Rethinking Fluent Bit: predictable and lightweight

FluentDo Agent is a stable, secure by default, OSS (Apache-licensed) downstream distribution of Fluent Bit with predictable releases and long-term supported versions for 24 months.

• ✅ Smaller footprint - Optimized for production deployments

  • Only production-essential plugins included
  • Size-focused builds with dead code elimination
  • IPO/LTO interprocedural optimization

• ✅ Security-hardened by default - Enterprise-grade security

  • FORTIFY_SOURCE and stack protection enabled
  • 17 vendor-specific plugins disabled by default
  • All remote interfaces disabled, authentication required
  • FIPS-compliant builds with OpenSSL in FIPS mode

• ✅ 24-month LTS support - Predictable and reliable

  • Weekly security patches and CVE fixes
  • Quarterly releases with long-term stability
  • Daily security scans and vulnerability reporting

• ✅ Advanced features - Production-ready capabilities

  • Performant log deduplication - reduce costs by up to 40%
  • Log sampling processor for high-volume environments
  • AI-based filtering and routing
  • Native flattening for OpenSearch/Elasticsearch
  • Type safety with automatic conflict resolution

• ✅ Battle-tested quality - Continuous validation

  • Full integration and regression testing suite
  • Memory safety validation with Valgrind/AddressSanitizer
  • Performance benchmarks and regression testing

Learn more about features →

Ensure any files mounted are readable via the container user (cat Dockerfile.ubi|grep USER).

To specify a different configuration just mount it in as well and pass it on the command line to use.

All packages are available for download at https://packages.fluent.do.

Linux packages are available for download and installation or using a simple install script:

For macOS a brew tap recipe is provided:

Windows packages are also available for download in various formats (ZIP, EXE or MSI).

To compile for a specific target, run the container-based build using the upstream source/packaging/build.sh script with the specified distribution you want to build for:

To build the UBI or distroless containers:

To compile natively (requires relevant dependencies installed):

Refer to the CI for full examples of different target builds:

• Container builds
• Linux builds
• Windows builds

• Documentation - Complete documentation and guides
• Downloads - Pre-built packages and containers
• Release Notes - Version history and changelogs
• OSS Fluent Bit Docs - Core documentation reference

• Slack - Join our community chat
• GitHub Issues - Bug reports and feature requests
• Contributing Guide - How to contribute to the project
• Commercial Support - Enterprise support with SLA

The Cosign key for our images is provided in this repo.

Follow the documentation to verify against it: https://docs.sigstore.dev/cosign/verifying/verify/.

If you discover a potential security issue, DO NOT create a public GitHub issue. Instead, report it directly:

📧 Email: [email protected]

Please include:

• Description of the vulnerability
• Steps to reproduce
• Potential impact
• Suggested fixes (if any)

We follow responsible disclosure and will work with you to address issues promptly.

This project is licensed under the Apache License 2.0.

Copyright © FluentDo Contributors. See NOTICE for details.

FluentDo Agent is built on top of Fluent Bit. We are grateful to the Fluent Bit community and all contributors who make this possible ❤️

Website • Docs • Twitter • Support