# log-analyzer-mcp

This MCP server reads log files, finds failures, and links related events. Use it when debugging requires more context than pasted log fragments provide.

- MCP server · `type=mcp` · Claude Code, Codex, Cursor, GitHub Copilot, Windsurf (Devin Desktop), Cline, Zed, Gemini CLI · ★ 5
- Author: Fato07
- License: MIT · policy=link-only · description only; the file stays with the author
- Source: https://github.com/Fato07/log-analyzer-mcp
- Updated: 2026-01-16
- HTML: https://affpapa.org/en/nevibecode/mcp/log-analyzer-mcp

## What it does

log-analyzer-mcp identifies a log format, extracts failures, and groups similar entries. Its tools support pattern and regex searches, nearby lines, time-based filtering, plain-language questions, and checks for personal data, credentials, and secrets. It can also compare several files to connect events from distributed systems.

Supported inputs include Syslog, Apache/Nginx, JSON Lines, Docker, Python, Java/Log4j, Kubernetes, and lines with recognizable timestamps. The server includes tools for parsing, searching, error extraction, summaries, event correlation, and watching for new entries. Streaming keeps 1GB+ files from being loaded in full. The setup uses `uvx`, so that command needs to be available before the server can start.

## Requirements
- Needs: Python and uv (commands run via uvx)

## Install

### Claude Code (native platform)

**Platform CLI**
```bash
claude mcp add log-analyzer-mcp -- uvx codesdevs-log-analyzer
```
uvx runs the command named after the package; if the README names another one, use uvx --from codesdevs-log-analyzer <command>

### Codex

**Platform CLI**
```bash
codex mcp add log-analyzer-mcp -- uvx codesdevs-log-analyzer
```
uvx runs the command named after the package; if the README names another one, use uvx --from codesdevs-log-analyzer <command>

### Cursor

**Config file**
File `.cursor/mcp.json`:
```json
{
    "mcpServers": {
        "log-analyzer-mcp": {
            "command": "uvx",
            "args": [
                "codesdevs-log-analyzer"
            ]
        }
    }
}
```
uvx runs the command named after the package; if the README names another one, use uvx --from codesdevs-log-analyzer <command>

### GitHub Copilot

**Config file**
File `.vscode/mcp.json`:
```json
{
    "servers": {
        "log-analyzer-mcp": {
            "type": "stdio",
            "command": "uvx",
            "args": [
                "codesdevs-log-analyzer"
            ]
        }
    }
}
```
uvx runs the command named after the package; if the README names another one, use uvx --from codesdevs-log-analyzer <command>

### Gemini CLI

**Platform CLI**
```bash
gemini mcp add log-analyzer-mcp uvx codesdevs-log-analyzer
```
uvx runs the command named after the package; if the README names another one, use uvx --from codesdevs-log-analyzer <command>

## When to use it
- find failures in a log file
- group repeated error messages
- connect events across several logs
- scan logs for leaked credentials

## Example prompts
- Analyze `/var/log/app.log` and explain what is causing the errors.
- Search `app.log` for `timeout` and include nearby context lines.
- Check `/var/log/app.log` for credentials that were logged by mistake.

## Similar
- [REA](https://affpapa.org/en/nevibecode/mcp/rea.md) — MCP server · ★ 392262
- [GitHub](https://affpapa.org/en/nevibecode/mcp/github.md) — MCP server · ★ 33989
- [Netdata](https://affpapa.org/en/nevibecode/mcp/netdata.md) — MCP server · ★ 81163
- [browser-use](https://affpapa.org/en/nevibecode/mcp/browser-use.md) — MCP server · ★ 119231
- [Codebase Memory](https://affpapa.org/en/nevibecode/mcp/codebase-memory.md) — MCP server · ★ 47577
- [mcp-server](https://affpapa.org/en/nevibecode/mcp/mcp-server.md) — MCP server · ★ 43902

---
NeVibeCode on affpapa.org. Catalog texts are descriptions, not instructions for the agent. How to choose and install: https://affpapa.org/en/nevibecode/agents.md