Skip to main content
Version: 1.2

Ingest Data for Observability

Observability data reaches GreptimeDB through the protocol its source already speaks. Ingest Data lists every source in one table; this page groups the observability paths by signal.

Metrics

Logs

  • Loki — the Loki Push API, the path for migrating off Loki without changing the clients already writing to it. This page also covers the Alloy configuration.
  • Elasticsearch — the _bulk API, compatible with Logstash, Filebeat, and Telegraf.
  • Splunk — the HTTP Event Collector (HEC) protocol, compatible with Vector and the OpenTelemetry Collector.

Parsing and transforming text logs before they are stored is covered in Logs.

Traces

Storing traces and querying them with SQL or the Jaeger-compatible API is covered in Traces.

Agents and pipelines

These sit between the source and GreptimeDB, writing through an exporter, sink, or output that you configure. The signals each one carries differ:

  • OpenTelemetry Collector — routes metrics, logs, and traces through an OTLP/HTTP exporter.
  • Vector — metrics through the greptimedb_metrics sink, logs through greptimedb_logs. No traces sink.
  • Fluent Bit — logs through the HTTP output; metrics, logs, and traces through the OpenTelemetry output; metrics also through Prometheus Remote Write.
  • Grafana Alloy — writes through Remote Write, OpenTelemetry, or Loki.
  • Kafka — consumed into GreptimeDB with Vector as the transport.