{"slug": "vector", "name": "Vector", "category": "observability", "category_name": "Monitoring and analytics", "description": "", "recommenders": 3, "commenters": 4, "warners": 0, "score": 2.798, "rising": -0.98, "first": "2025-11-14", "latest": "2026-06-20", "why": "Genuinely one of my favorite pieces of infra software.", "why_is_quote": true, "has_verdict": false, "sentiment": {"recommend": 3, "neutral": 1, "compare": 0, "warn": 0}, "spark": [1, 0, 1, 0, 0, 0, 0, 1, 0, 0, 0, 0], "listed": true, "loved": [], "caveat": "", "short_quote": "Genuinely one of my favorite pieces of infra software.", "icon": true, "domain": "vector.dev", "github_repo": null, "official_url": "https://vector.dev", "pricing": "", "aliases": ["Vector"], "verdict": null, "praise": [{"label": "", "summary": "", "quotes": [{"id": 777714786, "item_id": 48607174, "url": "https://news.ycombinator.com/item?id=48607174", "by": "jaysh", "date": "2026-06-20", "stance": "recommend", "quote": "I used to use grafana-agent which used about 80%, vector uses sub 5%", "excerpt": "Off the top of my head: - substantially better performance on the same hardware, even moreso for larger range queries (multiple days) - no new query language to learn - significantly more expressive as you said - agents for scraping logs use way less CPU (I used to use grafana-agent which used about 80%, vector uses sub 5%) - very intuitive to manage TTLs - I can keep some logs for 10 years, and some for 1 week based", "context": "", "use_case": "log scraping agent", "switched_from": "grafana-agent", "story": "Ten years of ClickHouse in open source"}, {"id": 745911904, "item_id": 46619494, "url": "https://news.ycombinator.com/item?id=46619494", "by": "mr-karan", "date": "2026-01-14", "stance": "recommend", "quote": "Genuinely one of my favorite pieces of infra software.", "excerpt": "Just want to say thanks for creating Vector. We use it heavily at Zerodha and wrote about our setup here: https://zerodha.tech/blog/logging-at-zerodha/ It replaced both Filebeat and Logstash for us with a single binary that actually has sane resource usage (no more JVM nightmares). VRL turned out to be way more powerful than we could imagine - we do all our log parsing, metadata enrichment, and routing to different C", "context": "uses it at Zerodha", "use_case": "log parsing, enrichment, routing", "switched_from": "Filebeat", "story": "I built Vector. Now I'm answering the question your observability vendor won't"}, {"id": 734968066, "item_id": 45935504, "url": "https://news.ycombinator.com/item?id=45935504", "by": "didierbreedt", "date": "2025-11-14", "stance": "recommend", "quote": "We use Vector and Clickhouse for logging and works really well.", "excerpt": "I have found Grafana to be a decent product, but Prom needs a better horizontally scalable solution. We use Vector and Clickhouse for logging and works really well.", "context": "", "use_case": "logging pipeline", "switched_from": "", "story": "I can't recommend Grafana anymore"}]}], "caveats": [], "who": [{"by": "mr-karan", "context": "uses it at Zerodha", "url": "https://news.ycombinator.com/item?id=46619494", "date": "2026-01-14"}], "tags": [], "use_cases": ["log scraping agent", "log parsing, enrichment, routing", "shipping and transforming logs", "logging pipeline"], "compared": [{"slug": "clickhouse", "name": "ClickHouse", "co": 3, "switched_from": 0, "switched_to": 0}], "makers": [], "threads": [{"url": "https://news.ycombinator.com/item?id=48546890", "title": "Ten years of ClickHouse in open source", "mentions": 1}, {"url": "https://news.ycombinator.com/item?id=46617744", "title": "I built Vector. Now I'm answering the question your observability vendor won't", "mentions": 1}, {"url": "https://news.ycombinator.com/item?id=46294456", "title": "Texas is suing all of the big TV makers for spying on what you watch", "mentions": 1}, {"url": "https://news.ycombinator.com/item?id=45934940", "title": "I can't recommend Grafana anymore", "mentions": 1}], "sentiment_by_month": {"2025-11": {"recommend": 1}, "2025-12": {"neutral": 1}, "2026-01": {"recommend": 1}, "2026-02": {}, "2026-03": {}, "2026-04": {}, "2026-05": {}, "2026-06": {"recommend": 1}, "2026-07": {}, "2026-08": {}, "2026-09": {}, "2026-10": {}}, "quotes": [{"id": 777714786, "item_id": 48607174, "url": "https://news.ycombinator.com/item?id=48607174", "by": "jaysh", "date": "2026-06-20", "stance": "recommend", "quote": "I used to use grafana-agent which used about 80%, vector uses sub 5%", "excerpt": "Off the top of my head: - substantially better performance on the same hardware, even moreso for larger range queries (multiple days) - no new query language to learn - significantly more expressive as you said - agents for scraping logs use way less CPU (I used to use grafana-agent which used about 80%, vector uses sub 5%) - very intuitive to manage TTLs - I can keep some logs for 10 years, and some for 1 week based", "context": "", "use_case": "log scraping agent", "switched_from": "grafana-agent", "story": "Ten years of ClickHouse in open source"}, {"id": 745911904, "item_id": 46619494, "url": "https://news.ycombinator.com/item?id=46619494", "by": "mr-karan", "date": "2026-01-14", "stance": "recommend", "quote": "Genuinely one of my favorite pieces of infra software.", "excerpt": "Just want to say thanks for creating Vector. We use it heavily at Zerodha and wrote about our setup here: https://zerodha.tech/blog/logging-at-zerodha/ It replaced both Filebeat and Logstash for us with a single binary that actually has sane resource usage (no more JVM nightmares). VRL turned out to be way more powerful than we could imagine - we do all our log parsing, metadata enrichment, and routing to different C", "context": "uses it at Zerodha", "use_case": "log parsing, enrichment, routing", "switched_from": "Filebeat", "story": "I built Vector. Now I'm answering the question your observability vendor won't"}, {"id": 741143025, "item_id": 46321439, "url": "https://news.ycombinator.com/item?id=46321439", "by": "VTimofeenko", "date": "2025-12-18", "stance": "neutral", "quote": "I use vector[2] to ship and transform logs.", "excerpt": "Main data comes from unbound[1], I use vector[2] to ship and transform logs. Dnstap[3] log format IME works better than the standard logs, especially when it comes to more complex queries and replies. Undesired queries get 0.0.0.0 as a response which I track. Firewall is based on hand-rolled nftables rules. [1]: https://www.nlnetlabs.nl/projects/unbound/about/ [2]: https://vector.dev [3]: https://dnstap.info/Examples", "context": "", "use_case": "shipping and transforming logs", "switched_from": "", "story": "Texas is suing all of the big TV makers for spying on what you watch"}, {"id": 734968066, "item_id": 45935504, "url": "https://news.ycombinator.com/item?id=45935504", "by": "didierbreedt", "date": "2025-11-14", "stance": "recommend", "quote": "We use Vector and Clickhouse for logging and works really well.", "excerpt": "I have found Grafana to be a decent product, but Prom needs a better horizontally scalable solution. We use Vector and Clickhouse for logging and works really well.", "context": "", "use_case": "logging pipeline", "switched_from": "", "story": "I can't recommend Grafana anymore"}]}