Logs Analyzer

logs

Browser-based log analytics with DuckDB WASM, Lucene search, and six anomaly-detection methods.

SQL and Lucene over your logs in the browser. DuckDB WASM under the hood, six ML anomaly methods on top, full charting and CSV export, zero log shipping.

A browser-based log analysis workbench powered by DuckDB WASM. Auto-parses common log formats, lets analysts run full SQL or Lucene queries locally, and ships six anomaly-detection algorithms (Z-Score, IQR, Isolation Forest, DBSCAN, LOF, Autoencoder) plus rich analytics, summary stats, distributions, correlation matrix, time-series, group-by, frequency/entropy. No data ever leaves the machine.

What it does

• Auto-detects and parses CSV, TSV, JSON, JSONL/NDJSON, plus Apache/Nginx access logs, syslog, and JSON logs.
• Runs full SQL via DuckDB WASM with query templates, history, and one-click re-execution.
• Discover tab with Lucene query syntax: wildcards, fuzzy search, ranges, boolean operators, grouping, regex, _exists_.
• Analytics: summary statistics, distribution histograms, correlation matrix, time-series aggregation, group-by, frequency analysis with entropy.
• Six anomaly-detection algorithms: Z-Score, IQR, Isolation Forest, DBSCAN, Local Outlier Factor, Autoencoder (TensorFlow.js).
• Visualisations: bar, line, scatter, pie, histogram, time-series, and anomaly comparison charts.
• Export query results to CSV or save them as new in-session tables.

Best for

• SOC analysts working on telecom investigations.
• Audit teams reviewing operator logs.
• Researchers iterating on detection rules against historical data.

Inputs: CSV / TSV, JSON / JSONL / NDJSON, Apache / Nginx access logs, Syslog, Plain log files, Gzip

Outputs: SQL result sets, Charts (bar / line / scatter / pie / histogram / time-series), Anomaly scores, CSV export