LogAnalyzer is a powerful but simple log file analysis tool. The upstream web site gives an online demo.
It is developed in PHP, runs in Apache and has no other dependencies such as databases - it can read directly from the log files.
For efficiency, however, it is now trivial to make it work with MongoDB on Debian.
Using a database (including MongoDB and SQL backends) also means that severity codes (debug/info/notice/warn/error/...) are retained. These are not available from many log files. The UI can only colour-code and filter the messages by severity if it has a database backend.
The packages just entered Debian recently. It has now been migrated to wheezy-backports and Ubuntu so anybody on wheezy or Ubuntu can use it.
The version of rsyslog in Debian wheezy does not support MongoDB output. It is necessary to grab 7.4.8 from backports.
Some versions, up to 7.4.4 in backports, had bugs with MongoDB support - if you tried those, please try again now.
The backported rsyslog is a drop-in replacement for the standard rsyslog package and for users with a default configuration it is unlikely you will notice any difference. For users who customized the configuration, as always, make a backup before trying the new version.
More news and policy statements regarding my campaign for Dublin Bay South:
Please print my brochure if you want Ireland to change