Logship Agent

The Logship Agent collects observability data — metrics, logs, and traces — and forwards it to your Logship instance. This agent runs alongside your services and aggregates from multiple data sources into a single upload stream.

You can check out the source on Github at https://github.com/logship-io/logship-agent or head to the next section to start collecting.

Key features

• Cross-platform: Windows, Linux, containers; supports ETW, journald, performance counters, and custom UDP inputs.
• Linux security monitoring: normalized auth events, SSH posture, persistence inventory, and optional Docker inventory/events/logs.
• Resilient buffering: local queue with backpressure controls to protect your services.
• Secure by default: account scoping and TLS-friendly endpoints.

Typical deployment topologies

• Sidecar per service: ideal for containerized apps needing isolated configs.
• Node: collect host metrics and forward multi-tenant data.
• Edge: aggregate traffic over constrained links using interval batching.