logs
Field-tested open source data analytics system used and trusted all around the world. Search your logs, create charts, send reports and be alerted when something happens. All running on the existing JVM in your datacenter
Fluent Bit is a super fast, lightweight, and highly scalable logging and metrics processor and forwarder. It is the preferred choice for cloud and containerized environments.
Field-tested open source data analytics system used and trusted all around the world. Search your logs, create charts, send reports and be alerted when something happens. All running on the existing JVM in your datacenter.
Velociraptor is an advanced digital forensic and incident response tool that enhances your visibility into your endpoints.
Velociraptor is a tool for collecting host based state information using The Velociraptor Query Language (VQL) queries.
Request analytics from the nginx access logs.
ngtop is a command-line program to query request counts from nginx's access.log files.
A real-time dashboard for analyzing Traefik logs with IP geolocation, status code analysis, and service metrics. Built with React (Shadcn UI) and Node.js.
PostgreSQL log analyzer.
pgBadger is a PostgreSQL log analyzer built for speed with fully detailed reports and professional rendering.
KLogger is an easy-to-use logging class for PHP. It supports standard log levels like debug, info, warn, error, and fatal. Additionally, it isn't naive about file permissions (which is expected). It was meant to be a class that you could quickly include into a project and have working right away.
FalconHound is a blue team multi-tool. It allows you to utilize and enhance the power of BloodHound in a more automated fashion. It is designed to be used in conjunction with a SIEM or other log aggregation tool.
🛡️ PII Guard is an LLM-powered tool that detects and manages Personally Identifiable Information (PII) in logs — designed to support data privacy and GDPR compliance
Monolog sends your logs to files, sockets, inboxes, databases and various web services. See the complete list of handlers below. Special handlers allow you to build advanced logging strategies.
🌀 A log file highlighter.
tailspin works by reading through a log file line by line, running a series of regexes against each line. The regexes recognize patterns you expect to find in a logfile, like dates, numbers, severity keywords and more.
tailspin does not make any assumptions on the format or position of the items it wants to highlight. For this reason, it requires no configuration and the highlighting will work consistently across different logfiles.
Stop console.log()-ing every request. reqlog gives you a live dashboard of every HTTP request hitting your server — zero config.
Cube is a system for collecting timestamped events and deriving metrics. By collecting events rather than metrics, Cube lets you compute aggregate statistics post hoc. It also enables richer analysis, such as quantiles and histograms of arbitrary event sets. Cube is built on MongoDB and available under the Apache License on GitHub.
Web-based dashboard for Fail2Ban log filtering and blocklist control.
A lightweight web-based "multi-server dashboard" that transforms daily Fail2Ban logs into searchable and filterable JSON reports, while also providing centralized UFW IP blocklist management across all your servers through a pull-based client-side synchronization via secure HTTPS endpoints.
visualize logs and time-stamped data Elasticsearch works seamlessly with Kibana to let you see and interact with your data
CISA’s LME provides a free, easy-to-deploy log management solution. It includes real-time threat alerts, customizable dashboards, and community collaboration on GitHub, helping small to medium-sized organizations improve their cybersecurity.
CISA's Logging Made Easy (LME) is a no cost, open source platform that centralizes log collection, enhances threat detection, and enables real-time alerting, helping small to medium-sized organizations secure their infrastructure. Whether you're upgrading from a previous version or deploying for the first time, LME offers a scalable, efficient solution for logging and endpoint security.
Related contents:
Uncomplicated Observability for Python and beyond! 🪵🔥 .
Logfire is an observability platform built on the same belief as our open source library — that the most powerful tools can be easy to use.
Visual Web Log Analyzer.
GoAccess is an open source real-time web log analyzer and interactive viewer that runs in a terminal in *nix systems or through your browser.
It provides fast and valuable HTTP statistics for system administrators that require a visual server report on the fly.
Related contents:
select * from logs;
Open source SIEM for instant log insights, powered by DuckDB. Analyze millions of events in seconds, right from your terminal.
Advanced Log Analytics Platform for Traefik and Beyond.
LogLynx is a high-performance (less than 50 MB of RAM), real-time log analytics platform designed to provide deep insights into your web traffic. Built with Go and optimized for Traefik reverse proxy logs, it offers a beautiful dark-themed dashboard and comprehensive REST API.
Related contents:
Tank is a very high performance distributed log, inspired in part by Kafka, and other similar services and technologies.
VictoriaLogs is open source user-friendly database for logs from VictoriaMetrics.
Related contents:
Object-store native databases built on a common foundation. Simple to operate. Impossible to outgrow.
OpenData is a collection of open source databases built on a common, object-native storage and infrastructure foundation. This shared foundation means every database has a virtually identical operational profile, which makes our database fleet materially easier and cheaper to operate than alternatives.
Related contents:
Own your logs. Search them fast.
Rootprint is open-source, self-hosted log management with OpenTelemetry-native ingestion, full-text search, and traces next to the logs that emitted them. You pay for retention at your object storage's $/GB.
kubernetes log viewer.
Kubernetes tail. Streams logs from all containers of all matched pods. Match pods by service, replicaset, deployment, and others. Adjusts to a changing cluster - pods are added and removed from logging as they fall in or out of the selection.
Affordable full-stack production debugging & monitoring. Resolve Production Issues, Fast. An Open Source Observability Platform: Unify Session Replays, Logs, Traces, Metrics and Errors – All Without the Datadog Price Tag.
Resolve production issues, fast. An open source observability platform unifying session replays, logs, metrics, traces and errors powered by Clickhouse and OpenTelemetry.
Related contents:
Open Source Observability Platform for Logs, Metrics, Traces, and More – Your Ultimate Dashboard for Alerts and Insights.
OpenObserve is a cloud native observability platform built specifically for logs, metrics, traces and analytics designed to work at petabyte scale.
Related contents:
A rich git commit graph in your terminal, like magic 📚
Serie (/zéːriə/) is a TUI application that uses the terminal emulators' image display protocol to render commit graphs like git log --graph --all.
Like Prometheus, but for logs.
Grafana Loki is a set of open source components that can be composed into a fully featured logging stack. A small index and highly compressed chunks simplifies the operation and significantly lowers the cost of Loki.
Loki is a horizontally-scalable, highly-available, multi-tenant log aggregation system inspired by Prometheus. It is designed to be very cost effective and easy to operate. It does not index the contents of the logs, but rather a set of labels for each log stream.
pgFouine is a PostgreSQL log analyzer used to generate detailed reports from a PostgreSQL log file. pgFouine can help you to determine which queries you should optimize to speed up your PostgreSQL based application.
Real-time Log Analysis Terminal UI.
A powerful, real-time log analysis terminal UI inspired by k9s. Analyze log streams with beautiful charts, AI-powered insights, and advanced filtering - all from your terminal.
Powershell module for VMWare vSphere forensics. The DFIR4vSphere PowerShell module collects logs and forensics artefacts on both ESXi hosts and the vCenter console.
A fast and powerful log viewer and processor that translates JSON or logfmt logs into a pretty human-readable format.
Related contents:
A Windows Event Log viewer for tech support and IT professionals.
the missing audit log library. auditor's purpose is to provide an easy and standardized way to collect and persists audit logs.
fast, remote-first, multi-host TUI log viewer with timeline histogram and no central server.
Nerdlog is a fast, remote-first, multi-host TUI log viewer with timeline histogram and no central server. Loosely inspired by Graylog/Kibana, but without the bloat. Pretty much no setup needed, either.
It's laser-focused on being efficient while querying logs from multiple remote machines simultaneously, filtering them by time range and patterns, while also drawing a timeline histogram for quick visual insight:
Purpose-built log analytics UI for ClickHouse.
A modern, single binary, high-performance log analytics platform.
Logchef is a dedicated log query and visualization interface built specifically for ClickHouse. It fills a critical gap in the ClickHouse ecosystem, providing a powerful log explorer without reinventing log collection or storage.
⎈ Multi pod and container log tailing for Kubernetes.
Stern allows you to tail multiple pods on Kubernetes and multiple containers within the pod. Each result is color coded for quicker debugging.
Related contents:
Open Source & Cross-Cloud Compliance & Security. Costs saving & Optimization.
Kexa's simple rules (Open Source) make it easy to monitoring and manage alerting of your entire cloud. With various monitoring and alerting options, instant and detailed alerts, easy-to-deploy and low in infrastructure costs, in turns complexity into simplicity.
Related contents:
An 'Observe and Report Buddy' for your SRE toolbox.
Green Orb is a lightweight monitoring tool that enhances your application's reliability by observing its console output for specific patterns and executing predefined actions in response. Designed to integrate seamlessly, it's deployed as a single executable binary that runs your application as a subprocess, where it can monitor all console output, making it particularly useful in containerized environments. Green Orb acts as a proactive assistant, handling essential monitoring tasks and enabling SREs to automate responses to critical system events effectively.
A simple cli for logs splitting.
A simple command line tool that helps you visualize an input stream of text.
Real-time, high-performance reading of log files and writing to clickhouse.
This tool can write the monolog standard log directly to clickhouse in real time via the tcp protocol. If you can write regular rules, other standardized log can also support it.
the Poor Man's Logger.
Logs, metrics, dashboards, and alerts in one small SQLite-backed binary. Built for self-hosters, queried with plain SQL. pooml is a logs + metrics server in one small binary: SQLite inside, SQL outside, a web UI on top. Ship logs from FluentBit, push metrics over OTLP or scrape Prometheus endpoints, draw dashboards, get alerts on your phone.
Logdy a web viewer for logs. Supercharge terminal logs with web browser UI and low-code. Save 90% of time searching and browsing logs.
Web based real-time log viewer. Stream ANY content to a web UI with autogenerated filters. Parse any format with TypeScript.
Observability on Your Laptop and in Your Browser
Run local logs & traces, query them in CLI or UI, entirely on your machine. Then share results with teammates.
Related contents:
Threat Detection & Incident Response Done Right. SIEM, Log Management & API Protection.
Graylog is a free and open log management platform.
Related contents:
Low Code log management solution
FlowG is a log management platform that lets you ingest, transform, and query logs using a visual pipeline builder. It handles structured logs without requiring predefined schemas and relies on BadgerDB as its storage backend.
logstash is a tool for managing events and logs. You can use it to collect logs, parse them, and store them for later use (like, for searching). Speaking of searching, logstash comes with a web interface for searching and drilling into all of your logs.
lumberjack is an open-source project to update and enhance the event log architecture. lumberjack aims to improve the creation and standardize the content of event logs by implementing the concepts and specifications proposed by the Common Event Expression (CEE).
This page describes the JSON Lines text format, also called newline-delimited JSON. JSON Lines is a convenient format for storing structured data that may be processed one record at a time. It works well with unix-style text processing tools and shell pipelines. It's a great format for log files. It's also a flexible format for passing messages between cooperating processes.
The Log File Navigator, lnav for short, is an advanced log file viewer for the small-scale. It is a terminal application that can understand your log files and make it easy for you to find problems with little to no setup.
A lightweight, open-source, and secure log viewer for Docker.
Dozzle is a small lightweight application with a web based interface to monitor Docker logs. It doesn’t store any log files. It is for live monitoring of your container logs only.
Related contents:
Rapidly Search and Hunt through Windows Forensic Artefacts.
Chainsaw provides a powerful ‘first-response’ capability to quickly identify threats within Windows forensic artefacts such as Event Logs and MFTs. Chainsaw offers a generic and fast method of searching through event logs for keywords, and by identifying threats using built-in support for Sigma detection rules, and via custom Chainsaw detection rules.
Portable logs post-processing awk script - colours, emojis and more for Kubernetes logs, containers, journalctl, etc..
Tiny awk script to improve kubernetes logs reading experience.
MyLogPHP, a single class to generate log files in PHP. This class allow programmers to easily write messages to a log file.
StreamAlert is a serverless, real-time data analysis framework which empowers you to ingest, analyze, and alert on data from any environment, using data sources and alerting logic you define. Computer security teams use StreamAlert to scan terabytes of log data every day for incident detection and response.