/tools/log-viewer

Local Log Viewer

Index, search and investigate operational logs without uploading them or retaining complete rows in memory.

log-viewer://local

1. Source

Choose one UTF-8 log file, or paste a small example up to 10 MB.

Processed locally · source remains unchanged

2. Search and filters

All records
Level

Evidence filters

Likely exposure

3. Records

4. Details

Findings

No sampled signals

5. Filtered and redacted export

The source stays immutable. Select categories explicitly, inspect the 20-record scope preview, then confirm export.

Redact

No redaction categories are selected automatically.

Choose a log file or load a small sample. Processing stays in this browser.

/formats

One viewer for operational log formats

Automatic parsing with override

The first 200 nonblank records are scored as structured JSON, logfmt, combined access log, RFC syslog or generic text. Override the parser when domain-specific logs resemble another format.

Bounded random access

The worker reads 1 MiB slices and stores sparse byte checkpoints every 1,024 records. Complete record text is sought only when you inspect it.

Forensic exposure review

Credential, token, cookie and likely-PII rules report masked signals with confidence. Detection does not silently alter display or export data.

Large export path

Supporting browsers stream to a file handle. Other browsers receive a local Blob download capped at 100 MB.

/faq

Local log viewer questions

Does the log viewer upload log files?

No. Indexing, search, inspection and export run locally in browser workers.

Which log formats are detected?

The viewer detects JSON logs, logfmt, NGINX or Apache combined logs, RFC 3164 or 5424 syslog, and generic text. You can override the parser.

Can I search with regular expressions?

Yes. Regex mode is explicit, limited to 512 characters and runs in a disposable worker. A no-progress watchdog can stop it without losing the source index.

Are large records discarded?

No. Records over 8 MB remain countable and exportable, but full display, structural analysis and regex inspection are bounded and reported.