Telemetry Pipeline at the Edge
Core Capabilities
📥 Multi-Protocol Ingestion
19 built-in source connectors across Syslog (UDP/TCP/TLS), Cisco NetFlow/IPFIX, CEF, OpenTelemetry (OTLP), Elastic Beats, Office 365 Audit feeds, AWS SQS, and S3.
🎛️ Real-Time Filtering & VRL
Filter in or out events using a visual boolean Query Builder, or apply high-throughput Vector Remap Language (VRL) for payload parsing, CIDR subnet matching, and log-to-metric conversions.
📤 Multi-Destination Fanout
Deliver data simultaneously to real-time analytics (ClickHouse, Kafka, SIEM) and cold compliance storage (AWS S3, MinIO) with automatic failover and default sinks.
🖥️ Integrated Web UI
Complete browser-based configuration management, live event and metric inspection, TOTP/MFA security, and seamless configuration reloads without packet loss.
🔒 Resilient Delivery
Built-in in-memory buffers and persistent disk queuing protect against upstream network outages and absorb heavy traffic bursts.
🌍 Distributed Collection
Native site-to-site and client VPN integration for aggregating telemetry securely across air-gapped environments, branch offices, and hybrid cloud estates.
Supported Destination Sinks
| Destination | Protocol / Transport | Primary Use Case |
|---|---|---|
| Apache Kafka | Native Producer | High-throughput pub/sub and enterprise streaming platforms |
| ClickHouse | Native HTTP / TCP | Real-time analytical log search and high-compression storage |
| AWS S3 / Compatible | Batched Object Upload | Low-cost cold archiving, compliance, and MinIO storage |
| HTTP / Webhook | JSON / Batched POST | Direct delivery to SIEMs (Splunk, Elastic) and webhooks |
| Vector | Native Streaming Protocol | Forwarding to upstream aggregation hubs or core collectors |
| Local / Network File | JSON / Flat File | Direct disk logging and network-attached storage (NFS/CIFS) |