (backend=%s).", backend)

{howler_api-3.3.0.dev721 → howler_api-3.3.0.dev735}/pyproject.toml

@@ -152,7 +152,7 @@ suppress-none-returning = true
 [tool.poetry]
 package-mode = true
 name = "howler-api"
-version = "3.3.0.dev721"
+version = "3.3.0.dev735"
 description = "Howler - API server"
 authors = [
     "Canadian Centre for Cyber Security <howler@cyber.gc.ca>",
@@ -199,7 +199,6 @@ python = "^3.9.17"
 apscheduler = "3.11.2"
 authlib = "^1.6.0"
 chardet = "5.2.0"
-elastic-apm = { extras = ["flask"], version = "^6.22.0" }
 elasticsearch = "8.19.3"
 flask = "3.1.3"
 flask-caching = "2.3.1"
@@ -229,6 +228,10 @@ pydash = "^8.0.5"
 pytz = "^2025.2"
 bcrypt = "4.3.0"
 tzdata = "^2026.1"
+opentelemetry-sdk = "1.40.0"
+opentelemetry-exporter-otlp-proto-http = "1.40.0"
+opentelemetry-instrumentation-flask = "0.61b0"
+azure-monitor-opentelemetry = "^1.8.7"
 
 [tool.poetry.group.dev.dependencies]
 pre-commit = "^3.7.0"