Open Source Log Analysis Software

Free-SA is logs processor and report generating tool. It can be used to control traffic usage, to evaluate conformance to the Internet access security policies, to investigate security incidents, to evaluate web server efficiency and to detect troubles with server configuration.

FW1-Loggrabber is a command-line tool to grab logfiles from Checkpoint FW-1 remotely using Checkpoints LEA (Log Export Api), which is one part of Checkpoints OPSEC API.

Lire is a pluggable log analyzer, supporting HTTP, email, DNS, FTP, firewall and print services. Output generated can be txt, (X)HTML, PDF, RTF, and DocBook. The latter four support graphics. For news/support visit the project homepage.

Caudium WebServer is a single process multi-threaded webserver. It has a built-in pre-processing language and includes an easy to use web-based configuration interface.

Comprehensive & high performance data distribution &transformation system. Features a simple, user-friendly event driven scripting interface transparently generates & execs highly efficient Perl/C code. Uses:ETL,datawarehousing,statistics,data-cleansing.

SquiDeral - manipulating the cache usage of Your network.

AccounteX is an IP accounting system based on the IP Stat program. It has many exciting features like fully customizable web traffic accounting and user access control by many different values. information service and web statistics and administration.

BCLF is the Binary Common Log Format, a fast, platform independent, streamable, compact logging format that resembles the Extended CLF logging format in content. The project goal is to make an Apache module and enhance the format without giving up speed.

A Tool used in conjunction with glftpd to dynamically create reports on users groups. And Allow the user to access those reports through the web, irc, and glftpd itself

Impost is a network security auditing tool designed to analyze the forensics behind protocol exploitation.

Jacclog is a modular open source access logs analytics system written in Java.

This application allows you to capture the logging messages about network activity from your Linksys cable/DSL modem routers and store it in a database. The beginings of a PHP web based front end is also included as a separate module.

This is a program that watches your system log files, looking for hack attempts. It instanty reacts to potential security breaches by (for instance) adding firewall rules to cut off the attacker.

Graphize logs on the web browser. Fast javascript implementation needed with large monitor use.

A code toolkit for collecting usability data on the web. Tools range from an entirely client side solution for measuring scrolling and render time to a hybrid solution logging user activity every 200 milliseonds. Currently IE only.

Internet Control Firewall Intrusion Detection and Logger for Inbound and Outbound Traffic. Watches Files and Directories, Drive and Memory Protection.

NetMate Meter is a flexible and extensible tool for network measurement. It can be used for accounting, delay/loss measurement, packet capturing. It supports dynamic loadable packet processing and data export modules and a flexible packet classifier.

This automated multiusers ping report is PHP scripts that ping some hosts and get the result and put in My-SQL Database and report it briefly to plaintext and detaily to SQL, Ms. Excel , PDF file, and the report is print friendly.

Develop cross-platform tools faster using a C++ Framework proven in commercial software. Classes support logging, sockets, RFC servers (NNTP, SMTP, POP, HTTP), object indexing, ini, tagged databases, file systems, and more. The STDNOJ Namespace, by R.A. Nagy

ATTENTION: Snare Lite is unsupported legacy software. While it will remain a part of the SourceForge community, it is no longer secure and compliant. For up to date Snare software check out Snare Enterprise. https://www.snaresolutions.com/try-snare-for-free/ Snare Enterprise was created to keep up with the fast paced security software market. It started with the desire to create premium logging and SIEM tools that were agnostic by nature so they could be used to boost any SIEM architecture regardless of third party developers. In fact, the agnostic nature allows it to bridge gaps between multiple SIEM implementations across business units. For more on use cases, check out the Intersect Alliance website. https://www.snaresolutions.com/ Snare Enterprise’s premium features include: - Regulatory Compliance - TLS Encryption - Log Simulcasting - TCP – Guaranteed Log Delivery - USB Device Monitoring - And more! For updates follow us on social media!

Squeezer is a multi-dimensional logfile analyzer for Squid web cache server. It measures transfer speed from Squid, source servers and other caches and gives an information useful for tuning Squid and web cache hierarchy or mesh.

StataCaster is a series of PERL scripts used to email sendmail statistics to you. StataCaster can send you Daily, weekly and monthly statistics. StataCaster also maintains an archive of past stats, so You can see your past performance.

WTIQ provides detailed information about web activity on web sites which have been modified to include WTIQ monitoring tags in their pages. WTIQ is used by WebtraffIQ (http://www.webtraffiq.com) to provide detailed web traffic information commercially.

This RRDTool Framework provides a central HTTP-based service for import into standard RRD DBs and graph generation. A lightweight, easily extendable agent for the data sources is pushing updates with minimal resource consumption on the master service.

Ztats is a overall info tool for an Halflife server. (it may expand to other server types in the future). it's intended for wesite admins/game admins who want to include all sorts of server info in their site. main features : - live server monitor