The Vector team is pleased to announce version 0.27.0!
This release includes the usual litany of smaller enhancements and bug fixes as well as:
Be sure to check out the upgrade guide for breaking changes in this release.
component_events_out_totalinternal metrics with their component tags (
component_type). This affects reporting in
vector top. Fixed in v0.27.1.
log_schema.timestamp_keycannot be set to
""to suppress adding a timestamp. Fixed in 0.28.2.
fluentwould sometimes panic when back-pressure logic calculated a lower limit on the number of incoming connections than 2, which is intended to be the minimum limit. Fixed in 0.28.2.
pathoption was added to
lokisink to override the default URL path of
/loki/api/v1/push. Thanks to Sh4d1 for contributing this change!
VRL no longer rejects querying an object returned by the
merge function. This fixes
programs that look like:
.object.key = "some value" . |= parse_key_value!(del(.message)) .object.key = "some other value" # previously would error
vector list. Thanks to w4 for contributing this change!
pulsarsource now supports configuring a producer name to use via the new
producer_nameoption. Thanks to zamazan4ik for contributing this change!
absfunction was added to VRL to calculate the absolute value of a numeric value. Thanks to zamazan4ik for contributing this change!
parse_cefnow has a
transform_custom_fieldsparameter that can be set to extract custom key/value fields from the CEF message. Thanks to ktff for contributing this change!
auth.read_timeout. Thanks to kevinpark1217 for contributing this change!
pulsarsink now supports compression via the standard
compressionoption. Thanks to zamazan4ik for contributing this change!
kubernetes_logssource now more efficiently parses CRI logs. Thanks to Ilmarii for contributing this change!
natssource now allows adding the subject key to the event as metadata by setting
subject_key_fieldto the name of the field you’d like to store the subject key in. Thanks to makarchuk for contributing this change!
datadog_logssink now allows configuring custom HTTP request headers. This is not typically needed when sending logs directly to Datadog.
lokisink is now more efficient by sending events with multiple label sets in the same request rather than separating them. Thanks to atodekangae for contributing this change!
kubernetes_logssource now supports the
ignore_older_secsoptions that exist on the
filesink which offer further control how Vector reads from the pod log files. Thanks to zamazan4ik for contributing this change!
aws_kinesis_firehosesource now supports configuring multiple valid access keys. This is useful during key rotation. Thanks to dizlv for contributing this change!
Vector has added support for tracking component memory allocations to help users
understand which components may be allocating more memory than expected. This is an
opt-in feature, due to ~20% performance overhead, available by passing
--allocation-tracing when running Vector. When enabled, the
source will publish new
These are will then also be viewable in
There is a caveat to the reported metrics in that memory passed between components is not tracked as allocations. For example, if a source allocates memory to store incoming events, those events are passed along to a downstream component, the memory will still appear as though owned by the source component that allocated it. We hope to improve this in the future to track memory passed between component boundaries.
See the announcement blog post for more details!
encode_base16functions were added to VRL for interacting with base16 encoding. Thanks to WilliamApted-Org for contributing this change!
kafkasource and sink now accepts inline PEM-encoded certificates for
tls.crt_fileto match other sources and sinks (and the documented behavior). Thanks to nabokihms for contributing this change!
kubernetes_logssource again disabling annotation of namespace labels by setting
""again. This was regression in v0.26.0.
prometheus_exportercannot bind to the configured port. Thanks to zamazan4ik for contributing this change!
httpcannot bind to the configured port. Thanks to zamazan4ik for contributing this change!
elasticsearchsink now accepts reading compressed responses. It uses the
compressionoption to set an
Accept-Encodingoption in requests to Elasticsearch.
aws_ec2_metadatatransform is now capable of fetching instance tags by specifying the tags to fetch in the new
tagsoption. Thanks to blefevre for contributing this change!
aws_cloudwatch_metricsnow supports sending 30 dimensions, rather than 10, as the AWS API now accepts this number of dimensions.
filterfunction in the VRL REPL no longer panics.
httpsink now allows overriding the
request.headers. Thanks to EdMcBane for contributing this change!
remaptransform now falls back to using the globally configured
timezoneif one is not set at the
Sign up to receive emails on the latest Vector content and new releases
Thank you for joining our Updates Newsletter