iOS / Swift

Real User Monitoring for iOS apps. Automatic instrumentation for sessions, views, network requests, errors, and resource metrics via OpenTelemetry.

Prerequisites

• iOS 15.1+
• Swift 5.9+
• Dependencies (resolved transitively): OpenTelemetry-Swift-Api ~> 1.10, OpenTelemetry-Swift-Sdk ~> 1.10
• A Last9 RUM client token and OTLP endpoint

Create a Client Monitoring Token

1. Open Last9 → Settings → Ingestion Tokens
2. Click Create Token → choose type Client
3. Set the allowed origin to ios://com.yourcompany.yourapp — use your app’s exact bundle ID
4. Copy the token and the OTLP endpoint URL

CDN artifacts

The major-pinned stable/v1 channel currently serves iOS RUM SDK 1.1.10. The latest versioned release is 1.1.10; staging builds use the -alpha suffix and explicit versioned URLs.

Installation

Initialization

import Last9RUM

@main
class AppDelegate: UIResponder, UIApplicationDelegate {
    func application(
        _ application: UIApplication,
        didFinishLaunchingWithOptions launchOptions:
            [UIApplication.LaunchOptionsKey: Any]?
    ) -> Bool {

        var config = L9RumConfig(
            baseUrl: "https://otlp-ext-aps1.last9.io/v1/otlp/organizations/<org>",
            clientToken: "your-client-token",
            serviceName: "my-ios-app",
            serviceVersion: "1.0.0",
            deploymentEnvironment: "production"
        )
        // Use your app's bundle ID in ios:// format — must match the origin
        // allowlist on your Last9 client token.
        config.origin = "ios://com.example.myapp"

        L9Rum.shared.initialize(config: config)
        return true
    }
}

import Last9RUM
import SwiftUI

@main
struct MyApp: App {
    init() {
        var config = L9RumConfig(
            baseUrl: "https://otlp-ext-aps1.last9.io/v1/otlp/organizations/<org>",
            clientToken: "your-client-token",
            serviceName: "my-ios-app",
            serviceVersion: "1.0.0",
            deploymentEnvironment: "production"
        )
        config.origin = "ios://com.example.myapp"
        L9Rum.shared.initialize(config: config)
    }

    var body: some Scene {
        WindowGroup { ContentView() }
    }
}

What’s captured automatically

View time-to-full-display (view.ttfd)

view.ttfd measures how long it takes for the screen to render after the last API response completes. It captures the delta between the HTTP response timestamp and the next CADisplayLink callback — giving you end-to-end visibility on data-driven screens where content appears only after a network call.

How it works: after any L9URLProtocol response callback fires, the SDK schedules a CADisplayLink on the main run loop. On the next display frame, the delta is recorded as view.ttfd on the active View span.

• Works on both SwiftUI and UIKit with no app code changes.
• Applies to the View span that was active when the HTTP call was made.
• If no View span is active when the response arrives, the measurement is skipped.

Configuration

var config = L9RumConfig(
    // --- Required ---------------------------------------------------------
    baseUrl: "https://otlp-ext-aps1.last9.io/v1/otlp/organizations/<org>",
    clientToken: "your-client-token",
    serviceName: "my-ios-app",
    serviceVersion: "1.0.0",
    deploymentEnvironment: "production"
)

// --- Optional -------------------------------------------------------------

// Origin sent as X-LAST9-ORIGIN header.
// Required for client_monitoring tokens. Use ios://com.your.bundle.id —
// must match the origin allowlist configured on your Last9 client token.
config.origin = "ios://com.example.myapp"

// Specific build identifier (maps to app.build_id)
config.appBuildId = "1.0.0-build-42"

// Optional override for the app.installation.id resource attribute.
// The Client-ID header always uses the SDK-generated per-install UUID.
config.appInstallationId = nil

// Session sampling rate: 0-100 (percentage). 100 = sample everything.
config.sampleRate = 100

// Print debug logs to console
config.debugLogs = false

// Automatically trace HTTP requests via URLProtocol
config.networkInstrumentation = true

// Automatically capture unhandled exceptions
config.errorInstrumentation = true

// Max spans per export batch
config.maxExportBatchSize = 100

// Export timeout in milliseconds
config.exportTimeoutMs = 30_000

// Periodically sample memory and CPU
config.resourceMonitoringEnabled = true

// Interval between resource samples (ms)
config.resourceSamplingIntervalMs = 30_000

// Setting this to true will hide network requests (and their
// DNS/TCP/TLS/TTFB phase child spans) from the Last9 dashboard's
// Sessions → APIs tab. Each request would get its own traceId
// instead of sharing the current view's traceId, and that tab
// only fetches spans that share the View's traceId. Keep this
// false unless you specifically need per-request trace isolation.
config.isolateTracePerRequest = false

// Custom resource attributes added to every span
config.resourceAttributes = [
    "app.platform": "ios",
]

// W3C Baggage propagation on outgoing requests
config.baggage = L9BaggageConfig()
config.baggage.enabled = false
config.baggage.allowedKeys = ["session.id", "user.id"]
config.baggage.maxTotalBytes = 8192
config.baggage.trackedUrlPatterns = []
config.baggage.warnAtPercentage = 80

// Substring patterns — matching URLs are skipped before span creation.
// Prefer ignorePatterns below for regex support and hostname/pathname targeting.
config.excludedUrlPatterns = [".jpg", ".png", ".pdf", "cdn.example.com"]

// Fine-grained network ignore rules. Matched URLs are dropped before span
// creation. .contains uses substring matching; .regex uses regex search semantics.
// Takes precedence over excludedUrlPatterns.
config.ignorePatterns = L9NetworkIgnorePatterns(
    fullUrl: [
        .contains("https://cdn.example.com"),
        .regex("^https://.*\\.example\\.com", options: [.caseInsensitive]),
    ],
    pathname: [
        .contains(".pdf"),
        .contains(".jpg"),
        .regex("^/internal/metrics"),
    ],
    hostname: [
        .contains("cdn.example.com"),
        .regex("(^|\\.)assets\\.example\\.com$", options: [.caseInsensitive]),
    ]
)

// Trace header propagation for ignored URLs.
// .preserve (default): keep traceparent on ignored requests.
// .strip: remove traceparent from ignored requests (e.g. third-party CDNs).
config.propagationMode = .preserve

Per-install Client-ID

Starting with 0.8.0, the Client-ID ingestion header is an SDK-generated per-install UUID, not serviceName. The UUID is generated on first launch and stored in UserDefaults. This keeps each app install in its own ingestion rate-limit bucket.

appInstallationId only overrides the app.installation.id resource attribute. It does not override the Client-ID header, so the header and the resource attribute can differ when you set appInstallationId manually.

Network phase child spans

When URLSession instrumentation is enabled, each parent HTTP span includes child spans for individual network phases:

No SDK config change is required. The SDK reads URLSessionTaskMetrics.transactionMetrics from the URLSession task delegate and emits phase child spans under the parent HTTP span automatically.

Reused connections skip DNS, TCP, and TLS work. For those requests the SDK emits zero-duration child spans with l9rum.network.phase.skipped=true so the waterfall shape stays consistent.

GraphQL network observability

When URLSession instrumentation is enabled, GraphQL requests are enriched automatically — L9URLProtocol parses the operation name and type from the request body. No extra configuration is required.

GraphQL servers often return errors with an HTTP 200 status and an errors[] array in the response body. The SDK detects these and marks the span as an error:

For cross-cutting customization of any network span (GraphQL or REST), set networkSpanHook on L9RumConfig to inspect and enrich spans before they are exported.

API reference

Identify a user

L9Rum.shared.identify(userId: "user-123", attributes: [
    "email": "user@example.com",
    "plan": "premium",
])

Clear user on sign-out

L9Rum.shared.clearUser()

Capture errors

do {
    try riskyOperation()
} catch {
    L9Rum.shared.captureError(error, context: ["screen": "checkout"])
}

Track views (SwiftUI / Custom Navigation)

UIKit views are tracked automatically. For SwiftUI or custom navigation:

L9Rum.shared.startView("ProductDetailsScreen")
L9Rum.shared.setViewName("Product #42")

Custom events

L9Rum.shared.addEvent("purchase_completed", attributes: [
    "product_id": "12345",
    "amount": 29.99,
])

Each call dual-emits:

• A span event on the active view span, so the event shows up on the view’s timeline in RUM. The span event is attached to the active view span itself, so custom events surface even when the active view is an auto-tracked child view controller (for example, React Native’s RNSScreen) rather than the window’s root view controller.
• An OTLP log record carrying event.type=custom, event.name, your attributes, and session.id/user attributes. When a view is active the log is correlated to it via trace.id/span.id/view.id, so you can pivot between the log and the RUM session.

Log emission is unconditional. If no view is active when you call addEvent, the span event is dropped (no view is fabricated to attach it to) but the log is still sent as an orphan, omitting trace.id/span.id/view.id. A custom event never silently vanishes because it fired outside a view.

Global span attributes

// Inject attributes into every span
L9Rum.shared.spanAttributes([
    "experiment": "checkout_v2",
    "feature_flag": "new_cart",
])

// Clear
L9Rum.shared.spanAttributes(nil)

Session ID

let sessionId: String? = L9Rum.shared.getSessionId()

From 1.1.9, session start is synchronous: initialize(config:) does not return until the session exists, so getSessionId() returns a usable session id on the next line. It returns nil (never an empty string) when there is no active session, and addSessionIdObserver’s initial callback reports the same value — both read through one accessor, so an internal placeholder id is never surfaced.

Flush pending data

L9Rum.shared.flush()

Embedded per-flow lifecycle

For embedded integrations scoped to a single flow (for example, RUM that should only run while a specific feature or mini-app is open), use shutdown() and isActive() to control the SDK lifecycle:

// Scope RUM to a single flow, then tear it down so the next flow starts clean.
L9Rum.shared.initialize(config: config)

// Attributes known only after the flow starts apply to every later span,
// and are cleared on shutdown().
L9Rum.shared.spanAttributes(["tenant.id": "acme", "feature.flag": "beta"])

if L9Rum.shared.isActive() {
    L9Rum.shared.shutdown() // flush + full teardown; a later initialize() re-arms RUM
}

• shutdown() flushes pending spans and fully tears RUM down. It ends the active view and emits the session-end span before flushing, so short per-flow sessions export cleanly.
• isActive() reports whether RUM is currently running.
• After shutdown(), calling initialize() again starts a fresh flow (supported re-init cycle). Global hooks (method swizzling, NotificationCenter observers, the uncaught-exception handler) are installed once and are not duplicated or reversed across initialize/shutdown cycles.

Network ignore patterns

Skip noisy URLs before span creation by matching against full URL, pathname, or hostname. .contains uses substring matching; .regex uses regex search semantics.

config.ignorePatterns = L9NetworkIgnorePatterns(
    fullUrl: [
        .contains("https://cdn.example.com"),
        .regex("^https://.*\\.example\\.com", options: [.caseInsensitive]),
    ],
    pathname: [
        .contains(".pdf"),
        .contains(".jpg"),
        .regex("^/internal/metrics"),
    ],
    hostname: [
        .contains("cdn.example.com"),
        .regex("(^|\\.)assets\\.example\\.com$", options: [.caseInsensitive]),
    ]
)
// PRESERVE (default): keep traceparent on ignored requests.
// STRIP: remove traceparent from ignored requests.
config.propagationMode = .preserve

WebView correlation

Inject the active native session and view IDs into a WKWebView so Browser RUM spans share the same session.id:

// After creating the WKWebView — call once per WKWebView instance.
L9Rum.shared.instrument(webView: webView)

• Session and view IDs are re-injected on every navigation commit and view change.
• Cross-origin iframes do not receive the session ID.
• Calling instrument(webView:) before initialize(config:) emits a warning and is a no-op.

Requires the Browser RUM JS SDK on the page. The JS SDK adopts the native session ID and fires l9rum:session_rollover when the session rotates, rotating the view span accordingly.

See the WebView Session Correlation guide for React Native/Flutter setup, the static-script path, auto-load Browser RUM, and verification steps.

Security

Client monitoring tokens are write-only and origin-scoped to your app’s bundle ID. Safe to ship in the app binary.

Next steps

Once data is flowing, explore it in Discover > Applications — performance, errors, and sessions.

Troubleshooting

Please get in touch with us on Discord or Email if you have any questions.