vectordotdev / vector

A high-performance observability data pipeline.
https://vector.dev
Mozilla Public License 2.0
17.63k stars 1.55k forks source link

Explore potential for an eBPF source for Vector #3589

Open jamtur01 opened 4 years ago

jamtur01 commented 4 years ago

eBPF allows users to run user-supplied programs inside the kernel allowing for deep observability (https://lwn.net/Articles/740157/).

We should explore how we might integrate Vector with eBPF.

  1. As a source for metrics/data emitted from eBPF programs.
  2. Run'able eBPF programs much like WASM plugins?
danmx commented 2 years ago

That would be a very useful feature