Features

This chapter covers the core features and capabilities of Log Aggregator.

Features

• Multi-file tailing: Monitor multiple log files simultaneously
• Format parsing: Auto-detect and parse JSON, Apache Combined, nginx, and syslog formats
• Filtering: Include/exclude lines by log level, pattern, or time range
• Search: Regex search across log files with context lines
• Alerting: Trigger alerts when error patterns are detected
• Statistics: Count log levels, top error messages, and request rates
• Output: Structured JSON output for feeding into dashboards
• Handles log rotation (detects file truncation/recreation)
• Python stdlib only — zero dependencies

Quick Start

Follow this guide to get Log Aggregator up and running in your environment.

Quick Start

# Parse and display a log file
python src/log_aggregator.py parse --files examples/app.log

# Search for error patterns across multiple files
python src/log_aggregator.py search --files examples/app.log,examples/access.log --pattern "error|ERROR|500"

# Filter by log level
python src/log_aggregator.py parse --files examples/app.log --level error

# Generate statistics report
python src/log_aggregator.py stats --files examples/app.log --format json

# Parse with specific format
python src/log_aggregator.py parse --files examples/access.log --log-format apache

# Watch files in real-time (tail mode)
python src/log_aggregator.py tail --files examples/app.log --follow