The Vector team is pleased to announce version 0.25.0!
Be sure to check out the upgrade guide for breaking changes in this release.
In addition to the new features, enhancements, and fixes listed below, this release adds:
amqpsource and sink that supports AMQP 0.9.1 (used by RabbitMQ)
timezoneconfiguration option. Fixed in 0.25.1.
prometheus_remote_writesink doesn’t support specifying the configuration
auth.beareras it should. Fixed in 0.25.1.
abortVRL function emits ERROR, rather than DEBUG, logs when discarding an event. Fixed in 0.25.2.
azure_blobsink incorrectly passes a redacted value for the
connection_string, rather than the actual contents. Fixed in 0.25.2.
component_errors_totalinternal metrics. Generally this meant adding missing metrics and logs, missing metric and logs labels, and applying internal log rate limits consistently.
filesink has added support for zstandard compressed output. Thanks to hdhoang for contributing this change!
parse_key_valuefunction now handles duplicate keys by grouping the values into an array. Thanks to ktff for contributing this change!
delfunction now has an optional
compactparameter that can be used to delete the parent of the path being deleted if there are no other fields (for objects) or elements (for arrays) in it.
build_infointernal metric was added to report Vector version and build information. This can be useful for monitoring a fleet of Vector instances.
valuesfunction were added to VRL to fetch the keys and values, respectively, of an object, into an array.
chunksfunction was added to VRL to enable breaking up a text field into multiple chunks of equal or lesser length. Thanks to briankung for contributing this change!
http_clientsource has been added. This source makes HTTP requests to the configured endpoint, on an interval, and turns the response into events based on the configured framing and decoding options.
Event metadata fields can now be referred to in VRL and configuration options that
take event field paths by using the
%<field name> syntax. For example, to refer to
a metadata field on the event called
foo you would use
%foo. For now, most
metadata fields are user-defined (e.g.
%foo ="bar" in VRL), but in the future
Vector will add more metadata, like event ingest timestamp.
As part of this, the metadata functions in VRL (
get_metadata_field', and remove_metadata_field
) have been deprecated. Instead, the new %
syntax should be used to access, modify, and remove metadata fields using normal VRL path operations. For example, setting a metadata field offoo
would look like%foo = “bar”`. Please see
for more details on the deprecation.
prometheus_remote_writesink can now be used with Amazon Managed Service for Prometheus by using AWS request signing. Thanks to notchairmk for contributing this change!
--internal-log-rate-limiton the CLI or the
VECTOR_INTERNAL_LOG_RATE_LIMITenvironment variable. The default is 10 seconds.
amqpsource and sink have been added to receive or send data via the AMQP 0.9.1 protocol, including RabbitMQ. Thanks to dbcfd for contributing this change!
pulsarsink now supports configuring which field name to use as the partition key in Pulsar via
partition_key_field. Thanks to miton18 for contributing this change!
prometheus_exportersink now supports configuring HTTP basic auth credentials to restrict access. Thanks to zamazan4ik for contributing this change!
parse_xmlVRL function avoids a panic due to certain invalid XML. Thanks to Zettroke for contributing this change!
elasticsearchsink can now be configured to send data to multiple Elasticsearch instances via the new
endpointsparameter. Thanks to ktff for contributing this change!
aws_s3source now ignores the
s3:TestEventSQS messages that AWS sends when wiring up S3 bucket notifications. Previously, Vector would error when consuming these events. Thanks to bencord0 for contributing this change!
parse_cefVRL function was added for parsing ArcSight Common Event Format (CEF). Thanks to ktff for contributing this change!
loki sink now supports sending data to Loki via its native snappy-compressed
protobuf protocol by setting
snappy. This is the new default, but
can be reverted to the previous behavior by setting
Please see the upgrade guide for more details.Thanks to xdatcloud for contributing this change!
datadog_metricssink now correctly aggregates counters emitted for the same timeseries within a single second (the timestamp granularity). Previously, it sent them through as-is to Datadog which processed them as last-write-wins.
internal_metrics source now defaults to setting the
host tag as this
behavior seems to be less surprising to users. It can be suppressed by setting the
host_key option to
Please see the upgrade guide for more details.
luatransform can now load dynamically linked libraries. Previously the needed symbols were being stripped from Vector.
honeycombsink now uses the correct timestamp field name. Thanks to McSick for contributing this change!
clickhousesink now fills in unprovided URL parts with defaults, for example by prefixing
http://if only an address and port are provided. Thanks to zamazan4ik for contributing this change!
syslogsource no longer panics when parsing invalid dates, instead it logs an error.
vector validatewith a configuration that includes the
stdinsource no longer blocks.
mongodb_metricssource no longer requires that the fetched statistics have a
recordfield (used to emit
mongod_metrics_record_moves_total). This field is not returned by MongoDB 6. Thanks to KernelErr for contributing this change!
stdinsources no longer assume inputs are always logs so that the source can be used to ingest metrics and traces via the
native_jsoncodecs. Thanks to vimalk78 for contributing this change!
.tagsfor metrics. Previously it would overwrite instead of assign.
log_to_metrictransform. This improves performance at runtime.
Sign up to receive emails on the latest Vector content and new releases
Thank you for joining our Updates Newsletter