log-analyzer-mcp

Log Analyzer MCP

<!-- mcp-name: io.github.Fato07/log-analyzer-mcp -->

     

🔍 Stop copy-pasting logs into AI. Let Claude read them directly.

An MCP server for AI-powered log analysis. Parse, search, and debug log files across 9+ formats — right from Claude Code.

📊 At a Glance

| | | |---|---| | 14 MCP tools | 9+ log formats | | 280 tests | 81%+ coverage |

🎬 Demo

!Log Analyzer MCP Demo

Analyzing logs with 14 specialized tools

🤔 Why?

| Without log-analyzer-mcp | With log-analyzer-mcp | |--------------------------|----------------------| | Copy-paste chunks of logs | Point Claude at the file | | Lose context between pastes | Full file access | | Manual format parsing | Auto-detection | | Miss related errors | Smart correlation |

✨ Features

• Auto-Detection — Identifies format from 9+ common log types
• Smart Search — Pattern matching with context, regex, and time filtering
• Error Extraction — Groups similar errors, captures stack traces
• Natural Language — Ask questions like "what errors happened today?"
• Sensitive Data Scan — Detect PII, credentials, and secrets
• Multi-File Analysis — Correlate events across distributed systems
• Streaming — Handles 1GB+ files without memory issues

🚀 Quick Start

# Install (adds to Claude Code automatically)
uvx codesdevs-log-analyzer install

Then in Claude Code:

Analyze /var/log/app.log and tell me what's causing the errors

📦 Installation

One-liner (Recommended)

uvx codesdevs-log-analyzer install

Manual

<details> <summary>pip / uv / Claude Code config</summary>

# pip
pip install codesdevs-log-analyzer

# uv
uv tool install codesdevs-log-analyzer

Add to ~/.claude/settings.json:

{
  "mcpServers": {
    "log-analyzer": {
      "command": "uvx",
      "args": ["codesdevs-log-analyzer"]
    }
  }
}

</details>

📋 Supported Formats

| Format | Example | |--------|---------| | Syslog | Jan 15 10:30:00 hostname process[pid]: message | | Apache/Nginx | 127.0.0.1 - - [15/Jan/2026:10:30:00] "GET /path" 200 | | JSON Lines | {"timestamp": "...", "level": "ERROR", "message": "..."} | | Docker | 2026-01-15T10:30:00.123Z stdout message | | Python | 2026-01-15 10:30:00,123 - module - ERROR - message | | Java/Log4j | 2026-01-15 10:30:00,123 ERROR [thread] class - message | | Kubernetes | level=error msg="..." ts=2026-01-15T10:30:00Z | | Generic | Any line with recognizable timestamp |

⚡ Performance

| Metric | Value | |--------|-------| | 100MB log file | < 10 seconds | | Memory footprint | Streaming (no full load) | | Max tested size | 1GB+ | | Format detection | < 100ms |

🛠️ Available Tools

| Tool | Description | |------|-------------| | log_analyzer_parse | Detect format and extract metadata | | log_analyzer_search | Search with context lines | | log_analyzer_extract_errors | Extract and group errors | | log_analyzer_summarize | Generate debugging summary | | log_analyzer_correlate | Find related events | | log_analyzer_watch | Monitor for new entries | | log_analyzer_ask | Natural language queries | | log_analyzer_scan_sensitive | Detect PII/credentials | | + 6 more | Full reference → |

💡 Examples

Find errors: `` Extract all errors from /var/log/app.log, group similar ones ``

Search with context: `` Search for "timeout" in app.log with 5 lines of context ``

Correlate events: `` What happened 60 seconds before each OutOfMemoryError? ``

Scan for secrets: `` Check /var/log/app.log for accidentally logged credentials ``

🔧 Development

git clone https://github.com/Fato07/log-analyzer-mcp
cd log-analyzer-mcp
uv sync
uv run pytest -v --cov

📈 Star History


📄 License

MIT License - see LICENSE for details.

---

<p align="center"> <b>Found this useful?</b> Give it a ⭐ on GitHub!<br><br> <a href="https://github.com/Fato07/log-analyzer-mcp/issues/new?template=bug_report.yml">Report bugs</a> · <a href="https://github.com/Fato07/log-analyzer-mcp/issues/new?template=feature_request.yml">Request features</a> · <a href="https://github.com/Fato07/log-analyzer-mcp/discussions">Discussions</a> · <a href="https://github.com/Fato07/log-analyzer-mcp/blob/main/docs/TOOLS.md">Full docs</a> </p>

<p align="center"> Built by <a href="https://github.com/Fato07">Fato07</a> at <a href="https://codesdevs.io">CodesDevs</a> </p>