v0.55.0
asheshgoplani/agent-deckv0.55.0Apr 22, 2026by github-actions[bot]
AI Summary
This release introduces a new Windows Event Log source, Apache Parquet support for AWS S3, and restored Azure authentication for the `azure_blob` sink. It also improves internal metrics for capacity planning and fixes a performance regression in file and kubernetes_logs sources.
Key Highlights
- New `windows_event_log` source collects logs from Windows Event Log channels using native APIs with pull-mode subscriptions.
- `aws_s3` sink now supports Apache Parquet batch encoding with configurable compression options (Snappy, ZSTD, etc.).
- `azure_blob` sink re-gains first-class Azure authentication support including CLI, Managed Identity, and Workload Identity.
- `datadog_metrics` sink defaults to the Series v2 endpoint using zstd compression for smaller payloads and better batching.
- Improved internal metrics for capacity planning include new source-send latency distributions and fixed task-transform utilization tracking.
Breaking Changes
- The Vector observability API has moved from GraphQL to gRPC, affecting `vector top`, `vector tap`, and playground access.
- The `top-level headers` option has been removed from the `http` and `opentelemetry` sinks.
- The `azure_logs_ingestion` sink now requires the `azure_credential_kind` option to be explicitly set when using Client Secret credentials.
New Features
- Windows Event Log source with native API integration, bookmark-based checkpointing, and field filtering.
- Apache Parquet batch encoding for the `aws_s3` sink with auto-generated or supplied schemas.
- Azure authentication support (CLI, Managed Identity, Workload Identity) for the `azure_blob` sink.
- Series v2 API endpoint and zstd compression for the `datadog_metrics` sink.
Full Release Notes
The [COSE team](https://opensource.datadoghq.com/about/#the-community-open-source-engineering-team) is excited to announce version 0.55.0! ### Release highlights - New `windows_event_log` source that collects logs from Windows Event Log channels using the native Windows Event Log API, with pull-mode subscriptions, bookmark-based checkpointing, and configurable field filtering. - The `aws_s3` sink now supports Apache Parquet batch encoding. Events can be written as Parquet columnar files with either an auto-generated native schema or a supplied `.schema` file, and configurable compression (Snappy, ZSTD, GZIP, LZ4, or none). - The `azure_blob` sink re-gains first-class [Azure authentication](https://learn.microsoft.com/en-us/azure/storage/blobs/authorize-access-azure-active-directory): Azure CLI, Managed Identity, Workload Identity, and Managed Identity-based Client Assertion credential kinds are all supported again. - The `datadog_metrics` sink now defaults to the Series v2 endpoint (/api/v2/series) and uses `zstd` compression for Series v2 and Sketches, which should yield smaller payloads and more efficient batching and intake. A new `series_api_version` option (v1 or v2) is available to opt back to the legacy v1 endpoint; Series v1 continues to use `zlib`. - `vector top` is more trustworthy: per-output events for components with multiple output ports are now shown in the correct Events Out column, and the Memory Used column now reports disabled when the target Vector instance was started without `--allocation-tracing` instead of a misleading 0. - Better internal metrics for capacity planning and alerting: - New source-send latency distributions (`source_send_latency_seconds`, `source_send_batch_latency_seconds`) surface backpressure close to the source. - Task-transform utilization no longer counts time spent waiting on downstream components, giving a more representative view of transform saturation. - Fixed a regression in buffer utilization metric tracking around underflow. - Fixed a performance regression in the file and kubernetes_logs sources that could cause unexpectedly high CPU usage, introduced in `0.50.0`. ### Breaking Changes See the [0.55 upgrade guide](https://website.d1a7j77663uxsc.amplifyapp.com/highlights/2026-04-20-0-55-0-upgrade-guide/) for full details and migration steps. At a glance, you are affected if you: - query or tail the Vector observability API in any way: the API has moved from GraphQL to gRPC. This includes `vector top`, `vector tap`, and anything that talked to /graphql or the /playground. The HTTP `GET /health` endpoint is unchanged and continues to serve Kubernetes HTTP probes as before. - set the top-level headers option on the `http` or `opentelemetry` sinks: it has been removed. - use the `azure_logs_ingestion` sink with Client Secret credentials: `azure_credential_kind` must now be set explicitly. [View release notes](https://vector.dev/releases/0.55.0)