Controls if the source will wait for destination sinks to deliver the events before acknowledging receipt.

Array of file patterns to exclude. Globbing is supported.Takes precedence over the include option.

The key name added to each event with the full path of the file.

Configuration for how the file source should identify files.

Delay between file discovery calls. This controls the interval at which Vector searches for files. Higher value result in greater chances of some short living files being missed between searches, but lower value increases the performance impact of file discovery.

The key name added to each event representing the current host. This can also be globally set via the global host_key option.

Ignore missing files when fingerprinting. This may be useful when used with source directories containing dangling symlinks.

Ignore files with a data modification date older than the specified number of seconds.

String sequence used to separate one file line from another

The maximum number of a bytes a line can contain before being discarded. This protects against malformed lines or tailing incorrect files.

An approximate limit on the amount of data read from a single file at a given time.

Instead of balancing read capacity fairly across all watched files, prioritize draining the oldest files before moving on to read data from younger files.

Timeout from reaching eof after which file will be removed from filesystem, unless new data is written in the meantime. If not specified, files will not be removed.

In the absence of a checkpoint, this setting tells Vector where to start reading files that are present at startup.

Multiline parsing configuration. If not specified, multiline parsing is disabled.

The directory used to persist file checkpoint positions. By default, the global data_dir option is used. Please make sure the Vector project has write permissions to this dir.

Configures the encoding specific source behavior.

This causes Vector to ignore existing checkpoints when determining where to start reading a file. Checkpoints are still written normally.

The interval between scrapes.

Configures an HTTP(S) proxy for Vector to use. By default, the globally configured proxy is used.

The namespace of the metric. Disabled if empty.

Controls if the source will wait for destination sinks to deliver the events before acknowledging receipt.

Configures the TLS options for incoming connections.

Options for HTTP Basic Authentication.

AWS Kinesis Firehose can be configured to pass along an access key to authenticate requests. If configured, access_key should be set to the same value. If not specified, vector will treat all requests as authenticated.

Configures the TLS options for incoming connections.

The compression of records within the Firehose message.

Some services, like AWS CloudWatch Logs, will compress the events with gzip, before sending them AWS Kinesis Firehose. This option can be used to automatically decompress them before forwarding them to the next component.

Note that this is different from Content encoding option of the Firehose HTTP endpoint destination. That option controls the content encoding of the entire HTTP request.

Options for the authentication strategy.

Custom endpoint for use with AWS-compatible services. Providing a value for this option will make region moot.

The strategy to use to consume objects from AWS S3.

The compression format of the S3 objects..

Multiline parsing configuration. If not specified, multiline parsing is disabled.

Configures an HTTP(S) proxy for Vector to use. By default, the globally configured proxy is used.

SQS strategy options. Required if strategy=sqs.

Controls if the source will wait for destination sinks to deliver the events before acknowledging receipt.

Configures the TLS options for incoming connections.

When incoming events contain a Datadog API key, if this setting is set to true the key will kept in the event metadata and will be used if the event is sent to a Datadog sink.

Base URI of the task metadata endpoint. If empty, the URI will be automatically discovered based on the latest version detected. The version 2 endpoint base URI is 169.254.170.2/v2/. The version 3 endpoint base URI is stored in the environment variable ECS_CONTAINER_METADATA_URI. The version 4 endpoint base URI is stored in the environment variable ECS_CONTAINER_METADATA_URI_V4.

The namespace of the metric. Disabled if empty.

The interval between scrapes, in seconds.

The version of the metadata endpoint. If empty, the version is automatically discovered based on environment variables.

The Docker host to connect to. Use an HTTPS URL to enable TLS encryption. If absent, Vector will try to use DOCKER_HOST enviroment variable. If DOCKER_HOST is also absent, Vector will use default Docker local socket (/var/run/docker.sock on Unix flatforms, //./pipe/docker_engine on Windows).

TLS options to connect to the Docker daemon. This has no effect unless docker_host is an HTTPS URL. If absent, Vector will try to use environment variable DOCKER_CERT_PATH and then DOCKER_CONFIG. If both environment variables are absent, Vector will try to read certificates in ~/.docker/.

Setting this to false will disable the automatic merging of partial events.

A list of container IDs or names to match against for containers you don't want to collect logs from. Prefix matches are supported, so you can supply just the first few characters of the ID or name of containers you want to exclude. This can be used in conjunction with include_containers.

A list of container IDs or names to match against for containers you want to collect logs from. Prefix matches are supported, so you can supply just the first few characters of the ID or name of containers you want to include. This can be used in conjunction with exclude_containers.

A list of container object labels to match against when filtering running containers. This should follow the described label's syntax in docker object labels docs.

A list of image names to match against. If not provided, all images will be included.

The amount of time to wait before retrying after an error.

Multiline parsing configuration. If not specified, multiline parsing is disabled.

The key name added to each event representing the current host. This can also be globally set via the global host_key option.

Endpoints to scrape stats from.

The interval between scrapes, in seconds.

Configures an HTTP(S) proxy for Vector to use. By default, the globally configured proxy is used.

The namespace used otherwise will be defaulted to eventstoredb.

The directory in which to run the command.

Include the output of stderr when generating events.

Determine if events should be generated per line or buffered and output as a single event when script execution finishes.

The maximum buffer size allowed before a log event will be generated.

The scheduled options.

The streaming options.

The key name added to each event representing the current host. This can also be globally set via the global host_key option.

The maximum bytes size of incoming messages before they are discarded.

Configures the receive buffer size using the SO_RCVBUF option on the socket.

Configures the TCP keepalive behavior for the connection to the source.

Configures the TLS options for incoming connections.

The timeout before a connection is forcefully closed during shutdown.

Configures the receive buffer size using the SO_RCVBUF option on the socket.

Configures the TCP keepalive behavior for the connection to the source.

Configures the TLS options for incoming connections.

The amount of time, in seconds, to pause between each batch of output lines. If not set, there is no delay.

The total number of lines to output. By default the source continuously prints logs (infinitely).

The list of lines to output.

If true, each output line starts with an increasing sequence number, beginning with 0.

Controls if the source will wait for destination sinks to deliver the events before acknowledging receipt.

Options for HTTP Basic Authentication.

Configures the TLS options for incoming connections.

A list of URL query parameters to include in the log event. These will override any values included in the body with conflicting names.

The list of host metric collector services to use. Defaults to all collectors.

The namespace of metrics. Disabled if empty.

The interval between metric gathering, in seconds.

Options for the "cgroups" (controller groups) metrics collector.

Note: this collector is only available on Linux systems, and only supports either version 2 or hybrid cgroups.

Options for the "disk" metrics collector.

Options for the "filesystem" metrics collector.

Options for the "network" metrics collector.

Controls if the source will wait for destination sinks to deliver the events before acknowledging receipt.

The expected encoding of received data. Note that for json and ndjson encodings, the fields of the JSON objects are output as separate fields.

A list of HTTP headers to include in the log event. These will override any values included in the JSON payload with conflicting names.

Options for HTTP Basic Authentication.

A list of URL query parameters to include in the log event. These will override any values included in the body with conflicting names.

The URL path on which log event POST requests shall be sent.

If set to true, only requests using the exact URL path specified in path will be accepted; otherwise requests sent to a URL path that starts with the value of path will be accepted. With strict_path set to false and path set to "", the configured HTTP source will accept requests from any URL path.

Configures the TLS options for incoming connections.

The event key in which the requested URL path used to send the request will be stored.

The key name added to each event representing the current host. This can also be globally set via the global host_key option.

Set to "" to suppress this key.

The key name added to each event representing the current process ID.

Set to "" to suppress this key.

The namespace of the metric.

The interval between metric gathering, in seconds.

Metric tag options.

The systemd journal is read in batches, and a checkpoint is set at the end of each batch. This option limits the size of the batch.

Include only entries from the current boot.

The list of unit names to exclude from monitoring. Unit names lacking a "." will have ".service" appended to make them a valid service unit name.

The list of unit names to monitor. If empty or not present, all units are accepted. Unit names lacking a "." will have ".service" appended to make them a valid service unit name.

The full path of the journalctl executable. If not set, Vector will search the path for journalctl.

The directory used to persist file checkpoint positions. By default, the global data_dir option is used. Please make sure the Vector project has write permissions to this dir.

The full path of the journal directory. If not set, journalctl will use the default system journal paths

Controls if the source will wait for destination sinks to deliver the events before acknowledging receipt.

If offsets for consumer group do not exist, set them using this strategy. See the librdkafka documentation for the auto.offset.reset option for further clarification.

The frequency that the consumer offsets are committed (written) to offset storage.

Maximum time the broker may wait to fill the response.

The log field name to use for the Kafka message key.

The log field name to use for the Kafka topic.

The log field name to use for the Kafka partition name.

The log field name to use for the Kafka offset.

The log field name to use for the Kafka headers.

Advanced options. See librdkafka documentation for details.

Options for SASL/SCRAM authentication support.

The Kafka session timeout in milliseconds.

Default timeout for network requests.

Configures the TLS options for incoming connections.

Configuration for how the events are annotated with Pod metadata.

Configuration for how the events are annotated with Namespace metadata.

Automatically merge partial messages into a single event. Partial here is in respect to messages that were split by the Kubernetes Container Runtime log driver.

The exact time the event was ingested into Vector.

Optional path to a kubeconfig file readable by Vector. If not set, Vector will try to connect to Kubernetes using in-cluster configuration.

The name of the Kubernetes Node this Vector instance runs at. Configured to use an env var by default, to be evaluated to a value provided by Kubernetes at Pod deploy time.

A list of glob patterns to exclude from reading the files.

Specifies the field selector to filter Pods with, to be used in addition to the built-in Node filter. The name of the Kubernetes Node this Vector instance runs at. Configured to use an env var by default, to be evaluated to a value provided by Kubernetes at Pod deploy time.

Specifies the label selector to filter Pods with, to be used in addition to the built-in vector.dev/exclude filter.

The maximum number of a bytes a line can contain before being discarded. This protects against malformed lines or tailing incorrect files.

The number of lines to read when generating a unique fingerprint of a log file. This is helpful when some containers share common first log lines. WARNING: If the file has less than this amount of lines then it won't be read at all. This is important since container logs are broken up into several files, so the greater lines value is, the greater the chance of it not reading the last file/logs of the container.

Delay between file discovery calls. This controls the interval at which Vector searches for files within a single pod.

The directory used to persist file checkpoint positions. By default, the global data_dir option is used. Please make sure the Vector project has write permissions to this dir.

The name of the time zone to apply to timestamp conversions that do not contain an explicit time zone. This overrides the global timezone option. The time zone name may be any name in the TZ database, or local to indicate system local time.

Configures the receive buffer size using the SO_RCVBUF option on the socket.

Configures the TCP keepalive behavior for the connection to the source.

Configures the TLS options for incoming connections.

The interval between scrapes.

The namespace of metrics. Disabled if empty.

NATS Queue Group to join

A name assigned to the NATS connection.

Controls if the source will wait for destination sinks to deliver the events before acknowledging receipt.

The timeout before a connection is forcefully closed during shutdown.

Configures the receive buffer size using the SO_RCVBUF option on the socket.

Configures the TCP keepalive behavior for the connection to the source.

Configures the TLS options for incoming connections.

Source API version. Specifying this version ensures that Vector does not break backward compatibility.

The interval between scrapes.

The namespace of metrics. Disabled if empty.

Configures the TLS options for incoming connections.

Configures an HTTP(S) proxy for Vector to use. By default, the globally configured proxy is used.

Configures the authentication strategy.

The interval between scrapes.

The namespace of metrics. Disabled if empty.

A list of databases to match (by using POSIX Regular Expressions) against the datname column for which you want to collect metrics from. If not set, metrics are collected from all databases. Specifying "" will include metrics where datname is NULL. This can be used in conjunction with exclude_databases.

A list of databases to match (by using POSIX Regular Expressions) against the datname column for which you don't want to collect metrics from. Specifying "" will include metrics where datname is NULL. This can be used in conjunction with include_databases.

TLS options to connect to the PostgreSQL Server.

The interval between scrapes, in seconds.

Configures an HTTP(S) proxy for Vector to use. By default, the globally configured proxy is used.

Configures the TLS options for incoming connections.

Configures the authentication strategy.

The key name added to each event representing the current host. This can also be globally set via the global host_key option.

The maximum bytes size of incoming messages before they are discarded.

Configures the receive buffer size using the SO_RCVBUF option on the socket.

Configures the TCP keepalive behavior for the connection to the source.

Configures the TLS options for incoming connections.

The timeout before a connection is forcefully closed during shutdown.

The address to accept connections on.

If supplied, incoming requests must supply this token in the Authorization header, just as a client would if it was communicating with the Splunk HEC endpoint directly. If not supplied, the Authorization header will be ignored and requests will not be authenticated.

Configures the TLS options for incoming connections.

If supplied, incoming requests must supply one of these tokens in the Authorization header, just as a client would if it was communicating with the Splunk HEC endpoint directly. If not supplied, the Authorization header will be ignored and requests will not be authenticated.

Configures the receive buffer size using the SO_RCVBUF option on the socket.

Configures the TCP keepalive behavior for the connection to the source.

The timeout before a connection is forcefully closed during shutdown.

The key name added to each event representing the current host. This can also be globally set via the global host_key option.

The maximum bytes size of a message before rest of it will be discarded.

Max dnstap frame length that the dnstap source can handle.

Unix file mode bits to be applied to server socket file as its designated file permissions. Note that the file mode value can be specified in any numeric format supported by TOML, but it'd be more intuitive to use an octal number. Also note that the value specified must be between 0o700 and 0o777.

Set receive buffer size of server Unix socket if specified. No change to the default size if omitted.

Set send buffer size of server Unix socket if specified. No change to the default size if omitted.

Whether or not to write out raw dnstap frame data directly (to be encoded in Base64) without any parsing and formatting.

If true the field will be dropped after parsing.

The field to apply the split on.