Vercel drains

Embed
Preview of the card
<a href="https://forumulate.com/p/watchtower/docs/vercel"><img src="https://forumulate.com/api/public/orgs/watchtower/spaces/docs/pages/57a4ac12-c8f1-4130-bf2f-33aaf40ca529/social-card.svg?v=3e7ae33eec8b" alt="Vercel drains" width="600" height="315"></a>

Create a log or trace drain in Vercel pointing at POST https://<gateway>/vercel/drain with a custom header Authorization: Bearer wti_... (scope ingest:logs for logs, ingest:traces for traces). The gateway verifies x-vercel-signature (HMAC-SHA1 of the raw body keyed by the drain secret, set as WT_VERCEL_DRAIN_SECRET on the gateway) and answers 401 otherwise. NDJSON or JSON-array logs become OTLP logs with vercel.* attributes (vercel.source, vercel.path, vercel.deployment_id, vercel.region); OTLP protobuf traces are forwarded unchanged. The tenant is the key's.

Updated