github.com/grafana/pyroscope@v1.18.0/cmd/pyroscope/help-all.txt.tmpl (about)

     1  Usage of ./pyroscope:
     2    -api.base-url string
     3      	base URL for when the server is behind a reverse proxy with a different path
     4    -auth.multitenancy-enabled
     5      	When set to true, incoming HTTP requests must specify tenant ID in HTTP X-Scope-OrgId header. When set to false, tenant ID anonymous is used instead.
     6    -blocks-storage.bucket-store.ignore-blocks-within duration
     7      	Blocks with minimum time within this duration are ignored, and not loaded by store-gateway. Useful when used together with -querier.query-store-after to prevent loading young blocks, because there are usually many of them (depending on number of ingesters) and they are not yet compacted. Negative values or 0 disable the filter. (default 3h0m0s)
     8    -blocks-storage.bucket-store.ignore-deletion-marks-delay duration
     9      	Duration after which the blocks marked for deletion will be filtered out while fetching blocks. The idea of ignore-deletion-marks-delay is to ignore blocks that are marked for deletion with some delay. This ensures store can still serve blocks that are meant to be deleted but do not have a replacement yet. (default 30m0s)
    10    -blocks-storage.bucket-store.meta-sync-concurrency int
    11      	Number of Go routines to use when syncing block meta files from object storage per tenant. (default 20)
    12    -blocks-storage.bucket-store.sync-dir string
    13      	Directory to store synchronized pyroscope block headers. This directory is not required to be persisted between restarts, but it's highly recommended in order to improve the store-gateway startup time. (default "./data/pyroscope-sync/")
    14    -blocks-storage.bucket-store.sync-interval duration
    15      	How frequently to scan the bucket, or to refresh the bucket index (if enabled), in order to look for changes (new blocks shipped by ingesters and blocks deleted by retention or compaction). (default 15m0s)
    16    -blocks-storage.bucket-store.tenant-sync-concurrency int
    17      	Maximum number of concurrent tenants synching blocks. (default 10)
    18    -compactor.block-ranges value
    19      	List of compaction time ranges. (default 1h0m0s,2h0m0s,8h0m0s)
    20    -compactor.block-sync-concurrency int
    21      	Number of Go routines to use when downloading blocks for compaction and uploading resulting blocks. (default 8)
    22    -compactor.blocks-retention-period duration
    23      	Delete blocks containing samples older than the specified retention period. 0 to disable.
    24    -compactor.cleanup-concurrency int
    25      	Max number of tenants for which blocks cleanup and maintenance should run concurrently. (default 20)
    26    -compactor.cleanup-interval duration
    27      	How frequently compactor should run blocks cleanup and maintenance, as well as update the bucket index. (default 15m0s)
    28    -compactor.compaction-concurrency int
    29      	Max number of concurrent compactions running. (default 1)
    30    -compactor.compaction-interval duration
    31      	The frequency at which the compaction runs (default 30m0s)
    32    -compactor.compaction-jobs-order string
    33      	The sorting to use when deciding which compaction jobs should run first for a given tenant. Supported values are: smallest-range-oldest-blocks-first, newest-blocks-first. (default "smallest-range-oldest-blocks-first")
    34    -compactor.compaction-retries int
    35      	How many times to retry a failed compaction within a single compaction run. (default 3)
    36    -compactor.compaction-split-by string
    37      	Experimental: The strategy to use when splitting blocks during compaction. Supported values are: fingerprint, stacktracePartition. (default "fingerprint")
    38    -compactor.compactor-downsampler-enabled
    39      	If enabled, the compactor will downsample profiles in blocks at compaction level 3 and above. The original profiles are also kept. Note: This set the default for the teanant overrides, in order to be effective it also requires compactor.downsampler-enabled to be set to true. (default true)
    40    -compactor.compactor-tenant-shard-size int
    41      	Max number of compactors that can compact blocks for single tenant. 0 to disable the limit and use all compactors.
    42    -compactor.data-dir string
    43      	Directory to temporarily store blocks during compaction. This directory is not required to be persisted between restarts. (default "./data-compactor")
    44    -compactor.deletion-delay duration
    45      	Time before a block marked for deletion is deleted from bucket. If not 0, blocks will be marked for deletion and compactor component will permanently delete blocks marked for deletion from the bucket. If 0, blocks will be deleted straight away. Note that deleting blocks immediately can cause query failures. (default 12h0m0s)
    46    -compactor.disabled-tenants comma-separated-list-of-strings
    47      	Comma separated list of tenants that cannot be compacted by this compactor. If specified, and compactor would normally pick given tenant for compaction (via -compactor.enabled-tenants or sharding), it will be ignored instead.
    48    -compactor.downsampler-enabled
    49      	If enabled, the compactor will downsample profiles in blocks at compaction level 3 and above. The original profiles are also kept.
    50    -compactor.enabled-tenants comma-separated-list-of-strings
    51      	Comma separated list of tenants that can be compacted. If specified, only these tenants will be compacted by compactor, otherwise all tenants can be compacted. Subject to sharding.
    52    -compactor.first-level-compaction-wait-period duration
    53      	How long the compactor waits before compacting first-level blocks that are uploaded by the ingesters. This configuration option allows for the reduction of cases where the compactor begins to compact blocks before all ingesters have uploaded their blocks to the storage. (default 25m0s)
    54    -compactor.max-compaction-time duration
    55      	Max time for starting compactions for a single tenant. After this time no new compactions for the tenant are started before next compaction cycle. This can help in multi-tenant environments to avoid single tenant using all compaction time, but also in single-tenant environments to force new discovery of blocks more often. 0 = disabled. (default 1h0m0s)
    56    -compactor.max-opening-blocks-concurrency int
    57      	Number of goroutines opening blocks before compaction. (default 16)
    58    -compactor.meta-sync-concurrency int
    59      	Number of Go routines to use when syncing block meta files from the long term storage. (default 20)
    60    -compactor.no-blocks-file-cleanup-enabled
    61      	[experimental] If enabled, will delete the bucket-index, markers and debug files in the tenant bucket when there are no blocks left in the index.
    62    -compactor.partial-block-deletion-delay duration
    63      	If a partial block (unfinished block without meta.json file) hasn't been modified for this time, it will be marked for deletion. The minimum accepted value is 4h0m0s: a lower value will be ignored and the feature disabled. 0 to disable. (default 1d)
    64    -compactor.ring.consul.acl-token string
    65      	ACL Token used to interact with Consul.
    66    -compactor.ring.consul.cas-retry-delay duration
    67      	Maximum duration to wait before retrying a Compare And Swap (CAS) operation. (default 1s)
    68    -compactor.ring.consul.client-timeout duration
    69      	HTTP timeout when talking to Consul (default 20s)
    70    -compactor.ring.consul.consistent-reads
    71      	Enable consistent reads to Consul.
    72    -compactor.ring.consul.hostname string
    73      	Hostname and port of Consul. (default "localhost:8500")
    74    -compactor.ring.consul.watch-burst-size int
    75      	Burst size used in rate limit. Values less than 1 are treated as 1. (default 1)
    76    -compactor.ring.consul.watch-rate-limit float
    77      	Rate limit when watching key or prefix in Consul, in requests per second. 0 disables the rate limit. (default 1)
    78    -compactor.ring.etcd.dial-timeout duration
    79      	The dial timeout for the etcd connection. (default 10s)
    80    -compactor.ring.etcd.endpoints string
    81      	The etcd endpoints to connect to.
    82    -compactor.ring.etcd.max-retries int
    83      	The maximum number of retries to do for failed ops. (default 10)
    84    -compactor.ring.etcd.password string
    85      	Etcd password.
    86    -compactor.ring.etcd.tls-ca-path string
    87      	Path to the CA certificates to validate server certificate against. If not set, the host's root CA certificates are used.
    88    -compactor.ring.etcd.tls-cert-path string
    89      	Path to the client certificate, which will be used for authenticating with the server. Also requires the key path to be configured.
    90    -compactor.ring.etcd.tls-cipher-suites string
    91      	Override the default cipher suite list (separated by commas).
    92    -compactor.ring.etcd.tls-enabled
    93      	Enable TLS.
    94    -compactor.ring.etcd.tls-insecure-skip-verify
    95      	Skip validating server certificate.
    96    -compactor.ring.etcd.tls-key-path string
    97      	Path to the key for the client certificate. Also requires the client certificate to be configured.
    98    -compactor.ring.etcd.tls-min-version string
    99      	Override the default minimum TLS version. Allowed values: VersionTLS10, VersionTLS11, VersionTLS12, VersionTLS13
   100    -compactor.ring.etcd.tls-server-name string
   101      	Override the expected name on the server certificate.
   102    -compactor.ring.etcd.username string
   103      	Etcd username.
   104    -compactor.ring.heartbeat-period duration
   105      	Period at which to heartbeat to the ring. 0 = disabled. (default 15s)
   106    -compactor.ring.heartbeat-timeout duration
   107      	The heartbeat timeout after which compactors are considered unhealthy within the ring. 0 = never (timeout disabled). (default 1m0s)
   108    -compactor.ring.instance-addr string
   109      	IP address to advertise in the ring. Default is auto-detected.
   110    -compactor.ring.instance-enable-ipv6
   111      	Enable using a IPv6 instance address. (default false)
   112    -compactor.ring.instance-id string
   113      	Instance ID to register in the ring. (default "<hostname>")
   114    -compactor.ring.instance-interface-names string
   115      	List of network interface names to look up when finding the instance IP address. (default [<private network interfaces>])
   116    -compactor.ring.instance-port int
   117      	Port to advertise in the ring (defaults to -server.http-listen-port).
   118    -compactor.ring.multi.mirror-enabled
   119      	Mirror writes to secondary store.
   120    -compactor.ring.multi.mirror-timeout duration
   121      	Timeout for storing value to secondary store. (default 2s)
   122    -compactor.ring.multi.primary string
   123      	Primary backend storage used by multi-client.
   124    -compactor.ring.multi.secondary string
   125      	Secondary backend storage used by multi-client.
   126    -compactor.ring.prefix string
   127      	The prefix for the keys in the store. Should end with a /. (default "collectors/")
   128    -compactor.ring.store string
   129      	Backend storage to use for the ring. Supported values are: consul, etcd, inmemory, memberlist, multi. (default "memberlist")
   130    -compactor.ring.wait-active-instance-timeout duration
   131      	Timeout for waiting on compactor to become ACTIVE in the ring. (default 10m0s)
   132    -compactor.ring.wait-stability-max-duration duration
   133      	Maximum time to wait for ring stability at startup. If the compactor ring keeps changing after this period of time, the compactor will start anyway. (default 5m0s)
   134    -compactor.ring.wait-stability-min-duration duration
   135      	Minimum time to wait for ring stability at startup. 0 to disable.
   136    -compactor.split-and-merge-shards int
   137      	The number of shards to use when splitting blocks. 0 to disable splitting.
   138    -compactor.split-and-merge-stage-size int
   139      	Number of stages split shards will be written to. Number of output split shards is controlled by -compactor.split-and-merge-shards.
   140    -compactor.split-groups int
   141      	Number of groups that blocks for splitting should be grouped into. Each group of blocks is then split separately. Number of output split shards is controlled by -compactor.split-and-merge-shards. (default 1)
   142    -config.expand-env
   143      	Expands ${var} in config according to the values of the environment variables.
   144    -config.file string
   145      	yaml file to load
   146    -config.show_banner
   147      	Prints the application banner at startup. (default true)
   148    -consul.acl-token string
   149      	ACL Token used to interact with Consul.
   150    -consul.cas-retry-delay duration
   151      	Maximum duration to wait before retrying a Compare And Swap (CAS) operation. (default 1s)
   152    -consul.client-timeout duration
   153      	HTTP timeout when talking to Consul (default 20s)
   154    -consul.consistent-reads
   155      	Enable consistent reads to Consul.
   156    -consul.hostname string
   157      	Hostname and port of Consul. (default "localhost:8500")
   158    -consul.watch-burst-size int
   159      	Burst size used in rate limit. Values less than 1 are treated as 1. (default 1)
   160    -consul.watch-rate-limit float
   161      	Rate limit when watching key or prefix in Consul, in requests per second. 0 disables the rate limit. (default 1)
   162    -distributor.aggregation-period duration
   163      	Duration of the distributor aggregation period. Requires aggregation window to be specified. 0 to disable.
   164    -distributor.aggregation-window duration
   165      	Duration of the distributor aggregation window. Requires aggregation period to be specified. 0 to disable.
   166    -distributor.client-cleanup-period duration
   167      	How frequently to clean up clients for ingesters that have gone away. (default 15s)
   168    -distributor.excluded-zones comma-separated-list-of-strings
   169      	Comma-separated list of zones to exclude from the ring. Instances in excluded zones will be filtered out from the ring.
   170    -distributor.health-check-ingesters
   171      	Run a health check on each ingester client during periodic cleanup. (default true)
   172    -distributor.health-check-timeout duration
   173      	Timeout for ingester client healthcheck RPCs. (default 5s)
   174    -distributor.ingestion-artificial-delay duration
   175      	[experimental] Target ingestion delay to apply to all tenants. If set to a non-zero value, the distributor will artificially delay ingestion time-frame by the specified duration by computing the difference between actual ingestion and the target. There is no delay on actual ingestion of samples, it is only the response back to the client.
   176    -distributor.ingestion-body-limit-mb float
   177      	Per-tenant ingestion body size limit in MB, before decompressing. 0 to disable. (default 256)
   178    -distributor.ingestion-burst-size-mb float
   179      	Per-tenant allowed ingestion burst size (in sample size). Units in MB. The burst size refers to the per-distributor local rate limiter, and should be set at least to the maximum profile size expected in a single push request. (default 2)
   180    -distributor.ingestion-rate-limit-mb float
   181      	Per-tenant ingestion rate limit in sample size per second. Units in MB. (default 4)
   182    -distributor.ingestion-relabeling-default-rules-position value
   183      	Position of the default ingestion relabeling rules in relation to relabel rules from overrides. Valid values are 'first', 'last' or 'disabled'. (default "first")
   184    -distributor.ingestion-relabeling-rules value
   185      	List of ingestion relabel configurations. The relabeling rules work the same way, as those of [Prometheus](https://prometheus.io/docs/prometheus/latest/configuration/configuration/#relabel_config). All rules are applied in the order they are specified. Note: In most situations, it is more effective to use relabeling directly in Grafana Alloy.
   186    -distributor.ingestion-tenant-shard-size int
   187      	The tenant's shard size used by shuffle-sharding. Must be set both on ingesters and distributors. 0 disables shuffle sharding.
   188    -distributor.push.timeout duration
   189      	Timeout when pushing data to ingester. (default 5s)
   190    -distributor.replication-factor int
   191      	The number of ingesters to write to and read from. (default 1)
   192    -distributor.ring.consul.acl-token string
   193      	ACL Token used to interact with Consul.
   194    -distributor.ring.consul.cas-retry-delay duration
   195      	Maximum duration to wait before retrying a Compare And Swap (CAS) operation. (default 1s)
   196    -distributor.ring.consul.client-timeout duration
   197      	HTTP timeout when talking to Consul (default 20s)
   198    -distributor.ring.consul.consistent-reads
   199      	Enable consistent reads to Consul.
   200    -distributor.ring.consul.hostname string
   201      	Hostname and port of Consul. (default "localhost:8500")
   202    -distributor.ring.consul.watch-burst-size int
   203      	Burst size used in rate limit. Values less than 1 are treated as 1. (default 1)
   204    -distributor.ring.consul.watch-rate-limit float
   205      	Rate limit when watching key or prefix in Consul, in requests per second. 0 disables the rate limit. (default 1)
   206    -distributor.ring.etcd.dial-timeout duration
   207      	The dial timeout for the etcd connection. (default 10s)
   208    -distributor.ring.etcd.endpoints string
   209      	The etcd endpoints to connect to.
   210    -distributor.ring.etcd.max-retries int
   211      	The maximum number of retries to do for failed ops. (default 10)
   212    -distributor.ring.etcd.password string
   213      	Etcd password.
   214    -distributor.ring.etcd.tls-ca-path string
   215      	Path to the CA certificates to validate server certificate against. If not set, the host's root CA certificates are used.
   216    -distributor.ring.etcd.tls-cert-path string
   217      	Path to the client certificate, which will be used for authenticating with the server. Also requires the key path to be configured.
   218    -distributor.ring.etcd.tls-cipher-suites string
   219      	Override the default cipher suite list (separated by commas).
   220    -distributor.ring.etcd.tls-enabled
   221      	Enable TLS.
   222    -distributor.ring.etcd.tls-insecure-skip-verify
   223      	Skip validating server certificate.
   224    -distributor.ring.etcd.tls-key-path string
   225      	Path to the key for the client certificate. Also requires the client certificate to be configured.
   226    -distributor.ring.etcd.tls-min-version string
   227      	Override the default minimum TLS version. Allowed values: VersionTLS10, VersionTLS11, VersionTLS12, VersionTLS13
   228    -distributor.ring.etcd.tls-server-name string
   229      	Override the expected name on the server certificate.
   230    -distributor.ring.etcd.username string
   231      	Etcd username.
   232    -distributor.ring.heartbeat-period duration
   233      	Period at which to heartbeat to the ring. 0 = disabled. (default 15s)
   234    -distributor.ring.heartbeat-timeout duration
   235      	The heartbeat timeout after which distributors are considered unhealthy within the ring. 0 = never (timeout disabled). (default 1m0s)
   236    -distributor.ring.instance-addr string
   237      	IP address to advertise in the ring. Default is auto-detected.
   238    -distributor.ring.instance-enable-ipv6
   239      	Enable using a IPv6 instance address. (default false)
   240    -distributor.ring.instance-id string
   241      	Instance ID to register in the ring. (default "<hostname>")
   242    -distributor.ring.instance-interface-names string
   243      	List of network interface names to look up when finding the instance IP address. (default [<private network interfaces>])
   244    -distributor.ring.instance-port int
   245      	Port to advertise in the ring (defaults to -server.http-listen-port).
   246    -distributor.ring.multi.mirror-enabled
   247      	Mirror writes to secondary store.
   248    -distributor.ring.multi.mirror-timeout duration
   249      	Timeout for storing value to secondary store. (default 2s)
   250    -distributor.ring.multi.primary string
   251      	Primary backend storage used by multi-client.
   252    -distributor.ring.multi.secondary string
   253      	Secondary backend storage used by multi-client.
   254    -distributor.ring.prefix string
   255      	The prefix for the keys in the store. Should end with a /. (default "collectors/")
   256    -distributor.ring.store string
   257      	Backend storage to use for the ring. Supported values are: consul, etcd, inmemory, memberlist, multi. (default "memberlist")
   258    -distributor.sample-type-relabeling-rules value
   259      	List of sample type relabel configurations. Rules are applied to sample types with __type__ and __unit__ labels, along with all series labels.
   260    -distributor.zone-awareness-enabled
   261      	True to enable the zone-awareness and replicate ingested samples across different availability zones.
   262    -embedded-grafana.data-path string
   263      	The directory where the Grafana data will be stored. (default "./data/__embedded_grafana/")
   264    -embedded-grafana.listen-port int
   265      	The port on which the Grafana will listen. (default 4041)
   266    -embedded-grafana.pyroscope-url string
   267      	The URL of the Pyroscope instance to use for the Grafana datasources. (default "http://localhost:4040")
   268    -etcd.dial-timeout duration
   269      	The dial timeout for the etcd connection. (default 10s)
   270    -etcd.endpoints string
   271      	The etcd endpoints to connect to.
   272    -etcd.max-retries int
   273      	The maximum number of retries to do for failed ops. (default 10)
   274    -etcd.password string
   275      	Etcd password.
   276    -etcd.tls-ca-path string
   277      	Path to the CA certificates to validate server certificate against. If not set, the host's root CA certificates are used.
   278    -etcd.tls-cert-path string
   279      	Path to the client certificate, which will be used for authenticating with the server. Also requires the key path to be configured.
   280    -etcd.tls-cipher-suites string
   281      	Override the default cipher suite list (separated by commas).
   282    -etcd.tls-enabled
   283      	Enable TLS.
   284    -etcd.tls-insecure-skip-verify
   285      	Skip validating server certificate.
   286    -etcd.tls-key-path string
   287      	Path to the key for the client certificate. Also requires the client certificate to be configured.
   288    -etcd.tls-min-version string
   289      	Override the default minimum TLS version. Allowed values: VersionTLS10, VersionTLS11, VersionTLS12, VersionTLS13
   290    -etcd.tls-server-name string
   291      	Override the expected name on the server certificate.
   292    -etcd.username string
   293      	Etcd username.
   294    -h
   295      	Print basic help.
   296    -help
   297      	Print basic help.
   298    -help-all
   299      	Print help, also including advanced and experimental parameters.
   300    -ingester.availability-zone string
   301      	The availability zone where this instance is running.
   302    -ingester.enable-inet6
   303      	Enable IPv6 support. Required to make use of IP addresses from IPv6 interfaces.
   304    -ingester.final-sleep duration
   305      	Duration to sleep for before exiting, to ensure metrics are scraped.
   306    -ingester.heartbeat-period duration
   307      	Period at which to heartbeat to consul. 0 = disabled. (default 5s)
   308    -ingester.heartbeat-timeout duration
   309      	Heartbeat timeout after which instance is assumed to be unhealthy. 0 = disabled. (default 1m0s)
   310    -ingester.join-after duration
   311      	Period to wait for a claim from another member; will join automatically after this.
   312    -ingester.lifecycler.ID string
   313      	ID to register in the ring. (default "<hostname>")
   314    -ingester.lifecycler.addr string
   315      	IP address to advertise in the ring.
   316    -ingester.lifecycler.interface string
   317      	Name of network interface to read address from. (default [<private network interfaces>])
   318    -ingester.lifecycler.port int
   319      	port to advertise in consul (defaults to server.grpc-listen-port).
   320    -ingester.max-global-series-per-tenant int
   321      	Maximum number of active series of profiles per tenant, across the cluster. 0 to disable. When the global limit is enabled, each ingester is configured with a dynamic local limit based on the replication factor and the current number of healthy ingesters, and is kept updated whenever the number of ingesters change. (default 5000)
   322    -ingester.max-local-series-per-tenant int
   323      	Maximum number of active series of profiles per tenant, per ingester. 0 to disable.
   324    -ingester.min-ready-duration duration
   325      	Minimum duration to wait after the internal readiness checks have passed but before succeeding the readiness endpoint. This is used to slowdown deployment controllers (eg. Kubernetes) after an instance is ready and before they proceed with a rolling update, to give the rest of the cluster instances enough time to receive ring updates. (default 15s)
   326    -ingester.num-tokens int
   327      	Number of tokens for each ingester. (default 128)
   328    -ingester.observe-period duration
   329      	Observe tokens after generating to resolve collisions. Useful when using gossiping ring.
   330    -ingester.readiness-check-ring-health
   331      	When enabled the readiness probe succeeds only after all instances are ACTIVE and healthy in the ring, otherwise only the instance itself is checked. This option should be disabled if in your cluster multiple instances can be rolled out simultaneously, otherwise rolling updates may be slowed down. (default true)
   332    -ingester.tokens-file-path string
   333      	File path where tokens are stored. If empty, tokens are not stored at shutdown and restored at startup.
   334    -ingester.unregister-on-shutdown
   335      	Unregister from the ring upon clean shutdown. It can be useful to disable for rolling restarts with consistent naming in conjunction with -distributor.extend-writes=false. (default true)
   336    -log.format string
   337      	Output log messages in the given format. Valid formats: [logfmt, json] (default "logfmt")
   338    -log.level value
   339      	Only log messages with the given severity or above. Valid levels: [debug, info, warn, error] (default info)
   340    -memberlist.abort-if-fast-join-fails
   341      	Abort if this node fails the fast memberlist cluster joining procedure at startup. When enabled, it's guaranteed that other services, depending on memberlist, have an updated view over the cluster state when they're started.
   342    -memberlist.abort-if-join-fails
   343      	Abort if this node fails to join memberlist cluster at startup. When enabled, it's not guaranteed that other services are started only after the cluster state has been successfully updated; use 'abort-if-fast-join-fails' instead.
   344    -memberlist.acquire-writer-timeout duration
   345      	Timeout for acquiring one of the concurrent write slots. After this time, the message will be dropped. (default 250ms)
   346    -memberlist.advertise-addr string
   347      	Gossip address to advertise to other members in the cluster. Used for NAT traversal.
   348    -memberlist.advertise-port int
   349      	Gossip port to advertise to other members in the cluster. Used for NAT traversal. (default 7946)
   350    -memberlist.bind-addr string
   351      	IP address to listen on for gossip messages. Multiple addresses may be specified. Defaults to 0.0.0.0
   352    -memberlist.bind-port int
   353      	Port to listen on for gossip messages. (default 7946)
   354    -memberlist.broadcast-timeout-for-local-updates-on-shutdown duration
   355      	Timeout for broadcasting all remaining locally-generated updates to other nodes when shutting down. Only used if there are nodes left in the memberlist cluster, and only applies to locally-generated updates, not to broadcast messages that are result of incoming gossip updates. 0 = no timeout, wait until all locally-generated updates are sent. (default 10s)
   356    -memberlist.cluster-label string
   357      	The cluster label is an optional string to include in outbound packets and gossip streams. Other members in the memberlist cluster will discard any message whose label doesn't match the configured one, unless the 'cluster-label-verification-disabled' configuration option is set to true.
   358    -memberlist.cluster-label-verification-disabled
   359      	When true, memberlist doesn't verify that inbound packets and gossip streams have the cluster label matching the configured one. This verification should be disabled while rolling out the change to the configured cluster label in a live memberlist cluster.
   360    -memberlist.compression-enabled
   361      	Enable message compression. This can be used to reduce bandwidth usage at the cost of slightly more CPU utilization. (default true)
   362    -memberlist.dead-node-reclaim-time duration
   363      	How soon can dead node's name be reclaimed with new address. 0 to disable.
   364    -memberlist.gossip-interval duration
   365      	How often to gossip. (default 200ms)
   366    -memberlist.gossip-nodes int
   367      	How many nodes to gossip to. (default 3)
   368    -memberlist.gossip-to-dead-nodes-time duration
   369      	How long to keep gossiping to dead nodes, to give them chance to refute their death. (default 30s)
   370    -memberlist.join string
   371      	Other cluster members to join. Can be specified multiple times. It can be an IP, hostname or an entry specified in the DNS Service Discovery format.
   372    -memberlist.leave-timeout duration
   373      	Timeout for leaving memberlist cluster. (default 20s)
   374    -memberlist.left-ingesters-timeout duration
   375      	How long to keep LEFT ingesters in the ring. (default 5m0s)
   376    -memberlist.max-concurrent-writes int
   377      	Maximum number of concurrent writes to other nodes. (default 3)
   378    -memberlist.max-join-backoff duration
   379      	Max backoff duration to join other cluster members. (default 1m0s)
   380    -memberlist.max-join-retries int
   381      	Max number of retries to join other cluster members. (default 10)
   382    -memberlist.message-history-buffer-bytes int
   383      	How much space to use for keeping received and sent messages in memory for troubleshooting (two buffers). 0 to disable.
   384    -memberlist.min-join-backoff duration
   385      	Min backoff duration to join other cluster members. (default 1s)
   386    -memberlist.nodename string
   387      	Name of the node in memberlist cluster. Defaults to hostname.
   388    -memberlist.notify-interval duration
   389      	How frequently to notify watchers when a key changes. Can reduce CPU activity in large memberlist deployments. 0 to notify without delay.
   390    -memberlist.obsolete-entries-timeout duration
   391      	[experimental] How long to keep obsolete entries in the KV store. (default 30s)
   392    -memberlist.packet-dial-timeout duration
   393      	Timeout used when connecting to other nodes to send packet. (default 2s)
   394    -memberlist.packet-write-timeout duration
   395      	Timeout for writing 'packet' data. (default 5s)
   396    -memberlist.pullpush-interval duration
   397      	How often to use pull/push sync. (default 30s)
   398    -memberlist.randomize-node-name
   399      	Add random suffix to the node name. (default true)
   400    -memberlist.rejoin-interval duration
   401      	If not 0, how often to rejoin the cluster. Occasional rejoin can help to fix the cluster split issue, and is harmless otherwise. For example when using only few components as a seed nodes (via -memberlist.join), then it's recommended to use rejoin. If -memberlist.join points to dynamic service that resolves to all gossiping nodes (eg. Kubernetes headless service), then rejoin is not needed.
   402    -memberlist.retransmit-factor int
   403      	Multiplication factor used when sending out messages (factor * log(N+1)). (default 4)
   404    -memberlist.stream-timeout duration
   405      	The timeout for establishing a connection with a remote node, and for read/write operations. (default 2s)
   406    -memberlist.tls-ca-path string
   407      	Path to the CA certificates to validate server certificate against. If not set, the host's root CA certificates are used.
   408    -memberlist.tls-cert-path string
   409      	Path to the client certificate, which will be used for authenticating with the server. Also requires the key path to be configured.
   410    -memberlist.tls-cipher-suites string
   411      	Override the default cipher suite list (separated by commas).
   412    -memberlist.tls-enabled
   413      	Enable TLS on the memberlist transport layer.
   414    -memberlist.tls-insecure-skip-verify
   415      	Skip validating server certificate.
   416    -memberlist.tls-key-path string
   417      	Path to the key for the client certificate. Also requires the client certificate to be configured.
   418    -memberlist.tls-min-version string
   419      	Override the default minimum TLS version. Allowed values: VersionTLS10, VersionTLS11, VersionTLS12, VersionTLS13
   420    -memberlist.tls-server-name string
   421      	Override the expected name on the server certificate.
   422    -memberlist.transport-debug
   423      	Log debug transport messages. Note: global log.level must be at debug level as well.
   424    -memberlist.watch-prefix-buffer-size int
   425      	Size of the buffered channel for the WatchPrefix function. (default 128)
   426    -modules
   427      	List available modules that can be used as target and exit.
   428    -multi.mirror-enabled
   429      	Mirror writes to secondary store.
   430    -multi.mirror-timeout duration
   431      	Timeout for storing value to secondary store. (default 2s)
   432    -multi.primary string
   433      	Primary backend storage used by multi-client.
   434    -multi.secondary string
   435      	Secondary backend storage used by multi-client.
   436    -overrides-exporter.ring.consul.acl-token string
   437      	ACL Token used to interact with Consul.
   438    -overrides-exporter.ring.consul.cas-retry-delay duration
   439      	Maximum duration to wait before retrying a Compare And Swap (CAS) operation. (default 1s)
   440    -overrides-exporter.ring.consul.client-timeout duration
   441      	HTTP timeout when talking to Consul (default 20s)
   442    -overrides-exporter.ring.consul.consistent-reads
   443      	Enable consistent reads to Consul.
   444    -overrides-exporter.ring.consul.hostname string
   445      	Hostname and port of Consul. (default "localhost:8500")
   446    -overrides-exporter.ring.consul.watch-burst-size int
   447      	Burst size used in rate limit. Values less than 1 are treated as 1. (default 1)
   448    -overrides-exporter.ring.consul.watch-rate-limit float
   449      	Rate limit when watching key or prefix in Consul, in requests per second. 0 disables the rate limit. (default 1)
   450    -overrides-exporter.ring.etcd.dial-timeout duration
   451      	The dial timeout for the etcd connection. (default 10s)
   452    -overrides-exporter.ring.etcd.endpoints string
   453      	The etcd endpoints to connect to.
   454    -overrides-exporter.ring.etcd.max-retries int
   455      	The maximum number of retries to do for failed ops. (default 10)
   456    -overrides-exporter.ring.etcd.password string
   457      	Etcd password.
   458    -overrides-exporter.ring.etcd.tls-ca-path string
   459      	Path to the CA certificates to validate server certificate against. If not set, the host's root CA certificates are used.
   460    -overrides-exporter.ring.etcd.tls-cert-path string
   461      	Path to the client certificate, which will be used for authenticating with the server. Also requires the key path to be configured.
   462    -overrides-exporter.ring.etcd.tls-cipher-suites string
   463      	Override the default cipher suite list (separated by commas).
   464    -overrides-exporter.ring.etcd.tls-enabled
   465      	Enable TLS.
   466    -overrides-exporter.ring.etcd.tls-insecure-skip-verify
   467      	Skip validating server certificate.
   468    -overrides-exporter.ring.etcd.tls-key-path string
   469      	Path to the key for the client certificate. Also requires the client certificate to be configured.
   470    -overrides-exporter.ring.etcd.tls-min-version string
   471      	Override the default minimum TLS version. Allowed values: VersionTLS10, VersionTLS11, VersionTLS12, VersionTLS13
   472    -overrides-exporter.ring.etcd.tls-server-name string
   473      	Override the expected name on the server certificate.
   474    -overrides-exporter.ring.etcd.username string
   475      	Etcd username.
   476    -overrides-exporter.ring.heartbeat-period duration
   477      	Period at which to heartbeat to the ring. 0 = disabled. (default 15s)
   478    -overrides-exporter.ring.heartbeat-timeout duration
   479      	The heartbeat timeout after which overrides-exporters are considered unhealthy within the ring. 0 = never (timeout disabled). (default 1m0s)
   480    -overrides-exporter.ring.instance-addr string
   481      	IP address to advertise in the ring. Default is auto-detected.
   482    -overrides-exporter.ring.instance-enable-ipv6
   483      	Enable using a IPv6 instance address. (default false)
   484    -overrides-exporter.ring.instance-id string
   485      	Instance ID to register in the ring. (default "<hostname>")
   486    -overrides-exporter.ring.instance-interface-names string
   487      	List of network interface names to look up when finding the instance IP address. (default [<private network interfaces>])
   488    -overrides-exporter.ring.instance-port int
   489      	Port to advertise in the ring (defaults to -server.http-listen-port).
   490    -overrides-exporter.ring.multi.mirror-enabled
   491      	Mirror writes to secondary store.
   492    -overrides-exporter.ring.multi.mirror-timeout duration
   493      	Timeout for storing value to secondary store. (default 2s)
   494    -overrides-exporter.ring.multi.primary string
   495      	Primary backend storage used by multi-client.
   496    -overrides-exporter.ring.multi.secondary string
   497      	Secondary backend storage used by multi-client.
   498    -overrides-exporter.ring.prefix string
   499      	The prefix for the keys in the store. Should end with a /. (default "collectors/")
   500    -overrides-exporter.ring.store string
   501      	Backend storage to use for the ring. Supported values are: consul, etcd, inmemory, memberlist, multi. (default "memberlist")
   502    -overrides-exporter.ring.wait-stability-max-duration duration
   503      	Maximum time to wait for ring stability at startup. If the overrides-exporter ring keeps changing after this period of time, it will start anyway. (default 5m0s)
   504    -overrides-exporter.ring.wait-stability-min-duration duration
   505      	Minimum time to wait for ring stability at startup, if set to positive value. Set to 0 to disable.
   506    -pyroscopedb.data-path string
   507      	Directory used for local storage. (default "./data")
   508    -pyroscopedb.max-block-duration duration
   509      	Upper limit to the duration of a Pyroscope block. (default 1h0m0s)
   510    -pyroscopedb.retention-policy-disable
   511      	Disable retention policy enforcement
   512    -pyroscopedb.retention-policy-enforcement-interval duration
   513      	How often to enforce disk retention (default 5m0s)
   514    -pyroscopedb.retention-policy-min-disk-available-percentage float
   515      	Which percentage of free disk space to keep (default 0.05)
   516    -pyroscopedb.retention-policy-min-free-disk-gb uint
   517      	How much available disk space to keep in GiB (default 10)
   518    -pyroscopedb.row-group-target-size uint
   519      	How big should a single row group be uncompressed (default 1342177280)
   520    -pyroscopedb.symbols-partition-label string
   521      	Specifies the dimension by which symbols are partitioned. By default, the partitioning is determined automatically.
   522    -querier.client-cleanup-period duration
   523      	How frequently to clean up clients for ingesters that have gone away. (default 15s)
   524    -querier.frontend-client.backoff-max-period duration
   525      	Maximum delay when backing off. (default 10s)
   526    -querier.frontend-client.backoff-min-period duration
   527      	Minimum delay when backing off. (default 100ms)
   528    -querier.frontend-client.backoff-on-ratelimits
   529      	Enable backoff and retry when we hit rate limits.
   530    -querier.frontend-client.backoff-retries int
   531      	Number of times to backoff and retry before failing. (default 10)
   532    -querier.frontend-client.cluster-validation.label string
   533      	[experimental] Optionally define the cluster validation label.
   534    -querier.frontend-client.connect-backoff-base-delay duration
   535      	Initial backoff delay after first connection failure. Only relevant if ConnectTimeout > 0. (default 1s)
   536    -querier.frontend-client.connect-backoff-max-delay duration
   537      	Maximum backoff delay when establishing a connection. Only relevant if ConnectTimeout > 0. (default 5s)
   538    -querier.frontend-client.connect-timeout duration
   539      	The maximum amount of time to establish a connection. A value of 0 means default gRPC client connect timeout and backoff. (default 5s)
   540    -querier.frontend-client.grpc-client-rate-limit float
   541      	Rate limit for gRPC client; 0 means disabled.
   542    -querier.frontend-client.grpc-client-rate-limit-burst int
   543      	Rate limit burst for gRPC client.
   544    -querier.frontend-client.grpc-compression string
   545      	Use compression when sending messages. Supported values are: 'gzip', 'snappy' and '' (disable compression)
   546    -querier.frontend-client.grpc-max-recv-msg-size int
   547      	gRPC client max receive message size (bytes). (default 104857600)
   548    -querier.frontend-client.grpc-max-send-msg-size int
   549      	gRPC client max send message size (bytes). (default 104857600)
   550    -querier.frontend-client.initial-connection-window-size value
   551      	[experimental] Initial connection window size. Values less than the default are not supported and are ignored. Setting this to a value other than the default disables the BDP estimator. (default 63KiB1023B)
   552    -querier.frontend-client.initial-stream-window-size value
   553      	[experimental] Initial stream window size. Values less than the default are not supported and are ignored. Setting this to a value other than the default disables the BDP estimator. (default 63KiB1023B)
   554    -querier.frontend-client.tls-ca-path string
   555      	Path to the CA certificates to validate server certificate against. If not set, the host's root CA certificates are used.
   556    -querier.frontend-client.tls-cert-path string
   557      	Path to the client certificate, which will be used for authenticating with the server. Also requires the key path to be configured.
   558    -querier.frontend-client.tls-cipher-suites string
   559      	Override the default cipher suite list (separated by commas).
   560    -querier.frontend-client.tls-enabled
   561      	Enable TLS in the gRPC client. This flag needs to be enabled when any other TLS flag is set. If set to false, insecure connection to gRPC server will be used.
   562    -querier.frontend-client.tls-insecure-skip-verify
   563      	Skip validating server certificate.
   564    -querier.frontend-client.tls-key-path string
   565      	Path to the key for the client certificate. Also requires the client certificate to be configured.
   566    -querier.frontend-client.tls-min-version string
   567      	Override the default minimum TLS version. Allowed values: VersionTLS10, VersionTLS11, VersionTLS12, VersionTLS13
   568    -querier.frontend-client.tls-server-name string
   569      	Override the expected name on the server certificate.
   570    -querier.health-check-ingesters
   571      	Run a health check on each ingester client during periodic cleanup. (default true)
   572    -querier.health-check-timeout duration
   573      	Timeout for ingester client healthcheck RPCs. (default 5s)
   574    -querier.id string
   575      	Querier ID, sent to the query-frontend to identify requests from the same querier. Defaults to hostname.
   576    -querier.max-concurrent int
   577      	The maximum number of concurrent queries allowed. (default 4)
   578    -querier.max-flamegraph-nodes-default int
   579      	Maximum number of flame graph nodes by default. 0 to disable. (default 8192)
   580    -querier.max-flamegraph-nodes-max int
   581      	Maximum number of flame graph nodes allowed. 0 to disable. (default 1048576)
   582    -querier.max-flamegraph-nodes-on-select-merge-profile
   583      	Enforce the max nodes limits and defaults on SelectMergeProfile API. Historically this limit was not enforced to enable to gather full pprof profiles without truncation.
   584    -querier.max-query-length duration
   585      	The limit to length of queries. 0 to disable. (default 1d)
   586    -querier.max-query-lookback duration
   587      	Limit how far back in profiling data can be queried, up until lookback duration ago. This limit is enforced in the query frontend. If the requested time range is outside the allowed range, the request will not fail, but will be modified to only query data within the allowed time range. 0 to disable, default to 7d. (default 1w)
   588    -querier.max-query-parallelism int
   589      	Maximum number of queries that will be scheduled in parallel by the frontend.
   590    -querier.query-analysis-enabled
   591      	Whether query analysis is enabled in the query frontend. If disabled, the /AnalyzeQuery endpoint will return an empty response. (default true)
   592    -querier.query-analysis-series-enabled
   593      	Whether the series portion of query analysis is enabled. If disabled, no series data (e.g., series count) will be calculated by the /AnalyzeQuery endpoint.
   594    -querier.query-store-after duration
   595      	The time after which a metric should be queried from storage and not just ingesters. 0 means all queries are sent to store. If this option is enabled, the time range of the query sent to the store-gateway will be manipulated to ensure the query end is not more recent than 'now - query-store-after'. (default 4h0m0s)
   596    -querier.sanitize-on-merge
   597      	Whether profiles should be sanitized when merging. (default true)
   598    -querier.split-queries-by-interval duration
   599      	Split queries by a time interval and execute in parallel. The value 0 disables splitting by time
   600    -query-frontend.grpc-client-config.backoff-max-period duration
   601      	Maximum delay when backing off. (default 10s)
   602    -query-frontend.grpc-client-config.backoff-min-period duration
   603      	Minimum delay when backing off. (default 100ms)
   604    -query-frontend.grpc-client-config.backoff-on-ratelimits
   605      	Enable backoff and retry when we hit rate limits.
   606    -query-frontend.grpc-client-config.backoff-retries int
   607      	Number of times to backoff and retry before failing. (default 10)
   608    -query-frontend.grpc-client-config.cluster-validation.label string
   609      	[experimental] Optionally define the cluster validation label.
   610    -query-frontend.grpc-client-config.connect-backoff-base-delay duration
   611      	Initial backoff delay after first connection failure. Only relevant if ConnectTimeout > 0. (default 1s)
   612    -query-frontend.grpc-client-config.connect-backoff-max-delay duration
   613      	Maximum backoff delay when establishing a connection. Only relevant if ConnectTimeout > 0. (default 5s)
   614    -query-frontend.grpc-client-config.connect-timeout duration
   615      	The maximum amount of time to establish a connection. A value of 0 means default gRPC client connect timeout and backoff. (default 5s)
   616    -query-frontend.grpc-client-config.grpc-client-rate-limit float
   617      	Rate limit for gRPC client; 0 means disabled.
   618    -query-frontend.grpc-client-config.grpc-client-rate-limit-burst int
   619      	Rate limit burst for gRPC client.
   620    -query-frontend.grpc-client-config.grpc-compression string
   621      	Use compression when sending messages. Supported values are: 'gzip', 'snappy' and '' (disable compression)
   622    -query-frontend.grpc-client-config.grpc-max-recv-msg-size int
   623      	gRPC client max receive message size (bytes). (default 104857600)
   624    -query-frontend.grpc-client-config.grpc-max-send-msg-size int
   625      	gRPC client max send message size (bytes). (default 104857600)
   626    -query-frontend.grpc-client-config.initial-connection-window-size value
   627      	[experimental] Initial connection window size. Values less than the default are not supported and are ignored. Setting this to a value other than the default disables the BDP estimator. (default 63KiB1023B)
   628    -query-frontend.grpc-client-config.initial-stream-window-size value
   629      	[experimental] Initial stream window size. Values less than the default are not supported and are ignored. Setting this to a value other than the default disables the BDP estimator. (default 63KiB1023B)
   630    -query-frontend.grpc-client-config.tls-ca-path string
   631      	Path to the CA certificates to validate server certificate against. If not set, the host's root CA certificates are used.
   632    -query-frontend.grpc-client-config.tls-cert-path string
   633      	Path to the client certificate, which will be used for authenticating with the server. Also requires the key path to be configured.
   634    -query-frontend.grpc-client-config.tls-cipher-suites string
   635      	Override the default cipher suite list (separated by commas).
   636    -query-frontend.grpc-client-config.tls-enabled
   637      	Enable TLS in the gRPC client. This flag needs to be enabled when any other TLS flag is set. If set to false, insecure connection to gRPC server will be used.
   638    -query-frontend.grpc-client-config.tls-insecure-skip-verify
   639      	Skip validating server certificate.
   640    -query-frontend.grpc-client-config.tls-key-path string
   641      	Path to the key for the client certificate. Also requires the client certificate to be configured.
   642    -query-frontend.grpc-client-config.tls-min-version string
   643      	Override the default minimum TLS version. Allowed values: VersionTLS10, VersionTLS11, VersionTLS12, VersionTLS13
   644    -query-frontend.grpc-client-config.tls-server-name string
   645      	Override the expected name on the server certificate.
   646    -query-frontend.instance-addr string
   647      	IP address to advertise to the querier (via scheduler) (default is auto-detected from network interfaces).
   648    -query-frontend.instance-enable-ipv6
   649      	Enable using a IPv6 instance address. (default false)
   650    -query-frontend.instance-interface-names string
   651      	List of network interface names to look up when finding the instance IP address. This address is sent to query-scheduler and querier, which uses it to send the query response back to query-frontend. (default [<private network interfaces>])
   652    -query-frontend.instance-port int
   653      	Port to advertise to query-scheduler and querier (defaults to -server.http-listen-port).
   654    -query-frontend.scheduler-worker-concurrency int
   655      	Number of concurrent workers forwarding queries to single query-scheduler. (default 5)
   656    -query-scheduler.grpc-client-config.backoff-max-period duration
   657      	Maximum delay when backing off. (default 10s)
   658    -query-scheduler.grpc-client-config.backoff-min-period duration
   659      	Minimum delay when backing off. (default 100ms)
   660    -query-scheduler.grpc-client-config.backoff-on-ratelimits
   661      	Enable backoff and retry when we hit rate limits.
   662    -query-scheduler.grpc-client-config.backoff-retries int
   663      	Number of times to backoff and retry before failing. (default 10)
   664    -query-scheduler.grpc-client-config.cluster-validation.label string
   665      	[experimental] Optionally define the cluster validation label.
   666    -query-scheduler.grpc-client-config.connect-backoff-base-delay duration
   667      	Initial backoff delay after first connection failure. Only relevant if ConnectTimeout > 0. (default 1s)
   668    -query-scheduler.grpc-client-config.connect-backoff-max-delay duration
   669      	Maximum backoff delay when establishing a connection. Only relevant if ConnectTimeout > 0. (default 5s)
   670    -query-scheduler.grpc-client-config.connect-timeout duration
   671      	The maximum amount of time to establish a connection. A value of 0 means default gRPC client connect timeout and backoff. (default 5s)
   672    -query-scheduler.grpc-client-config.grpc-client-rate-limit float
   673      	Rate limit for gRPC client; 0 means disabled.
   674    -query-scheduler.grpc-client-config.grpc-client-rate-limit-burst int
   675      	Rate limit burst for gRPC client.
   676    -query-scheduler.grpc-client-config.grpc-compression string
   677      	Use compression when sending messages. Supported values are: 'gzip', 'snappy' and '' (disable compression)
   678    -query-scheduler.grpc-client-config.grpc-max-recv-msg-size int
   679      	gRPC client max receive message size (bytes). (default 104857600)
   680    -query-scheduler.grpc-client-config.grpc-max-send-msg-size int
   681      	gRPC client max send message size (bytes). (default 104857600)
   682    -query-scheduler.grpc-client-config.initial-connection-window-size value
   683      	[experimental] Initial connection window size. Values less than the default are not supported and are ignored. Setting this to a value other than the default disables the BDP estimator. (default 63KiB1023B)
   684    -query-scheduler.grpc-client-config.initial-stream-window-size value
   685      	[experimental] Initial stream window size. Values less than the default are not supported and are ignored. Setting this to a value other than the default disables the BDP estimator. (default 63KiB1023B)
   686    -query-scheduler.grpc-client-config.tls-ca-path string
   687      	Path to the CA certificates to validate server certificate against. If not set, the host's root CA certificates are used.
   688    -query-scheduler.grpc-client-config.tls-cert-path string
   689      	Path to the client certificate, which will be used for authenticating with the server. Also requires the key path to be configured.
   690    -query-scheduler.grpc-client-config.tls-cipher-suites string
   691      	Override the default cipher suite list (separated by commas).
   692    -query-scheduler.grpc-client-config.tls-enabled
   693      	Enable TLS in the gRPC client. This flag needs to be enabled when any other TLS flag is set. If set to false, insecure connection to gRPC server will be used.
   694    -query-scheduler.grpc-client-config.tls-insecure-skip-verify
   695      	Skip validating server certificate.
   696    -query-scheduler.grpc-client-config.tls-key-path string
   697      	Path to the key for the client certificate. Also requires the client certificate to be configured.
   698    -query-scheduler.grpc-client-config.tls-min-version string
   699      	Override the default minimum TLS version. Allowed values: VersionTLS10, VersionTLS11, VersionTLS12, VersionTLS13
   700    -query-scheduler.grpc-client-config.tls-server-name string
   701      	Override the expected name on the server certificate.
   702    -query-scheduler.max-outstanding-requests-per-tenant int
   703      	Maximum number of outstanding requests per tenant per query-scheduler. In-flight requests above this limit will fail with HTTP response status code 429. (default 100)
   704    -query-scheduler.max-used-instances int
   705      	[experimental] The maximum number of query-scheduler instances to use, regardless how many replicas are running. This option can be set only when -query-scheduler.service-discovery-mode is set to 'ring'. 0 to use all available query-scheduler instances.
   706    -query-scheduler.querier-forget-delay duration
   707      	[experimental] If a querier disconnects without sending notification about graceful shutdown, the query-scheduler will keep the querier in the tenant's shard until the forget delay has passed. This feature is useful to reduce the blast radius when shuffle-sharding is enabled.
   708    -query-scheduler.ring.consul.acl-token string
   709      	ACL Token used to interact with Consul.
   710    -query-scheduler.ring.consul.cas-retry-delay duration
   711      	Maximum duration to wait before retrying a Compare And Swap (CAS) operation. (default 1s)
   712    -query-scheduler.ring.consul.client-timeout duration
   713      	HTTP timeout when talking to Consul (default 20s)
   714    -query-scheduler.ring.consul.consistent-reads
   715      	Enable consistent reads to Consul.
   716    -query-scheduler.ring.consul.hostname string
   717      	Hostname and port of Consul. (default "localhost:8500")
   718    -query-scheduler.ring.consul.watch-burst-size int
   719      	Burst size used in rate limit. Values less than 1 are treated as 1. (default 1)
   720    -query-scheduler.ring.consul.watch-rate-limit float
   721      	Rate limit when watching key or prefix in Consul, in requests per second. 0 disables the rate limit. (default 1)
   722    -query-scheduler.ring.etcd.dial-timeout duration
   723      	The dial timeout for the etcd connection. (default 10s)
   724    -query-scheduler.ring.etcd.endpoints string
   725      	The etcd endpoints to connect to.
   726    -query-scheduler.ring.etcd.max-retries int
   727      	The maximum number of retries to do for failed ops. (default 10)
   728    -query-scheduler.ring.etcd.password string
   729      	Etcd password.
   730    -query-scheduler.ring.etcd.tls-ca-path string
   731      	Path to the CA certificates to validate server certificate against. If not set, the host's root CA certificates are used.
   732    -query-scheduler.ring.etcd.tls-cert-path string
   733      	Path to the client certificate, which will be used for authenticating with the server. Also requires the key path to be configured.
   734    -query-scheduler.ring.etcd.tls-cipher-suites string
   735      	Override the default cipher suite list (separated by commas).
   736    -query-scheduler.ring.etcd.tls-enabled
   737      	Enable TLS.
   738    -query-scheduler.ring.etcd.tls-insecure-skip-verify
   739      	Skip validating server certificate.
   740    -query-scheduler.ring.etcd.tls-key-path string
   741      	Path to the key for the client certificate. Also requires the client certificate to be configured.
   742    -query-scheduler.ring.etcd.tls-min-version string
   743      	Override the default minimum TLS version. Allowed values: VersionTLS10, VersionTLS11, VersionTLS12, VersionTLS13
   744    -query-scheduler.ring.etcd.tls-server-name string
   745      	Override the expected name on the server certificate.
   746    -query-scheduler.ring.etcd.username string
   747      	Etcd username.
   748    -query-scheduler.ring.heartbeat-period duration
   749      	Period at which to heartbeat to the ring. 0 = disabled. (default 15s)
   750    -query-scheduler.ring.heartbeat-timeout duration
   751      	The heartbeat timeout after which query-scheduler are considered unhealthy within the ring. 0 = never (timeout disabled). (default 1m0s)
   752    -query-scheduler.ring.instance-addr string
   753      	IP address to advertise in the ring. Default is auto-detected.
   754    -query-scheduler.ring.instance-enable-ipv6
   755      	Enable using a IPv6 instance address. (default false)
   756    -query-scheduler.ring.instance-id string
   757      	Instance ID to register in the ring. (default "<hostname>")
   758    -query-scheduler.ring.instance-interface-names string
   759      	List of network interface names to look up when finding the instance IP address. (default [<private network interfaces>])
   760    -query-scheduler.ring.instance-port int
   761      	Port to advertise in the ring (defaults to -server.http-listen-port).
   762    -query-scheduler.ring.multi.mirror-enabled
   763      	Mirror writes to secondary store.
   764    -query-scheduler.ring.multi.mirror-timeout duration
   765      	Timeout for storing value to secondary store. (default 2s)
   766    -query-scheduler.ring.multi.primary string
   767      	Primary backend storage used by multi-client.
   768    -query-scheduler.ring.multi.secondary string
   769      	Secondary backend storage used by multi-client.
   770    -query-scheduler.ring.prefix string
   771      	The prefix for the keys in the store. Should end with a /. (default "collectors/")
   772    -query-scheduler.ring.store string
   773      	Backend storage to use for the ring. Supported values are: consul, etcd, inmemory, memberlist, multi. (default "memberlist")
   774    -query-scheduler.service-discovery-mode string
   775      	[experimental] Service discovery mode that query-frontends and queriers use to find query-scheduler instances. When query-scheduler ring-based service discovery is enabled, this option needs be set on query-schedulers, query-frontends and queriers. Supported values are: dns, ring. (default "ring")
   776    -ring.heartbeat-timeout duration
   777      	The heartbeat timeout after which ingesters are skipped for reads/writes. 0 = never (timeout disabled). (default 1m0s)
   778    -ring.prefix string
   779      	The prefix for the keys in the store. Should end with a /. (default "collectors/")
   780    -ring.store string
   781      	Backend storage to use for the ring. Supported values are: consul, etcd, inmemory, memberlist, multi. (default "memberlist")
   782    -runtime-config.file comma-separated-list-of-strings
   783      	Comma separated list of yaml files with the configuration that can be updated at runtime. Runtime config files will be merged from left to right.
   784    -runtime-config.reload-period duration
   785      	How often to check runtime config files. (default 10s)
   786    -self-profiling.block-profile-rate int
   787      	 (default 5)
   788    -self-profiling.disable-push
   789      	When running in single binary (--target=all) Pyroscope will push (Go SDK) profiles to itself. Set to true to disable self-profiling.
   790    -self-profiling.mutex-profile-fraction int
   791      	 (default 5)
   792    -self-profiling.use-k6-middleware
   793      	Read k6 labels from request headers and set them as dynamic profile tags.
   794    -server.cluster-validation.grpc.enabled
   795      	[experimental] When enabled, cluster label validation is executed: configured cluster validation label is compared with the cluster validation label received through the requests.
   796    -server.cluster-validation.grpc.soft-validation
   797      	[experimental] When enabled, soft cluster label validation is executed. Can be enabled only together with server.cluster-validation.grpc.enabled
   798    -server.cluster-validation.http.enabled
   799      	[experimental] When enabled, cluster label validation is executed: configured cluster validation label is compared with the cluster validation label received through the requests.
   800    -server.cluster-validation.http.excluded-paths comma-separated-list-of-strings
   801      	[experimental] Comma-separated list of url paths that are excluded from the cluster validation check.
   802    -server.cluster-validation.http.excluded-user-agents comma-separated-list-of-strings
   803      	[experimental] Comma-separated list of user agents that are excluded from the cluster validation check.
   804    -server.cluster-validation.http.soft-validation
   805      	[experimental] When enabled, soft cluster label validation is executed. Can be enabled only together with server.cluster-validation.http.enabled
   806    -server.cluster-validation.label string
   807      	[experimental] Optionally define the cluster validation label.
   808    -server.graceful-shutdown-timeout duration
   809      	Timeout for graceful shutdowns (default 30s)
   810    -server.grpc-collect-max-streams-by-conn
   811      	If true, the max streams by connection gauge will be collected. (default true)
   812    -server.grpc-conn-limit int
   813      	Maximum number of simultaneous grpc connections, <=0 to disable
   814    -server.grpc-listen-address string
   815      	gRPC server listen address.
   816    -server.grpc-listen-network string
   817      	gRPC server listen network (default "tcp")
   818    -server.grpc-listen-port int
   819      	gRPC server listen port. (default 9095)
   820    -server.grpc-max-concurrent-streams uint
   821      	Limit on the number of concurrent streams for gRPC calls per client connection (0 = unlimited) (default 100)
   822    -server.grpc-max-recv-msg-size-bytes int
   823      	Limit on the size of a gRPC message this server can receive (bytes). (default 4194304)
   824    -server.grpc-max-send-msg-size-bytes int
   825      	Limit on the size of a gRPC message this server can send (bytes). (default 4194304)
   826    -server.grpc-tls-ca-path string
   827      	GRPC TLS Client CA path.
   828    -server.grpc-tls-cert-path string
   829      	GRPC TLS server cert path.
   830    -server.grpc-tls-client-auth string
   831      	GRPC TLS Client Auth type.
   832    -server.grpc-tls-key-path string
   833      	GRPC TLS server key path.
   834    -server.grpc.keepalive.max-connection-age duration
   835      	The duration for the maximum amount of time a connection may exist before it will be closed. Default: infinity (default 2562047h47m16.854775807s)
   836    -server.grpc.keepalive.max-connection-age-grace duration
   837      	An additive period after max-connection-age after which the connection will be forcibly closed. Default: infinity (default 2562047h47m16.854775807s)
   838    -server.grpc.keepalive.max-connection-idle duration
   839      	The duration after which an idle connection should be closed. Default: infinity (default 2562047h47m16.854775807s)
   840    -server.grpc.keepalive.min-time-between-pings duration
   841      	Minimum amount of time a client should wait before sending a keepalive ping. If client sends keepalive ping more often, server will send GOAWAY and close the connection. (default 5m0s)
   842    -server.grpc.keepalive.ping-without-stream-allowed
   843      	If true, server allows keepalive pings even when there are no active streams(RPCs). If false, and client sends ping when there are no active streams, server will send GOAWAY and close the connection.
   844    -server.grpc.keepalive.time duration
   845      	Duration after which a keepalive probe is sent in case of no activity over the connection., Default: 2h (default 2h0m0s)
   846    -server.grpc.keepalive.timeout duration
   847      	After having pinged for keepalive check, the duration after which an idle connection should be closed, Default: 20s (default 20s)
   848    -server.grpc.num-workers int
   849      	If non-zero, configures the amount of GRPC server workers used to serve the requests.
   850    -server.grpc.recv-buffer-pools-enabled
   851      	Deprecated option, has no effect and will be removed in a future version.
   852    -server.grpc.stats-tracking-enabled
   853      	If true, the request_message_bytes, response_message_bytes, and inflight_requests metrics will be tracked. Enabling this option prevents the use of memory pools for parsing gRPC request bodies and may lead to more memory allocations. (default true)
   854    -server.http-conn-limit int
   855      	Maximum number of simultaneous http connections, <=0 to disable
   856    -server.http-idle-timeout duration
   857      	Idle timeout for HTTP server (default 2m0s)
   858    -server.http-listen-address string
   859      	HTTP server listen address.
   860    -server.http-listen-network string
   861      	HTTP server listen network, default tcp (default "tcp")
   862    -server.http-listen-port int
   863      	HTTP server listen port. (default 4040)
   864    -server.http-log-closed-connections-without-response-enabled
   865      	Log closed connections that did not receive any response, most likely because client didn't send any request within timeout.
   866    -server.http-read-header-timeout duration
   867      	Read timeout for HTTP request headers. If set to 0, value of -server.http-read-timeout is used.
   868    -server.http-read-timeout duration
   869      	Read timeout for entire HTTP request, including headers and body. (default 30s)
   870    -server.http-tls-ca-path string
   871      	HTTP TLS Client CA path.
   872    -server.http-tls-cert-path string
   873      	HTTP server cert path.
   874    -server.http-tls-client-auth string
   875      	HTTP TLS Client Auth type.
   876    -server.http-tls-key-path string
   877      	HTTP server key path.
   878    -server.http-write-timeout duration
   879      	Write timeout for HTTP server (default 30s)
   880    -server.log-request-at-info-level-enabled
   881      	Optionally log requests at info level instead of debug level. Applies to request headers as well if server.log-request-headers is enabled.
   882    -server.log-request-headers
   883      	Optionally log request headers.
   884    -server.log-request-headers-exclude-list string
   885      	Comma separated list of headers to exclude from loggin. Only used if server.log-request-headers is true.
   886    -server.log-source-ips-enabled
   887      	Optionally log the source IPs.
   888    -server.log-source-ips-full
   889      	Log all source IPs instead of only the originating one. Only used if server.log-source-ips-enabled is true
   890    -server.log-source-ips-header string
   891      	Header field storing the source IPs. Only used if server.log-source-ips-enabled is true. If not set the default Forwarded, X-Real-IP and X-Forwarded-For headers are used
   892    -server.log-source-ips-regex string
   893      	Regex for matching the source IPs. Only used if server.log-source-ips-enabled is true. If not set the default Forwarded, X-Real-IP and X-Forwarded-For headers are used
   894    -server.path-prefix string
   895      	Base path to serve all API routes from (e.g. /v1/)
   896    -server.proxy-protocol-enabled
   897      	Enables PROXY protocol.
   898    -server.register-instrumentation
   899      	Register the intrumentation handlers (/metrics etc). (default true)
   900    -server.report-grpc-codes-in-instrumentation-label-enabled
   901      	If set to true, gRPC statuses will be reported in instrumentation labels with their string representations. Otherwise, they will be reported as "error".
   902    -server.throughput.latency-cutoff duration
   903      	Requests taking over the cutoff are be observed to measure throughput. Server-Timing header is used with specified unit as the indicator, for example 'Server-Timing: unit;val=8.2'. If set to 0, the throughput is not calculated.
   904    -server.throughput.unit string
   905      	Unit of the server throughput metric, for example 'processed_bytes' or 'samples_processed'. Observed values are gathered from the 'Server-Timing' header with the 'val' key. If set, it is appended to the request_server_throughput metric name. (default "samples_processed")
   906    -server.tls-cipher-suites string
   907      	Comma-separated list of cipher suites to use. If blank, the default Go cipher suites is used.
   908    -server.tls-min-version string
   909      	Minimum TLS version to use. Allowed values: VersionTLS10, VersionTLS11, VersionTLS12, VersionTLS13. If blank, the Go TLS minimum version is used.
   910    -server.trace-request-headers
   911      	Optionally add request headers to tracing spans.
   912    -server.trace-request-headers-exclude-list string
   913      	Comma separated list of headers to exclude from tracing spans. Only used if server.trace-request-headers is true. The following headers are always excluded: Authorization, Cookie, X-Csrf-Token.
   914    -shutdown-delay duration
   915      	Wait time before shutting down after a termination signal.
   916    -storage.azure.account-key string
   917      	Azure storage account key. If unset, Azure managed identities will be used for authentication instead.
   918    -storage.azure.account-name string
   919      	Azure storage account name
   920    -storage.azure.az-tenant-id string
   921      	Azure Active Directory tenant ID. If set alongside `client-id` and `client-secret`, these values will be used for authentication via a client secret credential.
   922    -storage.azure.client-id string
   923      	Azure Active Directory client ID. If set alongside `az-tenant-id` and `client-secret`, these values will be used for authentication via a client secret credential.
   924    -storage.azure.client-secret string
   925      	Azure Active Directory client secret. If set alongside `az-tenant-id` and `client-id`, these values will be used for authentication via a client secret credential.
   926    -storage.azure.connection-string string
   927      	If `connection-string` is set, the value of `endpoint-suffix` will not be used. Use this method over `account-key` if you need to authenticate via a SAS token. Or if you use the Azurite emulator.
   928    -storage.azure.container-name string
   929      	Azure storage container name
   930    -storage.azure.endpoint-suffix string
   931      	Azure storage endpoint suffix without schema. The account name will be prefixed to this value to create the FQDN. If set to empty string, default endpoint suffix is used.
   932    -storage.azure.max-retries int
   933      	Number of retries for recoverable errors (default 3)
   934    -storage.azure.user-assigned-id string
   935      	User assigned managed identity. If empty, then System assigned identity is used.
   936    -storage.backend string
   937      	Backend storage to use. Supported backends are: s3, gcs, azure, swift, filesystem, cos.
   938    -storage.cos.app-id string
   939      	COS app id
   940    -storage.cos.bucket string
   941      	COS bucket name
   942    -storage.cos.endpoint string
   943      	COS storage endpoint
   944    -storage.cos.expect-continue-timeout duration
   945      	The time to wait for a server's first response headers after fully writing the request headers if the request has an Expect header. 0 to send the request body immediately. (default 1s)
   946    -storage.cos.http.idle-conn-timeout duration
   947      	The time an idle connection will remain idle before closing. (default 1m30s)
   948    -storage.cos.http.insecure-skip-verify
   949      	If the client connects to COS via HTTPS and this option is enabled, the client will accept any certificate and hostname.
   950    -storage.cos.http.response-header-timeout duration
   951      	The amount of time the client will wait for a servers response headers. (default 2m0s)
   952    -storage.cos.max-connections-per-host int
   953      	Maximum number of connections per host. 0 means no limit.
   954    -storage.cos.max-idle-connections int
   955      	Maximum number of idle (keep-alive) connections across all hosts. 0 means no limit. (default 100)
   956    -storage.cos.max-idle-connections-per-host int
   957      	Maximum number of idle (keep-alive) connections to keep per-host. If 0, a built-in default value is used. (default 100)
   958    -storage.cos.region string
   959      	COS region name
   960    -storage.cos.secret-id string
   961      	COS secret id
   962    -storage.cos.secret-key string
   963      	COS secret key
   964    -storage.cos.tls-handshake-timeout duration
   965      	Maximum time to wait for a TLS handshake. 0 means no limit. (default 10s)
   966    -storage.filesystem.dir string
   967      	Local filesystem storage directory. (default "./data-shared")
   968    -storage.gcs.bucket-name string
   969      	GCS bucket name
   970    -storage.gcs.expect-continue-timeout duration
   971      	The time to wait for a server's first response headers after fully writing the request headers if the request has an Expect header. 0 to send the request body immediately. (default 1s)
   972    -storage.gcs.http.idle-conn-timeout duration
   973      	The time an idle connection will remain idle before closing. (default 1m30s)
   974    -storage.gcs.http.insecure-skip-verify
   975      	If the client connects to GCS via HTTPS and this option is enabled, the client will accept any certificate and hostname.
   976    -storage.gcs.http.response-header-timeout duration
   977      	The amount of time the client will wait for a servers response headers. (default 2m0s)
   978    -storage.gcs.max-connections-per-host int
   979      	Maximum number of connections per host. 0 means no limit.
   980    -storage.gcs.max-idle-connections int
   981      	Maximum number of idle (keep-alive) connections across all hosts. 0 means no limit.
   982    -storage.gcs.max-idle-connections-per-host int
   983      	Maximum number of idle (keep-alive) connections to keep per-host. If 0, a built-in default value is used. (default 100)
   984    -storage.gcs.service-account string
   985      	JSON either from a Google Developers Console client_credentials.json file, or a Google Developers service account key. Needs to be valid JSON, not a filesystem path.
   986    -storage.gcs.tls-handshake-timeout duration
   987      	Maximum time to wait for a TLS handshake. 0 means no limit. (default 10s)
   988    -storage.prefix string
   989      	Prefix for all objects stored in the backend storage. For simplicity, it may only contain digits and English alphabet characters, hyphens, underscores, dots and forward slashes.
   990    -storage.s3.access-key-id string
   991      	S3 access key ID
   992    -storage.s3.bucket-lookup-type string
   993      	S3 bucket lookup style, use one of: [path-style virtual-hosted-style auto] (default "auto")
   994    -storage.s3.bucket-name string
   995      	S3 bucket name
   996    -storage.s3.endpoint string
   997      	The S3 bucket endpoint. It could be an AWS S3 endpoint listed at https://docs.aws.amazon.com/general/latest/gr/s3.html or the address of an S3-compatible service in hostname:port format.
   998    -storage.s3.expect-continue-timeout duration
   999      	The time to wait for a server's first response headers after fully writing the request headers if the request has an Expect header. 0 to send the request body immediately. (default 1s)
  1000    -storage.s3.force-path-style
  1001      	Deprecated, use s3.bucket-lookup-type instead. Set this to `true` to force the bucket lookup to be using path-style.
  1002    -storage.s3.http.idle-conn-timeout duration
  1003      	The time an idle connection will remain idle before closing. (default 1m30s)
  1004    -storage.s3.http.insecure-skip-verify
  1005      	If the client connects to S3 via HTTPS and this option is enabled, the client will accept any certificate and hostname.
  1006    -storage.s3.http.response-header-timeout duration
  1007      	The amount of time the client will wait for a servers response headers. (default 2m0s)
  1008    -storage.s3.insecure
  1009      	If enabled, use http:// for the S3 endpoint instead of https://. This could be useful in local dev/test environments while using an S3-compatible backend storage, like Minio.
  1010    -storage.s3.max-connections-per-host int
  1011      	Maximum number of connections per host. 0 means no limit.
  1012    -storage.s3.max-idle-connections int
  1013      	Maximum number of idle (keep-alive) connections across all hosts. 0 means no limit.
  1014    -storage.s3.max-idle-connections-per-host int
  1015      	Maximum number of idle (keep-alive) connections to keep per-host. If 0, a built-in default value is used. (default 100)
  1016    -storage.s3.region string
  1017      	S3 region. If unset, the client will issue a S3 GetBucketLocation API call to autodetect it.
  1018    -storage.s3.secret-access-key string
  1019      	S3 secret access key
  1020    -storage.s3.signature-version string
  1021      	The signature version to use for authenticating against S3. Supported values are: v4, v2. (default "v4")
  1022    -storage.s3.sse.kms-encryption-context string
  1023      	KMS Encryption Context used for object encryption. It expects JSON formatted string.
  1024    -storage.s3.sse.kms-key-id string
  1025      	KMS Key ID used to encrypt objects in S3
  1026    -storage.s3.sse.type string
  1027      	Enable AWS Server Side Encryption. Supported values: SSE-KMS, SSE-S3.
  1028    -storage.s3.tls-handshake-timeout duration
  1029      	Maximum time to wait for a TLS handshake. 0 means no limit. (default 10s)
  1030    -storage.storage-prefix string
  1031      	[experimental] Deprecated: Use 'storage..prefix' instead. Prefix for all objects stored in the backend storage. For simplicity, it may only contain digits and English alphabet characters, hyphens, underscores, dots and forward slashes.
  1032    -storage.swift.auth-url string
  1033      	OpenStack Swift authentication URL
  1034    -storage.swift.auth-version int
  1035      	OpenStack Swift authentication API version. 0 to autodetect.
  1036    -storage.swift.connect-timeout duration
  1037      	Time after which a connection attempt is aborted. (default 10s)
  1038    -storage.swift.container-name string
  1039      	Name of the OpenStack Swift container to put chunks in.
  1040    -storage.swift.domain-id string
  1041      	OpenStack Swift user's domain ID.
  1042    -storage.swift.domain-name string
  1043      	OpenStack Swift user's domain name.
  1044    -storage.swift.max-retries int
  1045      	Max retries on requests error. (default 3)
  1046    -storage.swift.password string
  1047      	OpenStack Swift API key.
  1048    -storage.swift.project-domain-id string
  1049      	ID of the OpenStack Swift project's domain (v3 auth only), only needed if it differs the from user domain.
  1050    -storage.swift.project-domain-name string
  1051      	Name of the OpenStack Swift project's domain (v3 auth only), only needed if it differs from the user domain.
  1052    -storage.swift.project-id string
  1053      	OpenStack Swift project ID (v2,v3 auth only).
  1054    -storage.swift.project-name string
  1055      	OpenStack Swift project name (v2,v3 auth only).
  1056    -storage.swift.region-name string
  1057      	OpenStack Swift Region to use (v2,v3 auth only).
  1058    -storage.swift.request-timeout duration
  1059      	Time after which an idle request is aborted. The timeout watchdog is reset each time some data is received, so the timeout triggers after X time no data is received on a request. (default 5s)
  1060    -storage.swift.user-domain-id string
  1061      	OpenStack Swift user's domain ID.
  1062    -storage.swift.user-domain-name string
  1063      	OpenStack Swift user's domain name.
  1064    -storage.swift.user-id string
  1065      	OpenStack Swift user ID.
  1066    -storage.swift.username string
  1067      	OpenStack Swift username.
  1068    -store-gateway.sharding-ring.consul.acl-token string
  1069      	ACL Token used to interact with Consul.
  1070    -store-gateway.sharding-ring.consul.cas-retry-delay duration
  1071      	Maximum duration to wait before retrying a Compare And Swap (CAS) operation. (default 1s)
  1072    -store-gateway.sharding-ring.consul.client-timeout duration
  1073      	HTTP timeout when talking to Consul (default 20s)
  1074    -store-gateway.sharding-ring.consul.consistent-reads
  1075      	Enable consistent reads to Consul.
  1076    -store-gateway.sharding-ring.consul.hostname string
  1077      	Hostname and port of Consul. (default "localhost:8500")
  1078    -store-gateway.sharding-ring.consul.watch-burst-size int
  1079      	Burst size used in rate limit. Values less than 1 are treated as 1. (default 1)
  1080    -store-gateway.sharding-ring.consul.watch-rate-limit float
  1081      	Rate limit when watching key or prefix in Consul, in requests per second. 0 disables the rate limit. (default 1)
  1082    -store-gateway.sharding-ring.etcd.dial-timeout duration
  1083      	The dial timeout for the etcd connection. (default 10s)
  1084    -store-gateway.sharding-ring.etcd.endpoints string
  1085      	The etcd endpoints to connect to.
  1086    -store-gateway.sharding-ring.etcd.max-retries int
  1087      	The maximum number of retries to do for failed ops. (default 10)
  1088    -store-gateway.sharding-ring.etcd.password string
  1089      	Etcd password.
  1090    -store-gateway.sharding-ring.etcd.tls-ca-path string
  1091      	Path to the CA certificates to validate server certificate against. If not set, the host's root CA certificates are used.
  1092    -store-gateway.sharding-ring.etcd.tls-cert-path string
  1093      	Path to the client certificate, which will be used for authenticating with the server. Also requires the key path to be configured.
  1094    -store-gateway.sharding-ring.etcd.tls-cipher-suites string
  1095      	Override the default cipher suite list (separated by commas).
  1096    -store-gateway.sharding-ring.etcd.tls-enabled
  1097      	Enable TLS.
  1098    -store-gateway.sharding-ring.etcd.tls-insecure-skip-verify
  1099      	Skip validating server certificate.
  1100    -store-gateway.sharding-ring.etcd.tls-key-path string
  1101      	Path to the key for the client certificate. Also requires the client certificate to be configured.
  1102    -store-gateway.sharding-ring.etcd.tls-min-version string
  1103      	Override the default minimum TLS version. Allowed values: VersionTLS10, VersionTLS11, VersionTLS12, VersionTLS13
  1104    -store-gateway.sharding-ring.etcd.tls-server-name string
  1105      	Override the expected name on the server certificate.
  1106    -store-gateway.sharding-ring.etcd.username string
  1107      	Etcd username.
  1108    -store-gateway.sharding-ring.heartbeat-period duration
  1109      	Period at which to heartbeat to the ring. 0 = disabled. (default 15s)
  1110    -store-gateway.sharding-ring.heartbeat-timeout duration
  1111      	The heartbeat timeout after which store-gateways are considered unhealthy within the ring. 0 = never (timeout disabled). (default 1m0s)
  1112    -store-gateway.sharding-ring.instance-addr string
  1113      	IP address to advertise in the ring. Default is auto-detected.
  1114    -store-gateway.sharding-ring.instance-availability-zone string
  1115      	The availability zone where this instance is running. Required if zone-awareness is enabled.
  1116    -store-gateway.sharding-ring.instance-enable-ipv6
  1117      	Enable using a IPv6 instance address. (default false)
  1118    -store-gateway.sharding-ring.instance-id string
  1119      	Instance ID to register in the ring. (default "<hostname>")
  1120    -store-gateway.sharding-ring.instance-interface-names string
  1121      	List of network interface names to look up when finding the instance IP address. (default [<private network interfaces>])
  1122    -store-gateway.sharding-ring.instance-port int
  1123      	Port to advertise in the ring (defaults to -server.http-listen-port).
  1124    -store-gateway.sharding-ring.multi.mirror-enabled
  1125      	Mirror writes to secondary store.
  1126    -store-gateway.sharding-ring.multi.mirror-timeout duration
  1127      	Timeout for storing value to secondary store. (default 2s)
  1128    -store-gateway.sharding-ring.multi.primary string
  1129      	Primary backend storage used by multi-client.
  1130    -store-gateway.sharding-ring.multi.secondary string
  1131      	Secondary backend storage used by multi-client.
  1132    -store-gateway.sharding-ring.prefix string
  1133      	The prefix for the keys in the store. Should end with a /. (default "collectors/")
  1134    -store-gateway.sharding-ring.replication-factor int
  1135      	The replication factor to use when sharding blocks. This option needs be set both on the store-gateway and querier when running in microservices mode. (default 1)
  1136    -store-gateway.sharding-ring.store string
  1137      	Backend storage to use for the ring. Supported values are: consul, etcd, inmemory, memberlist, multi. (default "memberlist")
  1138    -store-gateway.sharding-ring.tokens-file-path string
  1139      	File path where tokens are stored. If empty, tokens are not stored at shutdown and restored at startup.
  1140    -store-gateway.sharding-ring.unregister-on-shutdown
  1141      	Unregister from the ring upon clean shutdown. (default true)
  1142    -store-gateway.sharding-ring.wait-stability-max-duration duration
  1143      	Maximum time to wait for ring stability at startup. If the store-gateway ring keeps changing after this period of time, the store-gateway will start anyway. (default 5m0s)
  1144    -store-gateway.sharding-ring.wait-stability-min-duration duration
  1145      	Minimum time to wait for ring stability at startup, if set to positive value.
  1146    -store-gateway.sharding-ring.zone-awareness-enabled
  1147      	True to enable zone-awareness and replicate blocks across different availability zones. This option needs be set both on the store-gateway and querier when running in microservices mode.
  1148    -store-gateway.tenant-shard-size int
  1149      	The tenant's shard size, used when store-gateway sharding is enabled. Value of 0 disables shuffle sharding for the tenant, that is all tenant blocks are sharded across all store-gateway replicas.
  1150    -target comma-separated-list-of-strings
  1151      	Comma-separated list of Pyroscope modules to load. The alias 'all' can be used in the list to load a number of core modules and will enable single-binary mode.  (default all)
  1152    -tenant-settings.recording-rules.enabled
  1153      	[experimental] Enable the storing of recording rules in tenant settings.
  1154    -tracing.enabled
  1155      	Set to false to disable tracing. (default true)
  1156    -tracing.profiling-enabled
  1157      	[experimental] Set to true to enable profiling integration.
  1158    -usage-stats.enabled
  1159      	Enable anonymous usage statistics collection. For more details about usage statistics, refer to https://grafana.com/docs/pyroscope/latest/configure-server/anonymous-usage-statistics-reporting/ (default true)
  1160    -validation.enforce-labels-order
  1161      	Enforce labels order optimization.
  1162    -validation.max-label-names-per-series int
  1163      	Maximum number of label names per series. (default 30)
  1164    -validation.max-length-label-name int
  1165      	Maximum length accepted for label names. (default 1024)
  1166    -validation.max-length-label-value int
  1167      	Maximum length accepted for label value. This setting also applies to the metric name. (default 2048)
  1168    -validation.max-profile-size-bytes int
  1169      	Maximum size of a profile in bytes. This is based off the uncompressed size. 0 to disable. (default 4194304)
  1170    -validation.max-profile-stacktrace-depth int
  1171      	Maximum depth of a profile stacktrace. Profiles are not rejected instead stacktraces are truncated. 0 to disable. (default 1000)
  1172    -validation.max-profile-stacktrace-sample-labels int
  1173      	Maximum number of labels in a profile sample. 0 to disable. (default 100)
  1174    -validation.max-profile-stacktrace-samples int
  1175      	Maximum number of samples in a profile. 0 to disable. (default 16000)
  1176    -validation.max-profile-symbol-value-length int
  1177      	Maximum length of a profile symbol value (labels, function names and filenames, etc...). Profiles are not rejected instead symbol values are truncated. 0 to disable. (default 65535)
  1178    -validation.max-sessions-per-series int
  1179      	Maximum number of sessions per series. 0 to disable.
  1180    -validation.reject-newer-than duration
  1181      	This limits how far into the future profiling data can be ingested. This limit is enforced in the distributor. 0 to disable, defaults to 10m. (default 10m)
  1182    -validation.reject-older-than duration
  1183      	This limits how far into the past profiling data can be ingested. This limit is enforced in the distributor. 0 to disable, defaults to 1h. (default 1h)
  1184    -version
  1185      	Show the version of pyroscope and exit