Parse mixed log sources
Text logs, newline-delimited JSON, JSON arrays, ISO timestamps, multiline Java/Python/Node stack traces, and common severity tags. Missing dates remain undated rather than fabricated.
Find repeated failures, reconstruct incidents, and investigate probable causes with evidence you can trace to the original log lines.
Runs in your tab. No log uploads or API keys. Findings are hypotheses, not confirmed diagnoses.
Add logs or load the sample, then choose Analyze logs to see error clusters, probable causes and evidence.
Time-distributed messages with parseable timestamps
Nearby warnings and failures
Recognized signatures and suggested checks; read the evidence before acting
Find logs with matching request or trace IDs across sources. Original identifiers are replaced with local aliases in reports.
Dynamic IDs, addresses and numbers are normalized to group similar errors
Review individual redacted records and stack traces
Analyze logs first. Rules and exports work without any model.
Model setup is optional. The deterministic analyzer remains available.
AI suggestions are unverified hypotheses. Logs can contain secrets that pattern redaction misses; review before sharing. Model scripts and weights download from external CDNs only after you choose to load a model. Log evidence is processed locally.
Text logs, newline-delimited JSON, JSON arrays, ISO timestamps, multiline Java/Python/Node stack traces, and common severity tags. Missing dates remain undated rather than fabricated.
Variable fields such as request IDs, IP addresses, UUIDs, and timings are normalized for deduplication. Click any cluster to inspect the underlying redacted messages.
Signature matches explain common failure families—database, networking, memory, TLS, and more. Every finding points to the original source and line. Export Markdown, CSV or JSON.
The primary analyzer uses transparent pattern matching and heuristic correlation. An optional WebGPU model can explain a bounded evidence summary after explicit model loading. Suggested causes are diagnostic leads, not confirmed root causes. It cannot infer events absent from logs, inspect infrastructure, query live systems, or guarantee that messages are safe to share. Review evidence and keep the original logs for forensic work.
Up to 12 local UTF-8 files and 20 MiB of combined input, 100,000 parsed events, 180,000 lines per source, and 20,000 distinct patterns. Binary files and compressed archives are not decoded. Timezone-free ISO timestamps are interpreted as UTC and flagged; syslog timestamps without a year are left undated. Very large forensic datasets are better handled in a streaming log backend.
Parse supported text and JSON logs, group repeated failures, correlate request or trace identifiers, and inspect probable incident causes with links back to source lines. Optional local AI can explain a bounded, redacted evidence summary.
Example: If two checkout errors show ECONNREFUSED with different request IDs, inspect the grouped messages and nearby database warnings, then verify the suspected connection issue against the original lines.
Limits and privacy: Supports up to 12 files and 20 MiB combined, 100,000 events and 180,000 lines per source. Heuristic causes are hypotheses; timestamps are interpreted from log data, and undated events are excluded from time correlations. Pattern redaction can miss secrets. Optional AI runs in-browser on bounded redacted findings; external runtime/model files download only after you choose a model.