// the find
awslabs/flowgger
A fast data collector in Rust
Flowgger is a Rust-based log shipper that reads from TCP/TLS/UDP/Redis/stdin, parses multiple syslog-family formats (RFC5424, GELF, LTSV, Cap'n Proto), and forwards to Kafka, Graylog, or other Flowgger instances. It targets the same space as Logstash and Fluentd but without the JVM overhead. Aimed at ops teams who need a lightweight, high-throughput forwarder in front of a log aggregation stack.
Zero unsafe code and paranoid input validation make it genuinely safe to put on a network boundary. The decoder/encoder matrix is well-factored — adding a new format means touching one directory, not threading changes through the whole codebase. Single static binary with no runtime dependencies is a real operational win over Logstash. CI badge is green and the last push was recent (2025-06-23), so the repo isn't dead despite its age.
Capped at 883 stars after years on awslabs — that's a quiet signal that it never broke out of niche use. No HTTP input means you can't use it as a drop-in for services that can only POST logs, which is increasingly where new apps land. The wiki is the only real documentation and it's thin — if you hit a format edge case or a Kafka config quirk, you're reading source. NATS output is there but there's no Elasticsearch or OpenTelemetry output, so you're still dependent on a second hop to get logs into modern observability stacks.