Skip to content

rog0x/mcp-log-tools

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

4 Commits
 
 
 
 
 
 
 
 
 
 
 
 
 
 

Repository files navigation

@rog0x/mcp-log-tools

Log analysis and processing tools for AI agents, exposed via the Model Context Protocol (MCP).

Tools

parse_logs

Parse log content in common formats: JSON logs, Apache/Nginx access logs, syslog, and structured logs. Supports custom regex patterns with named capture groups. Extracts timestamp, level, message, source, and additional structured fields.

filter_logs

Filter parsed log entries by:

  • Log level (ERROR, WARN, INFO, DEBUG)
  • Date range (ISO 8601)
  • Keyword search (case-insensitive)
  • Regex pattern matching
  • Source/logger name

Returns matched entries along with level occurrence counts.

analyze_logs

Analyze log patterns to surface operational insights:

  • Top 10 most frequent errors (normalized)
  • Error rate over time (hourly buckets)
  • Request volume per hour
  • Slowest endpoints (from HTTP access logs)
  • Anomaly detection (sudden spikes or drops using standard deviation)

format_logs

Convert between log formats and produce reports:

  • JSON to plain text, plain to JSON, CSV, or table
  • ANSI colorization by log level
  • Structured field extraction
  • Summary report generation

log_stats

Compute comprehensive log statistics:

  • Total and non-empty line counts
  • Level distribution with percentages
  • Date range coverage
  • Unique IP addresses and request counts
  • Top user agents
  • HTTP status code distribution
  • Throughput (entries per second)

Setup

npm install
npm run build

Usage with Claude Desktop

Add to your claude_desktop_config.json:

{
  "mcpServers": {
    "log-tools": {
      "command": "node",
      "args": ["path/to/mcp-log-tools/dist/index.js"]
    }
  }
}

Supported Log Formats

Format Example
JSON {"timestamp":"2024-01-15T10:30:00Z","level":"ERROR","message":"Connection failed"}
Apache/Nginx 127.0.0.1 - frank [10/Oct/2000:13:55:36 -0700] "GET /index.html HTTP/1.1" 200 2326
Syslog Jan 1 00:00:00 hostname process[1234]: Something happened
Structured 2024-01-15T10:30:00.000Z [ERROR] [ModuleName] Something failed
Custom Any format using a regex with named capture groups

License

MIT

About

MCP server for log analysis: parse JSON/Apache/syslog, filter by level/date/keyword, analyze patterns and anomalies, format/convert, statistics Install: npx @rog0x/mcp-log-tools

Topics

Resources

License

Stars

Watchers

Forks

Releases

No releases published

Packages

 
 
 

Contributors