Self-hosted logging platform with real-time streaming, full-text search, and OTLP-compatible ingestion. Deploy in minutes, own your data.

AzLogDcrIngestPS - Unleashing the power of Log Ingestion API with Azure LogAnalytics custom table v2, Azure Data Collection Rules and Azure Data Ingestion Pipeline

ClientInspectorV2 - Unleashing the power of Azure LogAnalytics, Azure Data Collection Rules, Log Ingestion API by doing client inventory with lots of great information

SIEM lab using Splunk for log ingestion and alerting.

Log Ingestor provides a highly scalable log management solution optimized for ingesting and analyzing large volumes of log data in real-time. The key features of Log Ingestor include high scalability and a user-friendly React based query interface.

Production-shaped GKE SOC stack using Cloudflare Logpush as a reference ingest source, Kafka, Elasticsearch, Grafana, and investigation workflows.

LLM log ingestion server — auto cost accounting, multi-tenant retention tiers, smart blob routing to S3/R2. Single binary.

The project is a full-stack log management system using Node.js, Express.js, MongoDB, and React.js. It ingests and stores logs in MongoDB with a flexible schema. The React-powered query interface allows users to interactively search and filter logs based on parameters.

SentinelEye is a lightweight, fully local SIEM that ingests large‑scale firewall, DNS, and authentication logs to detect security threats in real time. It provides SOC‑ready alerts, rich investigations, and a dark dashboard without relying on external cloud services.

A somewhat basic exploit (or partly automated RCE testing script - if you'd like) for the Cybox CTF machine.

Server sizing and log ingestion monitoring for Wazuh with automated HTML reports and graphs.

This repository offers tools and scripts for mapping and visualizing Microsoft Sentinel data. It includes utilities for extracting, analyzing, and presenting security information from Sentinel, helping to create detailed security maps and dashboards for improved threat analysis.

Splunk Enterprise 10.2.2 installation on Kali Linux with auth log ingestion and SSH brute force event verification

A collection of hands-on Splunk projects demonstrating real-world use cases for log ingestion, SPL development, dashboards, alerts, and security analytics.

Node.js + TypeScript log ingestion service with bearer auth, per-client rate limiting, bounded queue with backpressure, retrying worker pool, and full OpenTelemetry traces/metrics/logs over OTLP (Dash0-ready).

Real-time log ingester that tails web access logs, labels AI crawler traffic, and streams structured events to multiple sinks.

XemLog: High-performance, Cloud-Native Log Ingester & Archiver built in Rust. Features an OTLP-compliant ingestion layer, zero-copy parsing, and a stateless architecture leveraging S3/Parquet for cost-efficient, enterprise-grade observability.