diff --git a/CHANGELOG.md b/CHANGELOG.md
index e0f3329810..5499914e6d 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -4,6 +4,14 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/).
 
 ## Unreleased
 
+[Upgrade
+guidelines](https://github.com/signalfx/splunk-otel-collector-chart/blob/main/UPGRADING.md#0380-to-0390)
+
+### Changed
+
+- [BREAKING CHANGE] Logs collection is now disabled by default for Splunk
+  Observability destination (#325)
+
 ## [0.38.0] - 2021-11-19
 
 This release completes the addition of content and documentation to easily allow
diff --git a/Makefile b/Makefile
index 01d537793a..d8f94fb729 100644
--- a/Makefile
+++ b/Makefile
@@ -45,7 +45,7 @@ render:
 		--namespace default \
 		--values rendered/values.yaml \
 		--output-dir "$$dir" \
-		--set logsEngine=otel \
+		--set logsEngine=otel,splunkObservability.logsEnabled=false \
 		default helm-charts/splunk-otel-collector; \
 	mv "$$dir"/splunk-otel-collector/templates/* "$$dir"; \
 	rm -rf "$$dir"/splunk-otel-collector
diff --git a/UPGRADING.md b/UPGRADING.md
index 19f7a7360b..d579111ed1 100644
--- a/UPGRADING.md
+++ b/UPGRADING.md
@@ -1,5 +1,13 @@
 # Upgrade guidelines
 
+## 0.38.0 to 0.39.0
+
+(#325 Logs collection is now disabled by default for Splunk Observability
+destination](https://github.com/signalfx/splunk-otel-collector-chart/pull/325)
+
+If you send logs to Splunk Observability destination, make sure to set
+`splunkObservability.logsEnabled` to true.
+
 ## 0.37.1 to 0.38.0
 
 [#297](https://github.com/signalfx/splunk-otel-collector-chart/pull/297),
diff --git a/helm-charts/splunk-otel-collector/ci/logs-only-otel-se-o11y-values.yaml b/helm-charts/splunk-otel-collector/ci/logs-only-otel-se-o11y-values.yaml
index 8b38331fb9..fd199440d6 100644
--- a/helm-charts/splunk-otel-collector/ci/logs-only-otel-se-o11y-values.yaml
+++ b/helm-charts/splunk-otel-collector/ci/logs-only-otel-se-o11y-values.yaml
@@ -2,16 +2,14 @@ clusterName: fake-cluster
 splunkObservability:
   realm: fake-realm
   accessToken: fake-token
-
+  logsEnabled: true
   tracesEnabled: false
   metricsEnabled: false
 
 splunkPlatform:
   endpoint: "fake-endpoint"
   token: "fake-token"
-
   index: "main"
-
   logsEnabled: true
   metricsEnabled: false
 
diff --git a/helm-charts/splunk-otel-collector/ci/logs-only-values.yaml b/helm-charts/splunk-otel-collector/ci/logs-only-values.yaml
index 9a67ce0853..13eb69bc13 100644
--- a/helm-charts/splunk-otel-collector/ci/logs-only-values.yaml
+++ b/helm-charts/splunk-otel-collector/ci/logs-only-values.yaml
@@ -2,6 +2,6 @@ clusterName: fake-cluster
 splunkObservability:
   realm: fake-realm
   accessToken: fake-token
-
+  logsEnabled: true
   tracesEnabled: false
   metricsEnabled: false
diff --git a/helm-charts/splunk-otel-collector/ci/sampler-gateway-env-vars-java-logs-values.yaml b/helm-charts/splunk-otel-collector/ci/sampler-gateway-env-vars-java-logs-values.yaml
index 669885030e..98ed5d6ff0 100644
--- a/helm-charts/splunk-otel-collector/ci/sampler-gateway-env-vars-java-logs-values.yaml
+++ b/helm-charts/splunk-otel-collector/ci/sampler-gateway-env-vars-java-logs-values.yaml
@@ -2,6 +2,7 @@ clusterName: fake-cluster
 splunkObservability:
   realm: fake-realm
   accessToken: fake-token
+  logsEnabled: true
 
 agent:
   config:
diff --git a/helm-charts/splunk-otel-collector/values.yaml b/helm-charts/splunk-otel-collector/values.yaml
index e246b05d72..6d49817f8a 100644
--- a/helm-charts/splunk-otel-collector/values.yaml
+++ b/helm-charts/splunk-otel-collector/values.yaml
@@ -97,10 +97,10 @@ splunkObservability:
   # "https://api.<realm>.signalfx.com".
   apiUrl: ""
 
-  # Options to disable particular telemetry data types.
-  logsEnabled: true
+  # Options to disable or enable particular telemetry data types.
   metricsEnabled: true
   tracesEnabled: true
+  logsEnabled: false
 
 ################################################################################
 # Logs collection engine:
diff --git a/rendered/manifests/agent-only/configmap-agent.yaml b/rendered/manifests/agent-only/configmap-agent.yaml
index d31b6d7dc7..938498beed 100644
--- a/rendered/manifests/agent-only/configmap-agent.yaml
+++ b/rendered/manifests/agent-only/configmap-agent.yaml
@@ -26,9 +26,6 @@ data:
         correlation: null
         ingest_url: https://ingest.CHANGEME.signalfx.com
         sync_host_metadata: true
-      splunk_hec/o11y:
-        endpoint: https://ingest.CHANGEME.signalfx.com/v1/log
-        token: ${SPLUNK_OBSERVABILITY_ACCESS_TOKEN}
     extensions:
       health_check: null
       k8s_observer:
@@ -133,8 +130,6 @@ data:
         override: false
         timeout: 10s
     receivers:
-      fluentforward:
-        endpoint: 0.0.0.0:8006
       hostmetrics:
         collection_interval: 10s
         scrapers:
@@ -194,21 +189,6 @@ data:
       - memory_ballast
       - zpages
       pipelines:
-        logs:
-          exporters:
-          - splunk_hec/o11y
-          processors:
-          - memory_limiter
-          - groupbyattrs/logs
-          - k8sattributes
-          - batch
-          - filter/logs
-          - resource
-          - resource/logs
-          - resourcedetection
-          receivers:
-          - fluentforward
-          - otlp
         metrics:
           exporters:
           - signalfx
diff --git a/rendered/manifests/agent-only/configmap-fluentd-cri.yaml b/rendered/manifests/agent-only/configmap-fluentd-cri.yaml
deleted file mode 100644
index d12fdf5eb5..0000000000
--- a/rendered/manifests/agent-only/configmap-fluentd-cri.yaml
+++ /dev/null
@@ -1,51 +0,0 @@
----
-# Source: splunk-otel-collector/templates/configmap-fluentd-cri.yaml
-apiVersion: v1
-kind: ConfigMap
-metadata:
-  name: default-splunk-otel-collector-fluentd-cri
-  labels:
-    app.kubernetes.io/name: splunk-otel-collector
-    helm.sh/chart: splunk-otel-collector-0.38.0
-    app.kubernetes.io/managed-by: Helm
-    app.kubernetes.io/instance: default
-    app.kubernetes.io/version: "0.38.1"
-    app: splunk-otel-collector
-    chart: splunk-otel-collector-0.38.0
-    release: default
-    heritage: Helm
-data:
-
-  source.containers.parse.conf: |-
-    @type regexp
-    expression /^(?<time>.+) (?<stream>stdout|stderr)( (?<partial_flag>[FP]))? (?<log>.*)$/
-    time_format %Y-%m-%dT%H:%M:%S.%N%:z
-
-  output.concat.conf: |-
-    # = handle cri/containerd multiline format =
-    <filter tail.containers.var.log.containers.**>
-      @type concat
-      key log
-      partial_key partial_flag
-      partial_value P
-      separator ''
-      timeout_label @SPLUNK
-    </filter>
-
-  output.transform.conf: |-
-    # extract pod_uid and container_name for CRIO runtime
-    # currently CRI does not produce log paths with all the necessary
-    # metadata to parse out pod, namespace, container_name, container_id.
-    # this may be resolved in the future by this issue: https://github.com/kubernetes/kubernetes/issues/58638#issuecomment-385126031
-    <filter tail.containers.var.log.pods.**>
-      @type jq_transformer
-      jq '.record | . + (.source | capture("/var/log/pods/(?<pod_uid>[^/]+)/(?<container_name>[^/]+)/(?<container_retry>[0-9]+).log")) | .sourcetype = ("kube:container:" + .container_name)'
-    </filter>
-    # rename pod_uid and container_name to otel semantics.
-    <filter tail.containers.var.log.pods.**>
-      @type record_transformer
-      <record>
-        k8s.pod.uid ${record["pod_uid"]}
-        k8s.container.name ${record["container_name"]}
-      </record>
-    </filter>
diff --git a/rendered/manifests/agent-only/configmap-fluentd-json.yaml b/rendered/manifests/agent-only/configmap-fluentd-json.yaml
deleted file mode 100644
index d4dde3376b..0000000000
--- a/rendered/manifests/agent-only/configmap-fluentd-json.yaml
+++ /dev/null
@@ -1,24 +0,0 @@
----
-# Source: splunk-otel-collector/templates/configmap-fluentd-json.yaml
-apiVersion: v1
-kind: ConfigMap
-metadata:
-  name: default-splunk-otel-collector-fluentd-json
-  labels:
-    app.kubernetes.io/name: splunk-otel-collector
-    helm.sh/chart: splunk-otel-collector-0.38.0
-    app.kubernetes.io/managed-by: Helm
-    app.kubernetes.io/instance: default
-    app.kubernetes.io/version: "0.38.1"
-    app: splunk-otel-collector
-    chart: splunk-otel-collector-0.38.0
-    release: default
-    heritage: Helm
-data:
-  source.containers.parse.conf: |-
-    @type json
-    time_format %Y-%m-%dT%H:%M:%S.%NZ
-
-  output.filter.conf: ""
-
-  output.transform.conf: ""
diff --git a/rendered/manifests/agent-only/configmap-fluentd.yaml b/rendered/manifests/agent-only/configmap-fluentd.yaml
deleted file mode 100644
index 25c43ec651..0000000000
--- a/rendered/manifests/agent-only/configmap-fluentd.yaml
+++ /dev/null
@@ -1,321 +0,0 @@
----
-# Source: splunk-otel-collector/templates/configmap-fluentd.yaml
-apiVersion: v1
-kind: ConfigMap
-metadata:
-  name: default-splunk-otel-collector-fluentd
-  labels:
-    app.kubernetes.io/name: splunk-otel-collector
-    helm.sh/chart: splunk-otel-collector-0.38.0
-    app.kubernetes.io/managed-by: Helm
-    app.kubernetes.io/instance: default
-    app.kubernetes.io/version: "0.38.1"
-    app: splunk-otel-collector
-    chart: splunk-otel-collector-0.38.0
-    release: default
-    heritage: Helm
-data:
-  fluent.conf: |-
-    @include system.conf
-    @include source.containers.conf
-    @include source.files.conf
-    @include source.journald.conf
-    @include output.conf
-    @include prometheus.conf
-
-  system.conf: |-
-    # system wide configurations
-    <system>
-      log_level info
-      root_dir /tmp/fluentd
-    </system>
-
-  prometheus.conf: |-
-    # input plugin that exports metrics
-    <source>
-      @type prometheus
-    </source>
-
-    # input plugin that collects metrics from MonitorAgent
-    <source>
-      @type prometheus_monitor
-    </source>
-
-    # input plugin that collects metrics for output plugin
-    <source>
-      @type prometheus_output_monitor
-    </source>
-
-  source.containers.conf: |-
-    # This configuration file for Fluentd / td-agent is used
-    # to watch changes to Docker log files. The kubelet creates symlinks that
-    # capture the pod name, namespace, container name & Docker container ID
-    # to the docker logs for pods in the /var/log/containers directory on the host.
-    # If running this fluentd configuration in a Docker container, the /var/log
-    # directory should be mounted in the container.
-    # reading kubelet logs from journal
-    #
-    # Reference:
-    # https://github.com/kubernetes/community/blob/20d2f6f5498a5668bae2aea9dcaf4875b9c06ccb/contributors/design-proposals/node/kubelet-cri-logging.md
-    #
-    # Json Log Example:
-    # {"log":"[info:2016-02-16T16:04:05.930-08:00] Some log text here\n","stream":"stdout","time":"2016-02-17T00:04:05.931087621Z"}
-    # CRI Log Example (not supported):
-    # 2016-02-17T00:04:05.931087621Z stdout P { 'long': { 'json', 'object output' },
-    # 2016-02-17T00:04:05.931087621Z stdout F 'splitted': 'partial-lines' }
-    # 2016-02-17T00:04:05.931087621Z stdout F [info:2016-02-16T16:04:05.930-08:00] Some log text here
-    <source>
-      @id containers.log
-      @type tail
-      @label @CONCAT
-      tag tail.containers.*
-      path /var/log/containers/*.log
-      pos_file /var/log/splunk-fluentd-containers.log.pos
-      path_key source
-      read_from_head true
-      <parse>
-        @include source.containers.parse.conf
-        time_key time
-        time_type string
-        localtime false
-      </parse>
-    </source>
-
-  source.files.conf: |-
-    # This fluentd conf file contains sources for log files other than container logs.
-    <source>
-      @id tail.file.kube-audit
-      @type tail
-      @label @CONCAT
-      tag tail.file.kube:apiserver-audit
-      path /var/log/kube-apiserver-audit.log
-      pos_file /var/log/splunk-fluentd-kube-audit.pos
-      read_from_head true
-      path_key source
-      <parse>
-        @type regexp
-        expression /^(?<log>.*)$/
-        time_key time
-        time_type string
-        time_format %Y-%m-%dT%H:%M:%SZ
-      </parse>
-    </source>
-
-  source.journald.conf: |-
-    # This fluentd conf file contains configurations for reading logs from systemd journal.
-    <source>
-      @id journald-docker
-      @type systemd
-      @label @CONCAT
-      tag journald.kube:docker
-      path "/run/log/journal"
-      matches [{ "_SYSTEMD_UNIT": "docker.service" }]
-      read_from_head true
-      <storage>
-        @type local
-        persistent true
-        path /var/log/splunkd-fluentd-journald-docker.pos.json
-      </storage>
-      <entry>
-        field_map {"MESSAGE": "log", "_SYSTEMD_UNIT": "source"}
-        field_map_strict true
-      </entry>
-    </source>
-    <source>
-      @id journald-kubelet
-      @type systemd
-      @label @CONCAT
-      tag journald.kube:kubelet
-      path "/run/log/journal"
-      matches [{ "_SYSTEMD_UNIT": "kubelet.service" }]
-      read_from_head true
-      <storage>
-        @type local
-        persistent true
-        path /var/log/splunkd-fluentd-journald-kubelet.pos.json
-      </storage>
-      <entry>
-        field_map {"MESSAGE": "log", "_SYSTEMD_UNIT": "source"}
-        field_map_strict true
-      </entry>
-    </source>
-
-  output.conf: |-
-    #Events are emitted to the CONCAT label from the container, file and journald sources for multiline processing.
-    <label @CONCAT>
-      @include output.filter.conf
-      # = handle custom multiline logs =
-      <filter tail.containers.var.log.containers.dns-controller*.log>
-        @type concat
-        key log
-        timeout_label @SPLUNK
-        stream_identity_key stream
-        multiline_start_regexp /^\w[0-1]\d[0-3]\d/
-        flush_interval 5s
-        separator ""
-        use_first_timestamp true
-      </filter>
-      <filter tail.containers.var.log.containers.kube-dns*sidecar*.log>
-        @type concat
-        key log
-        timeout_label @SPLUNK
-        stream_identity_key stream
-        multiline_start_regexp /^\w[0-1]\d[0-3]\d/
-        flush_interval 5s
-        separator ""
-        use_first_timestamp true
-      </filter>
-      <filter tail.containers.var.log.containers.kube-dns*.log>
-        @type concat
-        key log
-        timeout_label @SPLUNK
-        stream_identity_key stream
-        multiline_start_regexp /^\w[0-1]\d[0-3]\d/
-        flush_interval 5s
-        separator ""
-        use_first_timestamp true
-      </filter>
-      <filter tail.containers.var.log.containers.kube-apiserver*.log>
-        @type concat
-        key log
-        timeout_label @SPLUNK
-        stream_identity_key stream
-        multiline_start_regexp /^\w[0-1]\d[0-3]\d/
-        flush_interval 5s
-        separator ""
-        use_first_timestamp true
-      </filter>
-      <filter tail.containers.var.log.containers.kube-controller-manager*.log>
-        @type concat
-        key log
-        timeout_label @SPLUNK
-        stream_identity_key stream
-        multiline_start_regexp /^\w[0-1]\d[0-3]\d/
-        flush_interval 5s
-        separator ""
-        use_first_timestamp true
-      </filter>
-      <filter tail.containers.var.log.containers.kube-dns-autoscaler*autoscaler*.log>
-        @type concat
-        key log
-        timeout_label @SPLUNK
-        stream_identity_key stream
-        multiline_start_regexp /^\w[0-1]\d[0-3]\d/
-        flush_interval 5s
-        separator ""
-        use_first_timestamp true
-      </filter>
-      <filter tail.containers.var.log.containers.kube-proxy*.log>
-        @type concat
-        key log
-        timeout_label @SPLUNK
-        stream_identity_key stream
-        multiline_start_regexp /^\w[0-1]\d[0-3]\d/
-        flush_interval 5s
-        separator ""
-        use_first_timestamp true
-      </filter>
-      <filter tail.containers.var.log.containers.kube-scheduler*.log>
-        @type concat
-        key log
-        timeout_label @SPLUNK
-        stream_identity_key stream
-        multiline_start_regexp /^\w[0-1]\d[0-3]\d/
-        flush_interval 5s
-        separator ""
-        use_first_timestamp true
-      </filter>
-      <filter tail.containers.var.log.containers.kube-dns*.log>
-        @type concat
-        key log
-        timeout_label @SPLUNK
-        stream_identity_key stream
-        multiline_start_regexp /^\w[0-1]\d[0-3]\d/
-        flush_interval 5s
-        separator ""
-        use_first_timestamp true
-      </filter>
-      # = filters for journald logs =
-      <filter journald.kube:kubelet>
-        @type concat
-        key log
-        timeout_label @SPLUNK
-        multiline_start_regexp /^\w[0-1]\d[0-3]\d/
-        flush_interval 5s
-      </filter>
-      # Events are relabeled then emitted to the SPLUNK label
-      <match **>
-        @type relabel
-        @label @SPLUNK
-      </match>
-    </label>
-    <label @SPLUNK>
-      # Extract k8s metadata from container logs source paths. Use original logs source
-      # "/var/log/containers/<k8s.pod.k8s>_<k8s.namespace.name>_<k8s.container.name>-<container.id>.log"
-      # first then check symlinks to the new k8s logs format
-      # "/var/log/pods/<k8s.namespace.name>_<k8s.pod.name>_<k8s.pod.uid>/<k8s.container.name>/<k8s.container.restart_count>.log"
-      # to fetch "k8s.pod.uid" that will be used to get other k8s metadata by otel-collector from k8s API.
-      <filter tail.containers.**>
-        @type record_modifier
-        <record>
-          pods_source ${File.readlink(record['source'])}
-        </record>
-      </filter>
-      <filter tail.containers.**>
-        @type jq_transformer
-        jq '.record | . + (.source | capture("^/var/log/containers/(?<k8s.pod.name>[^_]+)_(?<k8s.namespace.name>[^_]+)_(?<k8s.container.name>[-0-9a-z]+)-(?<container.id>[^.]+).log$")) | . + (.pods_source | capture("^/var/log/pods/[^_]+_[^_]+_(?<k8s.pod.uid>[^/]+)/[^._]+/[0-9]+.log$") // {}) | .sourcetype = ("kube:container:" + .["k8s.container.name"])'
-      </filter>
-
-      @include output.transform.conf
-
-      # create source and sourcetype
-      <filter journald.**>
-        @type jq_transformer
-        jq '.record.source = "/run/log/journal/" + .record.source | .record.sourcetype = (.tag | ltrimstr("journald.")) |.record'
-      </filter>
-
-      # = filters for non-container log files =
-      # extract sourcetype
-      <filter tail.file.**>
-        @type jq_transformer
-        jq '.record.sourcetype = (.tag | ltrimstr("tail.file.")) | .record'
-      </filter>
-
-      # = custom filters specified by users =
-
-      <filter **>
-        @type record_transformer
-        enable_ruby
-        <record>
-          com.splunk.sourcetype ${record.dig("sourcetype") ? record.dig("sourcetype") : ""}
-          com.splunk.source ${record.dig("source") ? record.dig("source") : ""}
-        </record>
-        remove_keys pods_source,source,sourcetype
-      </filter>
-
-      # = output =
-      <match **>
-        @type forward
-        heartbeat_type udp
-        <server>
-          host 127.0.0.1
-          port 8006
-        </server>
-        <buffer>
-          @type memory
-          chunk_limit_records 100000
-          chunk_limit_size 1m
-          flush_interval 5s
-          flush_thread_count 1
-          overflow_action block
-          retry_max_times 3
-          total_limit_size 600m
-        </buffer>
-        <format>
-          # we just want to keep the raw logs, not the structure created by docker or journald
-          @type single_value
-          message_key log
-          add_newline false
-        </format>
-      </match>
-    </label>
diff --git a/rendered/manifests/agent-only/daemonset.yaml b/rendered/manifests/agent-only/daemonset.yaml
index c7bc1a9e20..849b13ab99 100644
--- a/rendered/manifests/agent-only/daemonset.yaml
+++ b/rendered/manifests/agent-only/daemonset.yaml
@@ -14,7 +14,6 @@ metadata:
     chart: splunk-otel-collector-0.38.0
     release: default
     heritage: Helm
-    engine: fluentd
 spec:
   updateStrategy:
     type: RollingUpdate
@@ -28,7 +27,7 @@ spec:
         app: splunk-otel-collector
         release: default
       annotations:
-        checksum/config: f30bdb1d93a11346ba80520ca24561ebec5d1e3881c03c3e6415f00424414bab
+        checksum/config: bb98fd92fd88830a1a40341e6bcf3ad8de93223fb742a882ac87c0c081df6319
         kubectl.kubernetes.io/default-container: otel-collector
     spec:
       hostNetwork: true
@@ -40,88 +39,13 @@ spec:
         
         - effect: NoSchedule
           key: node-role.kubernetes.io/master
-      initContainers:
-        - name: prepare-fluentd-config
-          image: splunk/fluentd-hec:1.2.8
-          imagePullPolicy: IfNotPresent
-          command: [ "sh", "-c"]
-          securityContext:
-            runAsUser: 0
-          args:
-            - if [ -z "${LOG_FORMAT_TYPE}" ]; then
-                if [ "$(ls /var/lib/docker/containers/*/*json.log 2>/dev/null | wc -l)" != "0" ]; then
-                  export LOG_FORMAT_TYPE=json;
-                else
-                  export LOG_FORMAT_TYPE=cri;
-                fi;
-              fi;
-              cp /fluentd/etc/common/* /fluentd/etc/${LOG_FORMAT_TYPE}/* /fluentd/etc/
-          env:
-            - name: LOG_FORMAT_TYPE
-              value: ""
-          volumeMounts:
-            - name: varlogdest
-              mountPath: /var/lib/docker/containers
-              readOnly: true
-            - name: fluentd-config
-              mountPath: /fluentd/etc
-            - name: fluentd-config-common
-              mountPath: /fluentd/etc/common
-            - name: fluentd-config-json
-              mountPath: /fluentd/etc/json
-            - name: fluentd-config-cri
-              mountPath: /fluentd/etc/cri
       containers:
-      - name: fluentd
-        image: splunk/fluentd-hec:1.2.8
-        imagePullPolicy: IfNotPresent
-        securityContext:
-          
-          runAsUser: 0
-        env:
-          - name: K8S_NODE_NAME
-            valueFrom:
-              fieldRef:
-                fieldPath: spec.nodeName
-          - name: MY_NAMESPACE
-            valueFrom:
-              fieldRef:
-                fieldPath: metadata.namespace
-          - name: MY_POD_NAME
-            valueFrom:
-              fieldRef:
-                fieldPath: metadata.name
-        resources:
-          limits:
-            cpu: 500m
-            memory: 500Mi
-          requests:
-            cpu: 100m
-            memory: 200Mi
-        volumeMounts:
-        - name: varlog
-          mountPath: /var/log
-        - name: varlogdest
-          mountPath: /var/lib/docker/containers
-          readOnly: true
-        - name: journallogpath
-          mountPath: "/run/log/journal"
-          readOnly: true
-        - name: fluentd-config
-          mountPath: /fluentd/etc
-        - name: secrets
-          mountPath: /fluentd/etc/splunk
-          readOnly: true
       - name: otel-collector
         command:
         - /otelcol
         - --config=/conf/relay.yaml
         - --metrics-addr=0.0.0.0:8889
         ports:
-        - name: fluentforward
-          containerPort: 8006
-          hostPort: 8006
-          protocol: TCP
         - name: jaeger-grpc
           containerPort: 14250
           hostPort: 14250
@@ -237,29 +161,6 @@ spec:
           readOnly: true
       terminationGracePeriodSeconds: 600
       volumes:
-      - name: varlog
-        hostPath:
-          path: /var/log
-      - name: varlogdest
-        hostPath:
-          path: /var/lib/docker/containers
-      - name: journallogpath
-        hostPath:
-          path: "/run/log/journal"
-      - name: secrets
-        secret:
-          secretName: splunk-otel-collector
-      - name: fluentd-config
-        emptyDir: {}
-      - name: fluentd-config-common
-        configMap:
-          name: default-splunk-otel-collector-fluentd
-      - name: fluentd-config-cri
-        configMap:
-          name: default-splunk-otel-collector-fluentd-cri
-      - name: fluentd-config-json
-        configMap:
-          name: default-splunk-otel-collector-fluentd-json
       - name: host-dev
         hostPath:
           path: /dev
diff --git a/rendered/manifests/gateway-only/configmap-gateway.yaml b/rendered/manifests/gateway-only/configmap-gateway.yaml
index 2fa9a001a5..61cab5f73f 100644
--- a/rendered/manifests/gateway-only/configmap-gateway.yaml
+++ b/rendered/manifests/gateway-only/configmap-gateway.yaml
@@ -24,9 +24,6 @@ data:
         access_token: ${SPLUNK_OBSERVABILITY_ACCESS_TOKEN}
         api_url: https://api.CHANGEME.signalfx.com
         ingest_url: https://ingest.CHANGEME.signalfx.com
-      splunk_hec/o11y:
-        endpoint: https://ingest.CHANGEME.signalfx.com/v1/log
-        token: ${SPLUNK_OBSERVABILITY_ACCESS_TOKEN}
     extensions:
       health_check: null
       http_forwarder:
@@ -147,17 +144,6 @@ data:
       - zpages
       - http_forwarder
       pipelines:
-        logs:
-          exporters:
-          - splunk_hec/o11y
-          processors:
-          - memory_limiter
-          - k8sattributes
-          - batch
-          - filter/logs
-          - resource/logs
-          receivers:
-          - otlp
         logs/signalfx-events:
           exporters:
           - signalfx
diff --git a/rendered/manifests/gateway-only/deployment-gateway.yaml b/rendered/manifests/gateway-only/deployment-gateway.yaml
index 74310925a6..36e1fdf60b 100644
--- a/rendered/manifests/gateway-only/deployment-gateway.yaml
+++ b/rendered/manifests/gateway-only/deployment-gateway.yaml
@@ -30,7 +30,7 @@ spec:
         component: otel-collector
         release: default
       annotations:
-        checksum/config: 65cf2bf24f02b4b3bd1dcadec273ff5887599965c1d21082814b074e12635258
+        checksum/config: 8e4fdf921b5de03c5ff5bebe6540c442e522f0fb26f94496030331a6965202eb
     spec:
       serviceAccountName: default-splunk-otel-collector
       nodeSelector:
diff --git a/rendered/manifests/otel-logs/configmap-agent.yaml b/rendered/manifests/otel-logs/configmap-agent.yaml
index a899bb3813..32898b76a8 100644
--- a/rendered/manifests/otel-logs/configmap-agent.yaml
+++ b/rendered/manifests/otel-logs/configmap-agent.yaml
@@ -26,12 +26,7 @@ data:
         correlation: null
         ingest_url: https://ingest.CHANGEME.signalfx.com
         sync_host_metadata: true
-      splunk_hec/o11y:
-        endpoint: https://ingest.CHANGEME.signalfx.com/v1/log
-        token: ${SPLUNK_OBSERVABILITY_ACCESS_TOKEN}
     extensions:
-      file_storage:
-        directory: /var/addon/splunk/otel_pos
       health_check: null
       k8s_observer:
         auth_type: serviceAccount
@@ -214,8 +209,6 @@ data:
           type: restructure
         poll_interval: 200ms
         start_at: beginning
-      fluentforward:
-        endpoint: 0.0.0.0:8006
       hostmetrics:
         collection_interval: 10s
         scrapers:
@@ -270,27 +263,11 @@ data:
         endpoint: 0.0.0.0:9411
     service:
       extensions:
-      - file_storage
       - health_check
       - k8s_observer
       - memory_ballast
       - zpages
       pipelines:
-        logs:
-          exporters:
-          - splunk_hec/o11y
-          processors:
-          - memory_limiter
-          - k8sattributes
-          - batch
-          - filter/logs
-          - resource
-          - resource/logs
-          - resourcedetection
-          receivers:
-          - filelog
-          - fluentforward
-          - otlp
         metrics:
           exporters:
           - signalfx
diff --git a/rendered/manifests/otel-logs/daemonset.yaml b/rendered/manifests/otel-logs/daemonset.yaml
index 8097eef7cd..c26fa1a393 100644
--- a/rendered/manifests/otel-logs/daemonset.yaml
+++ b/rendered/manifests/otel-logs/daemonset.yaml
@@ -27,7 +27,7 @@ spec:
         app: splunk-otel-collector
         release: default
       annotations:
-        checksum/config: a5f93673da6c50b10e588ab2383ea3ea78000a13390c0ee12f519e568ef40a31
+        checksum/config: 39787e204baba4b11a825099fc5fb318d0965407ec48fa2c3216b3a60611a4c8
         kubectl.kubernetes.io/default-container: otel-collector
     spec:
       hostNetwork: true
@@ -39,50 +39,6 @@ spec:
         
         - effect: NoSchedule
           key: node-role.kubernetes.io/master
-      initContainers:
-        - name: copy-old-checkpoint
-          image: quay.io/signalfx/splunk-otel-collector:0.38.1
-          imagePullPolicy: IfNotPresent
-          command: [ "sh", "-c"]
-          securityContext:
-            runAsUser: 0
-          args:
-            - cp -n /var/lib/otel_pos/* /var/addon/splunk/otel_pos/ || true
-          volumeMounts:
-            - name: checkpoint
-              mountPath: /var/addon/splunk/otel_pos
-            - name: old-checkpoint
-              mountPath: /var/lib/otel_pos
-        - name: migrate-checkpoint
-          image: quay.io/signalfx/splunk-otel-collector:0.38.1
-          imagePullPolicy: IfNotPresent
-          command: ["/migratecheckpoint"]
-          securityContext:
-            runAsUser: 0
-          env:
-          - name: CONTAINER_LOG_PATH_FLUENTD
-            value: "/var/log/splunk-fluentd-containers.log.pos"
-          - name: CONTAINER_LOG_PATH_OTEL
-            value: "/var/addon/splunk/otel_pos/receiver_filelog_"
-          - name: CUSTOM_LOG_PATH_FLUENTD
-            value: "/var/log/splunk-fluentd-*.pos"
-          - name: CUSTOM_LOG_PATH_OTEL
-            value: "/var/addon/splunk/otel_pos/receiver_filelog_"
-          - name: CUSTOM_LOG_CAPTURE_REGEX
-            value: '\/var\/log\/splunk\-fluentd\-(?P<name>[\w0-9-_]+)\.pos'
-          - name: JOURNALD_LOG_PATH_FLUENTD
-            value: "/var/log/splunkd-fluentd-journald-*.pos.json"
-          - name: JOURNALD_LOG_PATH_OTEL
-            value: "/var/addon/splunk/otel_pos/receiver_journald_"
-          - name: JOURNALD_LOG_CAPTURE_REGEX
-            value: '\/splunkd\-fluentd\-journald\-(?P<name>[\w0-9-_]+)\.pos\.json'
-          volumeMounts:
-            - name: checkpoint
-              mountPath: /var/addon/splunk/otel_pos
-            - name: varlog
-              mountPath: /var/log
-            - name: varlibdockercontainers
-              mountPath: /var/lib/docker/containers
       containers:
       - name: otel-collector
         command:
@@ -90,10 +46,6 @@ spec:
         - --config=/conf/relay.yaml
         - --metrics-addr=0.0.0.0:8889
         ports:
-        - name: fluentforward
-          containerPort: 8006
-          hostPort: 8006
-          protocol: TCP
         - name: jaeger-grpc
           containerPort: 14250
           hostPort: 14250
@@ -126,8 +78,6 @@ spec:
           protocol: TCP
         image: quay.io/signalfx/splunk-otel-collector:0.38.1
         imagePullPolicy: IfNotPresent
-        securityContext:
-          runAsUser: 0
         env:
           - name: SPLUNK_MEMORY_TOTAL_MIB
             value: "500"
@@ -209,30 +159,8 @@ spec:
         - mountPath: /hostfs/var/run/utmp
           name: host-var-run-utmp
           readOnly: true
-        - name: varlog
-          mountPath: /var/log
-          readOnly: true
-        - name: varlibdockercontainers
-          mountPath: /var/lib/docker/containers
-          readOnly: true
-        - name: checkpoint
-          mountPath: /var/addon/splunk/otel_pos
       terminationGracePeriodSeconds: 600
       volumes:
-      - name: varlog
-        hostPath:
-          path: /var/log
-      - name: varlibdockercontainers
-        hostPath:
-          path: /var/lib/docker/containers
-      - name: checkpoint
-        hostPath:
-          path: /var/addon/splunk/otel_pos
-          type: DirectoryOrCreate
-      - name: old-checkpoint
-        hostPath:
-          path: /var/lib/otel_pos
-          type: DirectoryOrCreate
       - name: host-dev
         hostPath:
           path: /dev