---
title: Honeycomb
slug: telemetry-pipeline/honeycomb
docTags: 
createdAt: 2025-04-21T01:00:25.522Z
---

# Honeycomb Sink

## Overview

The **Honeycomb sink** delivers **log events** to **Honeycomb** using Honeycomb’s HTTP ingestion API.
&#x20;It is designed for **high-volume log ingestion** with support for **batching**, **buffering**, **compression**, and **request-level flow control**.

This sink is typically used when Honeycomb is the primary platform for:

- exploratory analysis,&#x20;
- high-cardinality debugging,&#x20;
- and service-level observability workflows based on structured logs.&#x20;

## Supported Input Types

- Logs&#x20;

## Authentication

### API Key (required)

Authentication is performed using a **Honeycomb API key**.

The API key:

- is sent with each request,&#x20;
- authorizes writes to the configured dataset,&#x20;
- should be scoped and rotated according to Honeycomb best practices.&#x20;

## Dataset Configuration

### Dataset (required)

Defines the **target dataset** where log events are written.

Key considerations:

- The dataset is static per sink instance.&#x20;
- For multi-dataset routing (per service, tenant, or environment), logs should be split upstream and routed to separate sink definitions.&#x20;
- Dataset naming strategy directly affects query ergonomics and cost visibility in Honeycomb.&#x20;

## Delivery Shaping

### Batch Behavior

Controls how log events are grouped before being sent to Honeycomb.

Batching parameters determine:

- request frequency,&#x20;
- payload size,&#x20;
- ingestion latency.&#x20;

Typical usage:

- Larger batches reduce HTTP overhead.&#x20;
- Smaller batches reduce end-to-end delivery latency.&#x20;

### Buffering Behavior

Defines how events are buffered locally when downstream delivery is slower than ingestion.

Supported buffer types:

- **Memory buffer**
  &#x20;Higher throughput, volatile on restart or crash.&#x20;
- **Disk buffer**
  &#x20;More durable, suitable for environments where data loss during restarts is unacceptable.&#x20;

Buffer behavior when full:

- **Block**: applies backpressure to upstream components.&#x20;
- **Drop newest**: prioritizes pipeline continuity over data completeness.&#x20;

## Payload Optimization

### Compression

Controls compression applied to outbound payloads.

Supported algorithms:

- gzip&#x20;
- snappy&#x20;
- zlib&#x20;
- zstd&#x20;
- none&#x20;

Default behavior favors **zstd**, which provides a strong compression ratio while maintaining acceptable CPU usage in most environments.

### Field Selection and Timestamp Handling

The sink allows **field-level control** before serialization:

- Include-only specific fields&#x20;
- Exclude noisy or high-cardinality fields&#x20;
- Normalize timestamp representation (RFC3339, Unix, millisecond/nanosecond precision)&#x20;

This is a critical mechanism for:

- reducing ingestion volume,&#x20;
- controlling cost,&#x20;
- and improving query performance inside Honeycomb.&#x20;

## Network and Transport Controls

### Endpoint Configuration

Defines the Honeycomb ingestion endpoint.

The default endpoint targets Honeycomb’s public SaaS API.
&#x20;Custom endpoints may be used when:

- routing through an internal gateway,&#x20;
- enforcing egress controls,&#x20;
- or integrating with Honeycomb-compatible ingestion services.&#x20;

### Proxy Support

Supports HTTP and HTTPS proxies, including exclusion lists for direct connections.

Used primarily in:

- enterprise networks with restricted outbound access,&#x20;
- segmented environments with controlled egress paths.&#x20;

### Request Behavior

Advanced request controls are available to manage delivery under load:

- adaptive or fixed concurrency&#x20;
- rate limiting&#x20;
- retry and backoff behavior&#x20;
- request timeouts&#x20;

These settings are typically tuned when:

- Honeycomb imposes ingestion limits,&#x20;
- network reliability is variable,&#x20;
- or multiple sinks compete for shared egress capacity.
