#observability #data-pipeline #logging #documentation #datadog #vector-space #end-to-end #splunk #data-enrichment

bin+lib timberio/vector

A lightweight and ultra-fast tool for building observability pipelines

30 releases (18 breaking)

Uses new Rust 2024

0.51.1 Nov 13, 2025
0.50.0 Sep 23, 2025
0.48.0 Jun 30, 2025
0.45.0 Feb 24, 2025
0.34.1 Nov 16, 2023

#1695 in Database interfaces

20,679 stars & 150 watchers

MPL-2.0 license

19MB
401K SLoC

Rust 268K SLoC // 0.0% comments CUE 124K SLoC // 0.0% comments JavaScript 2.5K SLoC // 0.0% comments Shell 2.5K SLoC // 0.2% comments Ruby 2K SLoC // 0.2% comments TSX 493 SLoC // 0.1% comments GraphQL 306 SLoC TypeScript 270 SLoC // 0.0% comments Templ 158 SLoC RPM Specfile 78 SLoC // 0.0% comments AWK 59 SLoC // 0.4% comments Ruby HTML 21 SLoC PowerShell 16 SLoC // 0.4% comments Batch 10 SLoC

Nightly E2E Test Suite Component Features

Vector

Quickstart  •   Docs  •   Guides  •   Integrations  •   Chat  •   Download  •   Rust Crate Docs

What is Vector?

Vector is a high-performance, end-to-end (agent & aggregator) observability data pipeline that puts you in control of your observability data. Collect, transform, and route all your logs and metrics to any vendors you want today and any other vendors you may want tomorrow. Vector enables dramatic cost reduction, novel data enrichment, and data security where you need it, not where it is most convenient for your vendors. Additionally, it is open source and up to 10x faster than every alternative in the space.

To get started, follow our quickstart guide or install Vector.

Vector is maintained by Datadog's Community Open Source Engineering team.

Principles

  • Reliable - Built in Rust, Vector's primary design goal is reliability.
  • End-to-end - Deploys as an agent or aggregator. Vector is a complete platform.
  • Unified - Logs, metrics (beta), and traces (coming soon). One tool for all of your data.

Use cases

  • Reduce total observability costs.
  • Transition vendors without disrupting workflows.
  • Enhance data quality and improve insights.
  • Consolidate agents and eliminate agent fatigue.
  • Improve overall observability performance and reliability.

Community

  • Vector is relied on by startups and enterprises like Atlassian, T-Mobile, Comcast, Zendesk, Discord, Fastly, CVS, Trivago, Tuple, Douban, Visa, Mambu, Blockfi, Claranet, Instacart, Forcepoint, and many more.
  • Vector is downloaded over 100,000 times per day.
  • Vector's largest user processes over 500TB daily.
  • Vector has over 500 contributors and growing.

Documentation

All user documentation is available at vector.dev/docs.

Other Resources:

Comparisons

Performance

The following performance tests demonstrate baseline performance between common protocols with the exception of the Regex Parsing test.

Test Vector Filebeat FluentBit FluentD Logstash SplunkUF SplunkHF
TCP to Blackhole 86mib/s n/a 64.4mib/s 27.7mib/s 40.6mib/s n/a n/a
File to TCP 76.7mib/s 7.8mib/s 35mib/s 26.1mib/s 3.1mib/s 40.1mib/s 39mib/s
Regex Parsing 13.2mib/s n/a 20.5mib/s 2.6mib/s 4.6mib/s n/a 7.8mib/s
TCP to HTTP 26.7mib/s n/a 19.6mib/s <1mib/s 2.7mib/s n/a n/a
TCP to TCP 69.9mib/s 5mib/s 67.1mib/s 3.9mib/s 10mib/s 70.4mib/s 7.6mib/s

To learn more about our performance tests, please see the Vector test harness.

Correctness

The following correctness tests are not exhaustive, but they demonstrate fundamental differences in quality and attention to detail:

Test Vector Filebeat FluentBit FluentD Logstash Splunk UF Splunk HF
Disk Buffer Persistence
File Rotate (create)
File Rotate (copytruncate)
File Truncation
Process (SIGHUP)
JSON (wrapped)

To learn more about our correctness tests, please see the Vector test harness.

Features

Vector is an end-to-end, unified, open data platform.

Vector Beats Fluentbit Fluentd Logstash Splunk UF Splunk HF Telegraf
End-to-end
Agent
Aggregator
Unified
Logs
Metrics
Traces 🚧
Open
Open-source
Vendor-neutral
Reliability
Memory-safe
Delivery guarantees
Multi-core

⚠ = Not interoperable, metrics are represented as structured logs


Developed with ❤️ by Datadog - Security Policy - Privacy Policy

Dependencies

~88–150MB
~2.5M SLoC