Vector

Vector is a high-performance observability pipeline tool built in Rust. It's designed for teams that want to collect logs and metrics from many sources, transform them in flight, and send them to one or more destinations, without stitching together multiple specialized tools.

It runs as a single binary with no runtime dependencies, which means it installs cleanly on almost any infrastructure. You can deploy it as an agent on individual hosts, as a centralized aggregator, or as part of a stream-based topology. The same tool covers all three roles.

Key capabilities:

• 47 sources including Kubernetes logs, Kafka topics, Splunk HEC, Datadog Agent, and more
• 62 sinks covering destinations like Elasticsearch, AWS S3, Datadog, and many others
• 18 transforms for parsing, filtering, redacting, and reshaping data before it reaches its destination
• Programmable transforms via a built-in scripting runtime for complex logic that simple config can't handle
• Vendor-neutral by design, so you can switch backends without rewriting your pipeline
• Clear delivery guarantees documented per component, so you know exactly what trade-offs you're making

Configuration is declarative and composable. Pipelines are defined by wiring sources through transforms into sinks, and the format supports YAML, TOML, and JSON. A pipeline that redacts sensitive fields from Datadog Agent logs before forwarding them, or one that reads from Kafka and indexes into Elasticsearch, takes only a few lines.

Vector competes with tools like Logstash but prioritizes memory efficiency and throughput. It's also a natural complement to observability platforms like HyperDX or OpenObserve, feeding structured data into whatever backend you prefer. Because it's vendor-neutral, it doesn't push you toward any particular sink, and you can route the same data to multiple destinations simultaneously.

With over 13,000 GitHub stars, 300+ contributors, and 30 million downloads, it has broad real-world adoption across 40 countries.