diff --git a/config.md b/config.md
index f37155c795..24aa66b463 100644
--- a/config.md
+++ b/config.md
@@ -1,7 +1,7 @@
 # Honeycomb Refinery Configuration Documentation
 
 This is the documentation for the configuration file for Honeycomb's Refinery.
-It was automatically generated on 2024-02-23 at 22:23:28 UTC.
+It was automatically generated on 2024-03-11 at 06:48:05 UTC.
 
 ## The Config file
 
@@ -27,6 +27,7 @@ The remainder of this document describes the sections within the file and the fi
 ## Table of Contents
 - [General Configuration](#general-configuration)
 - [Network Configuration](#network-configuration)
+- [Kafka Receiver Configuration](#kafka-receiver-configuration)
 - [Access Key Configuration](#access-key-configuration)
 - [Refinery Telemetry](#refinery-telemetry)
 - [Traces](#traces)
@@ -148,6 +149,42 @@ This setting is the destination to which Refinery sends all events that it decid
 - Environment variable: `REFINERY_HONEYCOMB_API`
 - Command line switch: `--honeycomb-api`
 
+## Kafka Receiver Configuration
+
+`KafkaReceiver` contains configuration options for the Kafka receiver.
+### `BootstrapAddr`
+
+BootstrapAddr is the IP and port on which to connect to a Kafka bootstrap server.
+
+This is how we determine the Kafka broker we are using.
+
+- Not eligible for live reload.
+- Type: `hostport`
+- Environment variable: `REFINERY_KAFKA_BOOTSTRAP_ADDRESS`
+- Command line switch: `--kafka-bootstrap-address`
+
+### `Topic`
+
+Topic is the Kafka topic to consume.
+
+This is how we determine the Kafka topic we are using.
+
+- Not eligible for live reload.
+- Type: `string`
+- Environment variable: `REFINERY_KAFKA_TOPIC`
+- Command line switch: `--kafka-topic`
+
+### `ConsumerGroupName`
+
+ConsumerGroupName is the name of the Kafka consumer group to join.
+
+This is how we determine the Kafka consumer group we are using.
+
+- Not eligible for live reload.
+- Type: `string`
+- Environment variable: `REFINERY_KAFKA_CONSUMER_GROUP_NAME`
+- Command line switch: `--kafka-consumer-group-name`
+
 ## Access Key Configuration
 
 `AccessKeys` contains access keys -- API keys that the proxy will treat specially, and other flags that control how the proxy handles API keys.
diff --git a/config/cmdenv.go b/config/cmdenv.go
index df45f32ec8..8a41fe44df 100644
--- a/config/cmdenv.go
+++ b/config/cmdenv.go
@@ -26,29 +26,32 @@ import (
 // that this system uses reflection to establish the relationship between the
 // config struct and the command line options.
 type CmdEnv struct {
-	ConfigLocation        string     `short:"c" long:"config" env:"REFINERY_CONFIG" default:"/etc/refinery/refinery.yaml" description:"config file or URL to load"`
-	RulesLocation         string     `short:"r" long:"rules_config" env:"REFINERY_RULES_CONFIG" default:"/etc/refinery/rules.yaml" description:"config file or URL to load"`
-	HTTPListenAddr        string     `long:"http-listen-address" env:"REFINERY_HTTP_LISTEN_ADDRESS" description:"HTTP listen address for incoming event traffic"`
-	PeerListenAddr        string     `long:"peer-listen-address" env:"REFINERY_PEER_LISTEN_ADDRESS" description:"Peer listen address for communication between Refinery instances"`
-	GRPCListenAddr        string     `long:"grpc-listen-address" env:"REFINERY_GRPC_LISTEN_ADDRESS" description:"gRPC listen address for OTLP traffic"`
-	RedisHost             string     `long:"redis-host" env:"REFINERY_REDIS_HOST" description:"Redis host address"`
-	RedisUsername         string     `long:"redis-username" env:"REFINERY_REDIS_USERNAME" description:"Redis username"`
-	RedisPassword         string     `long:"redis-password" env:"REFINERY_REDIS_PASSWORD" description:"Redis password"`
-	RedisAuthCode         string     `long:"redis-auth-code" env:"REFINERY_REDIS_AUTH_CODE" description:"Redis AUTH code"`
-	HoneycombAPI          string     `long:"honeycomb-api" env:"REFINERY_HONEYCOMB_API" description:"Honeycomb API URL"`
-	HoneycombAPIKey       string     `long:"honeycomb-api-key" env:"REFINERY_HONEYCOMB_API_KEY" description:"Honeycomb API key (for logger and metrics)"`
-	HoneycombLoggerAPIKey string     `long:"logger-api-key" env:"REFINERY_HONEYCOMB_LOGGER_API_KEY" description:"Honeycomb logger API key"`
-	LegacyMetricsAPIKey   string     `long:"legacy-metrics-api-key" env:"REFINERY_HONEYCOMB_METRICS_API_KEY" description:"API key for legacy Honeycomb metrics"`
-	OTelMetricsAPIKey     string     `long:"otel-metrics-api-key" env:"REFINERY_OTEL_METRICS_API_KEY" description:"API key for OTel metrics if being sent to Honeycomb"`
-	QueryAuthToken        string     `long:"query-auth-token" env:"REFINERY_QUERY_AUTH_TOKEN" description:"Token for debug/management queries"`
-	AvailableMemory       MemorySize `long:"available-memory" env:"REFINERY_AVAILABLE_MEMORY" description:"The maximum memory available for Refinery to use (ex: 4GiB)."`
-	Debug                 bool       `short:"d" long:"debug" description:"Runs debug service (on the first open port between localhost:6060 and :6069 by default)"`
-	Version               bool       `short:"v" long:"version" description:"Print version number and exit"`
-	InterfaceNames        bool       `long:"interface-names" description:"Print system's network interface names and exit."`
-	Validate              bool       `short:"V" long:"validate" description:"Validate the configuration files, writing results to stdout, and exit with 0 if valid, 1 if invalid."`
-	NoValidate            bool       `long:"no-validate" description:"Do not attempt to validate the configuration files. Makes --validate meaningless."`
-	WriteConfig           string     `long:"write-config" description:"After applying defaults, environment variables, and command line values, write the loaded configuration to the specified file as YAML and exit."`
-	WriteRules            string     `long:"write-rules" description:"After applying defaults, write the loaded rules to the specified file as YAML and exit."`
+	ConfigLocation         string     `short:"c" long:"config" env:"REFINERY_CONFIG" default:"/etc/refinery/refinery.yaml" description:"config file or URL to load"`
+	RulesLocation          string     `short:"r" long:"rules_config" env:"REFINERY_RULES_CONFIG" default:"/etc/refinery/rules.yaml" description:"config file or URL to load"`
+	HTTPListenAddr         string     `long:"http-listen-address" env:"REFINERY_HTTP_LISTEN_ADDRESS" description:"HTTP listen address for incoming event traffic"`
+	PeerListenAddr         string     `long:"peer-listen-address" env:"REFINERY_PEER_LISTEN_ADDRESS" description:"Peer listen address for communication between Refinery instances"`
+	GRPCListenAddr         string     `long:"grpc-listen-address" env:"REFINERY_GRPC_LISTEN_ADDRESS" description:"gRPC listen address for OTLP traffic"`
+	KafkaBootstrapAddr     string     `long:"kafka-bootstrap-address" env:"REFINERY_KAFKA_BOOTSTRAP_ADDRESS" description:"Kafka bootstrap address"`
+	KafkaTopic             string     `long:"kafka-topic" env:"REFINERY_KAFKA_TOPIC" description:"Kafka topic to consume"`
+	KafkaConsumerGroupName string     `long:"kafka-consumer-group-name" env:"REFINERY_KAFKA_CONSUMER_GROUP_NAME" description:"Kafka consumer group to join"`
+	RedisHost              string     `long:"redis-host" env:"REFINERY_REDIS_HOST" description:"Redis host address"`
+	RedisUsername          string     `long:"redis-username" env:"REFINERY_REDIS_USERNAME" description:"Redis username"`
+	RedisPassword          string     `long:"redis-password" env:"REFINERY_REDIS_PASSWORD" description:"Redis password"`
+	RedisAuthCode          string     `long:"redis-auth-code" env:"REFINERY_REDIS_AUTH_CODE" description:"Redis AUTH code"`
+	HoneycombAPI           string     `long:"honeycomb-api" env:"REFINERY_HONEYCOMB_API" description:"Honeycomb API URL"`
+	HoneycombAPIKey        string     `long:"honeycomb-api-key" env:"REFINERY_HONEYCOMB_API_KEY" description:"Honeycomb API key (for logger and metrics)"`
+	HoneycombLoggerAPIKey  string     `long:"logger-api-key" env:"REFINERY_HONEYCOMB_LOGGER_API_KEY" description:"Honeycomb logger API key"`
+	LegacyMetricsAPIKey    string     `long:"legacy-metrics-api-key" env:"REFINERY_HONEYCOMB_METRICS_API_KEY" description:"API key for legacy Honeycomb metrics"`
+	OTelMetricsAPIKey      string     `long:"otel-metrics-api-key" env:"REFINERY_OTEL_METRICS_API_KEY" description:"API key for OTel metrics if being sent to Honeycomb"`
+	QueryAuthToken         string     `long:"query-auth-token" env:"REFINERY_QUERY_AUTH_TOKEN" description:"Token for debug/management queries"`
+	AvailableMemory        MemorySize `long:"available-memory" env:"REFINERY_AVAILABLE_MEMORY" description:"The maximum memory available for Refinery to use (ex: 4GiB)."`
+	Debug                  bool       `short:"d" long:"debug" description:"Runs debug service (on the first open port between localhost:6060 and :6069 by default)"`
+	Version                bool       `short:"v" long:"version" description:"Print version number and exit"`
+	InterfaceNames         bool       `long:"interface-names" description:"Print system's network interface names and exit."`
+	Validate               bool       `short:"V" long:"validate" description:"Validate the configuration files, writing results to stdout, and exit with 0 if valid, 1 if invalid."`
+	NoValidate             bool       `long:"no-validate" description:"Do not attempt to validate the configuration files. Makes --validate meaningless."`
+	WriteConfig            string     `long:"write-config" description:"After applying defaults, environment variables, and command line values, write the loaded configuration to the specified file as YAML and exit."`
+	WriteRules             string     `long:"write-rules" description:"After applying defaults, write the loaded rules to the specified file as YAML and exit."`
 }
 
 func NewCmdEnvOptions(args []string) (*CmdEnv, error) {
diff --git a/config/config.go b/config/config.go
index 8419256932..a72dc2172c 100644
--- a/config/config.go
+++ b/config/config.go
@@ -34,6 +34,16 @@ type Config interface {
 	// GetHTTPIdleTimeout returns the idle timeout for refinery's HTTP server
 	GetHTTPIdleTimeout() time.Duration
 
+	// GetKafkaBootstrapAddr returns the address and port on which to connect
+	// to become a Kafka consumer.
+	GetKafkaBootstrapAddr() (string, error)
+
+	// GetKafkaTopic returns the topic to consume.
+	GetKafkaTopic() (string, error)
+
+	// GetKafkaConsumerGroupsName returns the Kafka consumer group to join.
+	GetKafkaConsumerGroupName() (string, error)
+
 	// GetCompressPeerCommunication will be true if refinery should compress
 	// data before forwarding it to a peer.
 	GetCompressPeerCommunication() bool
diff --git a/config/file_config.go b/config/file_config.go
index b46b7d7a1b..32bb4c9f0c 100644
--- a/config/file_config.go
+++ b/config/file_config.go
@@ -49,6 +49,7 @@ type fileConfig struct {
 type configContents struct {
 	General              GeneralConfig             `yaml:"General"`
 	Network              NetworkConfig             `yaml:"Network"`
+	KafkaReceiver        KafkaReceiverConfig       `yaml:"KafkaReceiver"`
 	AccessKeys           AccessKeyConfig           `yaml:"AccessKeys"`
 	Telemetry            RefineryTelemetryConfig   `yaml:"RefineryTelemetry"`
 	Traces               TracesConfig              `yaml:"Traces"`
@@ -84,6 +85,12 @@ type NetworkConfig struct {
 	HTTPIdleTimeout Duration `yaml:"HTTPIdleTimeout"`
 }
 
+type KafkaReceiverConfig struct {
+	BootstrapAddr     string `yaml:"BootstrapAddr" cmdenv:"KafkaBootstrapAddr"`
+	Topic             string `yaml:"Topic" cmdenv:"KafkaTopic"`
+	ConsumerGroupName string `yaml:"ConsumerGroupName" cmdenv:"KafkaConsumerGroupName"`
+}
+
 type AccessKeyConfig struct {
 	ReceiveKeys          []string `yaml:"ReceiveKeys" default:"[]"`
 	AcceptOnlyListedKeys bool     `yaml:"AcceptOnlyListedKeys"`
@@ -505,6 +512,32 @@ func (f *fileConfig) GetHTTPIdleTimeout() time.Duration {
 	return time.Duration(f.mainConfig.Network.HTTPIdleTimeout)
 }
 
+func (f *fileConfig) GetKafkaBootstrapAddr() (string, error) {
+	f.mux.RLock()
+	defer f.mux.RUnlock()
+
+	addr := f.mainConfig.KafkaReceiver.BootstrapAddr
+	_, _, err := net.SplitHostPort(addr)
+	if addr != "" && err != nil {
+		return "", err
+	}
+	return f.mainConfig.KafkaReceiver.BootstrapAddr, nil
+}
+
+func (f *fileConfig) GetKafkaTopic() (string, error) {
+	f.mux.RLock()
+	defer f.mux.RUnlock()
+
+	return f.mainConfig.KafkaReceiver.Topic, nil
+}
+
+func (f *fileConfig) GetKafkaConsumerGroupName() (string, error) {
+	f.mux.RLock()
+	defer f.mux.RUnlock()
+
+	return f.mainConfig.KafkaReceiver.ConsumerGroupName, nil
+}
+
 func (f *fileConfig) GetCompressPeerCommunication() bool {
 	f.mux.RLock()
 	defer f.mux.RUnlock()
diff --git a/config/metadata/configMeta.yaml b/config/metadata/configMeta.yaml
index 5d624641e8..017879aec4 100644
--- a/config/metadata/configMeta.yaml
+++ b/config/metadata/configMeta.yaml
@@ -140,6 +140,43 @@ groups:
           This setting is the destination to which Refinery sends all events
           that it decides to keep.
 
+  - name: KafkaReceiver
+    title: "Kafka Receiver Configuration"
+    description: contains configuration options for the Kafka receiver.
+    fields:
+      - name: BootstrapAddr
+        type: hostport
+        valuetype: nondefault
+        reload: false
+        default: ""
+        envvar: REFINERY_KAFKA_BOOTSTRAP_ADDRESS
+        commandLine: kafka-bootstrap-address
+        summary: is the IP and port on which to connect to a Kafka bootstrap server.
+        description: >
+          This is how we determine the Kafka broker we are using.
+
+      - name: Topic
+        type: string
+        valuetype: nondefault
+        reload: false
+        default: ""
+        envvar: REFINERY_KAFKA_TOPIC
+        commandLine: kafka-topic
+        summary: is the Kafka topic to consume.
+        description: >
+          This is how we determine the Kafka topic we are using.
+
+      - name: ConsumerGroupName
+        type: string
+        valuetype: nondefault
+        reload: false
+        default: ""
+        envvar: REFINERY_KAFKA_CONSUMER_GROUP_NAME
+        commandLine: kafka-consumer-group-name
+        summary: is the name of the Kafka consumer group to join.
+        description: >
+          This is how we determine the Kafka consumer group we are using.
+
   - name: AccessKeys
     title: "Access Key Configuration"
     description: >
diff --git a/config/mock.go b/config/mock.go
index 9ea645fc2a..e3c9e0182f 100644
--- a/config/mock.go
+++ b/config/mock.go
@@ -91,6 +91,10 @@ type MockConfig struct {
 	ParentIdFieldNames               []string
 	CfgMetadata                      []ConfigMetadata
 
+	KafkaBootstrapAddr     string
+	KafkaTopic             string
+	KafkaConsumerGroupName string
+
 	Mux sync.RWMutex
 }
 
@@ -163,6 +167,27 @@ func (m *MockConfig) GetHTTPIdleTimeout() time.Duration {
 	return m.GetHTTPIdleTimeoutVal
 }
 
+func (m *MockConfig) GetKafkaBootstrapAddr() (string, error) {
+	m.Mux.RLock()
+	defer m.Mux.RUnlock()
+
+	return m.KafkaBootstrapAddr, nil
+}
+
+func (m *MockConfig) GetKafkaTopic() (string, error) {
+	m.Mux.RLock()
+	defer m.Mux.RUnlock()
+
+	return m.KafkaTopic, nil
+}
+
+func (m *MockConfig) GetKafkaConsumerGroupName() (string, error) {
+	m.Mux.RLock()
+	defer m.Mux.RUnlock()
+
+	return m.KafkaConsumerGroupName, nil
+}
+
 func (m *MockConfig) GetCompressPeerCommunication() bool {
 	m.Mux.RLock()
 	defer m.Mux.RUnlock()
diff --git a/config_complete.yaml b/config_complete.yaml
index 6235b38fff..e75eda9979 100644
--- a/config_complete.yaml
+++ b/config_complete.yaml
@@ -2,7 +2,7 @@
 ## Honeycomb Refinery Configuration ##
 ######################################
 #
-# created on 2024-02-23 at 22:23:27 UTC from ../../config.yaml using a template generated on 2024-02-23 at 22:23:25 UTC
+# created on 2024-03-11 at 06:48:04 UTC from ../../config.yaml using a template generated on 2024-03-11 at 06:48:03 UTC
 
 # This file contains a configuration for the Honeycomb Refinery. It is in YAML
 # format, organized into named groups, each of which contains a set of
@@ -125,6 +125,35 @@ Network:
     ## Eligible for live reload.
     # HoneycombAPI: "https://api.honeycomb.io"
 
+##################################
+## Kafka Receiver Configuration ##
+##################################
+KafkaReceiver:
+  ## KafkaReceiver contains configuration options for the Kafka receiver.
+  ####
+    ## BootstrapAddr is the IP and port on which to connect to a Kafka
+    ## bootstrap server.
+    ##
+    ## This is how we determine the Kafka broker we are using.
+    ##
+    ## Should be an ip:port like "".
+    ## Not eligible for live reload.
+    # BootstrapAddr: ""
+
+    ## Topic is the Kafka topic to consume.
+    ##
+    ## This is how we determine the Kafka topic we are using.
+    ##
+    ## Not eligible for live reload.
+    # Topic: ""
+
+    ## ConsumerGroupName is the name of the Kafka consumer group to join.
+    ##
+    ## This is how we determine the Kafka consumer group we are using.
+    ##
+    ## Not eligible for live reload.
+    # ConsumerGroupName: ""
+
 ##############################
 ## Access Key Configuration ##
 ##############################
diff --git a/refinery_config.md b/refinery_config.md
index 05110ca3fd..976f003a50 100644
--- a/refinery_config.md
+++ b/refinery_config.md
@@ -125,6 +125,43 @@ This setting is the destination to which Refinery sends all events that it decid
 - Environment variable: `REFINERY_HONEYCOMB_API`
 - Command line switch: `--honeycomb-api`
 
+## Kafka Receiver Configuration
+
+`KafkaReceiver` contains configuration options for the Kafka receiver.
+
+### `BootstrapAddr`
+
+`BootstrapAddr` is the IP and port on which to connect to a Kafka bootstrap server.
+
+This is how we determine the Kafka broker we are using.
+
+- Not eligible for live reload.
+- Type: `hostport`
+- Environment variable: `REFINERY_KAFKA_BOOTSTRAP_ADDRESS`
+- Command line switch: `--kafka-bootstrap-address`
+
+### `Topic`
+
+`Topic` is the Kafka topic to consume.
+
+This is how we determine the Kafka topic we are using.
+
+- Not eligible for live reload.
+- Type: `string`
+- Environment variable: `REFINERY_KAFKA_TOPIC`
+- Command line switch: `--kafka-topic`
+
+### `ConsumerGroupName`
+
+`ConsumerGroupName` is the name of the Kafka consumer group to join.
+
+This is how we determine the Kafka consumer group we are using.
+
+- Not eligible for live reload.
+- Type: `string`
+- Environment variable: `REFINERY_KAFKA_CONSUMER_GROUP_NAME`
+- Command line switch: `--kafka-consumer-group-name`
+
 ## Access Key Configuration
 
 `AccessKeys` contains access keys -- API keys that the proxy will treat specially, and other flags that control how the proxy handles API keys.
diff --git a/rules.md b/rules.md
index c892c19809..bc2fcf5b87 100644
--- a/rules.md
+++ b/rules.md
@@ -1,7 +1,7 @@
 # Honeycomb Refinery Rules Documentation
 
 This is the documentation for the rules configuration for Honeycomb's Refinery.
-It was automatically generated on 2024-02-23 at 22:23:29 UTC.
+It was automatically generated on 2024-03-11 at 06:48:05 UTC.
 
 ## The Rules file
 
diff --git a/tools/convert/configDataNames.txt b/tools/convert/configDataNames.txt
index 7da8f48c6a..3d2ec7892d 100644
--- a/tools/convert/configDataNames.txt
+++ b/tools/convert/configDataNames.txt
@@ -1,5 +1,5 @@
 # Names of groups and fields in the new config file format.
-# Automatically generated on 2024-02-23 at 22:23:26 UTC.
+# Automatically generated on 2024-03-11 at 06:48:03 UTC.
 
 General:
   - ConfigurationVersion
@@ -21,6 +21,14 @@ Network:
   - HoneycombAPI
 
 
+KafkaReceiver:
+  - BootstrapAddr
+
+  - Topic
+
+  - ConsumerGroupName
+
+
 AccessKeys:
   - ReceiveKeys (originally APIKeys)
 
diff --git a/tools/convert/minimal_config.yaml b/tools/convert/minimal_config.yaml
index 233b1abbcf..abb0e0cddc 100644
--- a/tools/convert/minimal_config.yaml
+++ b/tools/convert/minimal_config.yaml
@@ -1,5 +1,5 @@
 # sample uncommented config file containing all possible fields
-# automatically generated on 2024-02-23 at 22:23:27 UTC
+# automatically generated on 2024-03-11 at 06:48:04 UTC
 General:
   ConfigurationVersion: 2
   MinRefineryVersion: "v2.0"
@@ -10,6 +10,10 @@ Network:
   PeerListenAddr: "0.0.0.0:8081"
   HTTPIdleTimeout: 0s
   HoneycombAPI: "https://api.honeycomb.io"
+KafkaReceiver:
+  BootstrapAddr: ""
+  Topic: ""
+  ConsumerGroupName: ""
 AccessKeys:
   ReceiveKeys: 
     - "your-key-goes-here"
diff --git a/tools/convert/templates/configV2.tmpl b/tools/convert/templates/configV2.tmpl
index 1568f49c31..ba41eae0b1 100644
--- a/tools/convert/templates/configV2.tmpl
+++ b/tools/convert/templates/configV2.tmpl
@@ -2,7 +2,7 @@
 ## Honeycomb Refinery Configuration ##
 ######################################
 #
-# created {{ now }} from {{ .Input }} using a template generated on 2024-02-23 at 22:23:25 UTC
+# created {{ now }} from {{ .Input }} using a template generated on 2024-03-11 at 06:48:03 UTC
 
 # This file contains a configuration for the Honeycomb Refinery. It is in YAML
 # format, organized into named groups, each of which contains a set of
@@ -125,6 +125,35 @@ Network:
     ## Eligible for live reload.
     {{ nonDefaultOnly .Data "HoneycombAPI" "HoneycombAPI" "https://api.honeycomb.io" }}
 
+##################################
+## Kafka Receiver Configuration ##
+##################################
+KafkaReceiver:
+  ## KafkaReceiver contains configuration options for the Kafka receiver.
+  ####
+    ## BootstrapAddr is the IP and port on which to connect to a Kafka
+    ## bootstrap server.
+    ##
+    ## This is how we determine the Kafka broker we are using.
+    ##
+    ## Should be an ip:port like "".
+    ## Not eligible for live reload.
+    {{ nonDefaultOnly .Data "BootstrapAddr" "BootstrapAddr" "" }}
+
+    ## Topic is the Kafka topic to consume.
+    ##
+    ## This is how we determine the Kafka topic we are using.
+    ##
+    ## Not eligible for live reload.
+    {{ nonDefaultOnly .Data "Topic" "Topic" "" }}
+
+    ## ConsumerGroupName is the name of the Kafka consumer group to join.
+    ##
+    ## This is how we determine the Kafka consumer group we are using.
+    ##
+    ## Not eligible for live reload.
+    {{ nonDefaultOnly .Data "ConsumerGroupName" "ConsumerGroupName" "" }}
+
 ##############################
 ## Access Key Configuration ##
 ##############################