What is the Telemetry Forge Agent?

The Telemetry Forge Agent is a hardened, stable, secure by default, OSS (Apache-licensed) downstream distribution of Fluent Bit with predictable releases and long-term supported versions for 24 months.

It also has built-in functionality for:

1. Native de-duplication (Reduce log volume)
2. Native log sampling (Reduce log volume)
3. AI processors for routing (Smart log routing)
4. Enhanced storage layer (Efficient buffering)

Support & Lifecycle

Version Support Matrix

Main releases follow a date-based format with Year.Month.Week forming the version. Once it transitions to an LTS release then we maintain the major and minor versions from then on, only incrementing the patch version.

Release Schedule

---

Why use our agent?

• ✅ Smaller footprint - Optimized for production deployments

  • Only production-essential plugins included
  • Size-focused builds with dead code elimination
  • IPO/LTO interprocedural optimization

• ✅ Security-hardened by default - Enterprise-grade security

  • FORTIFY_SOURCE and stack protection enabled
  • 17 vendor-specific plugins disabled by default
  • All remote interfaces disabled, authentication required
  • FIPS-compliant builds with OpenSSL in FIPS mode

• ✅ 24-month LTS support - Predictable and reliable

  • Weekly security patches and CVE fixes
  • Quarterly releases with long-term stability
  • Daily security scans and vulnerability reporting

• ✅ Advanced features - Production-ready capabilities

  • Performant log deduplication - reduce costs by up to 40%
  • Log sampling processor for high-volume environments
  • AI-based filtering and routing
  • Native flattening for OpenSearch/Elasticsearch
  • Type safety with automatic conflict resolution

• ✅ Battle-tested quality - Continuous validation

  • Full integration and regression testing suite
  • Memory safety validation with Valgrind/AddressSanitizer
  • Performance benchmarks and regression testing

Learn more about features →

---

Quick Start

Docker

docker run --rm -it -v /var/log/containers:/var/log/containers:ro ghcr.io/telemetryforge/agent/ubi:main -c /fluent-bit/etc/fluent-bit.yaml
docker run --rm -it -v /var/log/containers:/var/log/containers:ro ghcr.io/telemetryforge/agent/debian:main -c /fluent-bit/etc/fluent-bit.yaml

Ensure any files mounted are readable via the container user (cat Dockerfile.ubi|grep USER).

To specify a different configuration just mount it in as well and pass it on the command line to use.

Package Installation

All packages are available for download at https://packages.telemetryforge.io.

Linux and macOS packages are available for download and installation or using a simple install script:

curl -sSfL https://raw.githubusercontent.com/telemetryforge/agent/refs/heads/main/install.sh | bash

Windows packages are also available for download in various formats (ZIP, EXE or MSI).

Building from Source

To compile for a specific target, run the container-based build using the upstream source/packaging/build.sh script with the specified distribution you want to build for:

git clone https://github.com/telemetryforge/agent.git
cd agent
./source/packaging/build.sh -d rockylinux/9

To build the UBI or distroless containers:

git clone https://github.com/telemetryforge/agent.git
cd agent
docker build -f Dockerfile.ubi .
docker build -f Dockerfile.debian .

To compile natively (requires relevant dependencies installed):

git clone https://github.com/telemetryforge/agent.git
cd agent
cd source/build
cmake ..
make

Refer to the CI for full examples of different target builds:

• Container builds
• Linux builds
• Windows builds

---

Resources

• Documentation - Complete documentation and guides
• Downloads - Pre-built packages and containers
• Release Notes - Version history and changelogs
• OSS Fluent Bit Docs - Core documentation reference

---

Community & Support

• Slack - Join our community chat
• GitHub Issues - Bug reports and feature requests
• Contributing Guide - How to contribute to the project
• Commercial Support - Enterprise support with SLA

---

Security

The Cosign key for our images is provided in this repo.

Follow the documentation to verify against it: https://docs.sigstore.dev/cosign/verifying/verify/.

The GPG key is also provided that signs packages and checksums.

Reporting Security Issues

If you discover a potential security issue, DO NOT create a public GitHub issue. Instead, report it directly:

📧 Email: security@telemetryforge.io

Please include:

• Description of the vulnerability
• Steps to reproduce
• Potential impact
• Suggested fixes (if any)

We follow responsible disclosure and will work with you to address issues promptly.

---

License

This project is licensed under the Apache License 2.0.

Copyright

Copyright © Telemetry Forge Contributors. See NOTICE for details.

Acknowledgments

Our agent is built on top of Fluent Bit. We are grateful to the Fluent Bit community and all contributors who make this possible ❤️

---

Website • Docs • Twitter • Support