Open Source Windows Log Analysis Software
Sort By:
Log Analysis Software for Windows
View 40 business solutionsBrowse free open source Log Analysis software and projects for Windows below. Use the toggles on the left to filter open source Log Analysis software by OS, license, language, programming language, and project status.
-
Custom VMs From 1 to 96 vCPUs With 99.95% UptimeLive migration and automatic failover keep workloads online through maintenance. One free e2-micro VM every month.
-
Fully Managed MySQL, PostgreSQL, and SQL ServerCloud SQL handles your database ops end to end, so you can focus on your app.
-
1
AWStats
AWStats Log Analyzer
AWStats is a free powerful and featureful server logfile analyzer that shows you all your Web/Mail/FTP statistics including visits, unique visitors, pages, hits, rush hours, os, browsers, search engines, keywords, robots visits, broken links and more -
2
Shorten your time of reading mega bytes of log files! DE 2016-01 Supporting Don HO's NotePad++ see http://notepad-plus-plus.org/ This sources are a dockable pattern search plugin for Notepad++ version 5.1 or later. With this plugin you can search for multiple patterns in any of the opened documents in NotePad++. You may want to tune your search using all fancy tricks from NPP like regular expressions or escaped patterns and give each of the searches different colors. The result will be stored in a dockable window in same ordering as in the origin and a double click allows you to jump to the original position. It is designed to treat log-files of typical size like 60MB. More features can be found in the help dialogue of the plugin. For generating the dll file I use a msdev compiler. If you like to port it to other OSs just let me know your changes and I'll incorporate it. Best Regards, Mattes H.
-
3
Visual Syslog Server for Windows
Free Syslog Server for Windows with a graphical user interface
Visual Syslog Server for Windows is a free open source program to receive and view syslog messages. Useful when setting up routers and systems based on Unix/Linux. Visual Syslog Server for Windows has a live messages view: switches to a new received message. Helpful color highlighting. Useful message filtering. Customizable notification and actions. Sources hosted on the GitHub: https://github.com/MaxBelkov/visualsyslog -
4
ProM is the comprehensive, extensible framework for process mining. Process Mining deals with the a-posteriori analysis of (business) processes using enactment logs.
-
$300 Free Credits to Build on Google CloudPut your $300 in credit toward real workloads, then keep building with free monthly usage for 20+ products. No commitment and no charge until you upgrade.
-
5
CMTrace Open
Free, open-source CMTrace replacement for Windows log files
CMTrace Open is a free, open-source log viewer and troubleshooting application designed for Windows administration and endpoint management. It provides a modern alternative to Microsoft's CMTrace utility with expanded diagnostic capabilities. The software automatically recognizes multiple log formats and displays entries with severity-based color coding. Users can monitor logs in real time, search messages, filter events, and identify Windows error codes. Specialized diagnostic workspaces help analyze Microsoft Intune, Configuration Manager, and Windows Autopilot deployment issues. It also supports Windows Event Log files, device registration diagnostics, and software installation troubleshooting. Available for Windows, macOS, and Linux, CMTrace Open offers full and lightweight editions for examining system logs and investigating administrative problems. -
6
AlienVault OSSIM
Open Source SIEM
OSSIM, AlienVault’s Open Source Security Information and Event Management (SIEM) product, provides event collection, normalization and correlation. For more advanced functionality, AlienVault Unified Security Management (USM) builds on OSSIM with these additional capabilities: * Log management * Advanced threat detection with a continuously updated library of pre-built correlation rules * Actionable threat intelligence updates from AlienVault Labs Security Research Team * Rich analytics dashboards and data visualization -
7
binjr
A Time Series Browser
binjr is a free, open-source time series browser designed for exploring numerical monitoring data and timestamped application logs. It provides an interactive desktop environment for visualizing information collected by external systems. Users can combine data from multiple sources into customizable charts using drag-and-drop controls. The software supports numerical time series, structured log files, and several monitoring data formats. Its navigation tools include timeline zooming, synchronized charts, detachable tabs, and browsing history. Apache Lucene indexing enables efficient searching and exploration of large log files. Users can save visualization sessions and reopen them for further investigation. Built with JavaFX for Windows, macOS, and Linux, binjr supports local data analysis without requiring cloud services. -
8
fluentbit
Fast and Lightweight Logs and Metrics processor for Linux, BSD, OSX
Fluent Bit is a super-fast, lightweight, and highly scalable logging and metrics processor and forwarder. It is the preferred choice for cloud and containerized environments. A robust, lightweight, and portable architecture for high throughput with low CPU and memory usage from any data source to any destination. Proven across distributed cloud and container environments. Highly available with I/O handlers to store data for disaster recovery. Granular management of data parsing and routing. Filtering and enrichment to optimize security and minimize cost. The lightweight, asynchronous design optimizes resource usage: CPU, memory, disk I/O, network. No more OOM errors! Integration with all your technology, cloud-native services, containers, streaming processors, and data backends. Fully event-driven design leverages the operating system API for performance and reliability. All operations to collect and deliver data are asynchronous. -
9
AutoIndex is a PHP script that makes a table that lists the files in a directory, and lets users access the files and subdirectories. It includes searching, icons for each file type, an admin panel, uploads, access logging, file descriptions, and more.
-
Build Agents and Models on One PlatformGemini Enterprise Agent Platform is Google Cloud's comprehensive platform for developers to build, scale, govern, and optimize agents and models. Choose from Google's most advanced models and third-party models like Anthropic's Claude Model Family.
-
10
LightSquid is a LIGHT and FAST, web based squid proxy traffic analyser . analize access.log and generate per-user & per group report.
-
11
MSBuild Structured Log Viewer
A logger for MSBuild that records a structured representation
MSBuild Structured Log is a free, open-source diagnostic tool designed for recording and analyzing Microsoft Build Engine operations. It captures detailed information about executed targets, tasks, properties, and item values during software builds. The software stores this information in portable binary log files that can be opened in an interactive viewer. Developers can explore hierarchical build structures to investigate errors, dependencies, and performance issues. It includes full-text searching, project file preprocessing, and source code inspection. The viewer also identifies conflicting file writes and displays target dependencies for troubleshooting. Supporting Windows and cross-platform viewing through Avalonia, MSBuild Structured Log helps .NET developers understand complex builds and diagnose unexpected behavior. -
12
PyEveLiveDPS
Live DPS calculator and grapher for EVE Online
PyEveLiveDPS is an open-source real-time damage calculator and grapher for the MMORPG EVE Online. It reads the game's combat logs to calculate outgoing and incoming damage per second during gameplay. Interactive graphs display moving averages, helping players evaluate weapon performance throughout encounters. The application also monitors shield, armor, and hull repairs, capacitor transfers, energy neutralization, and mining output. Detailed breakdowns identify damage contributions by pilot and weapon type. Users can customize averaging intervals, graph settings, and window positions. A compact display can overlay EVE Online when running in borderless windowed mode. Multiple instances can monitor different characters simultaneously. Log playback supports reviewing previous combat activity, while profile settings preserve preferred configurations. -
13
swatchdog.pl started out as swatch, the "simple watchdog" for activity monitoring log files produced by UNIX's syslog facility. It has since been evolving into a utility that can monitor just about any type of log. The name has been changed to satisfy a request made by the old Swiss watch company.
-
14
The goal of PyTables is to enable the end user to efficiently and easily manipulate large datasets (both homogenous, i.e. arrays, and heterogenous, i.e. tables) on a persistent, hierarchical way.
-
15
dhcpd-pools
ISC dhcpd leases usage analysis
This is dhcpd-pools ISC dhcp shared network and pool range usage analysis. Purpose of command is to count usage ratio of each IP range and shared network pool which ISC dhcpd is in control of. Users of the command are most likely ISPs and other organizations that have large IP space. Program is written C. Design goal is to get analysis done quickly where there is lots of data. On cheap laptop the speed of analysis is roughly 100k leases per second. Number of ranges, or shared networks, does not make any significant difference in getting analysis done. -
16
Pimped Apache Server Status
Enhanced Apache Server Status page - for one or multiple servers
The pimped Apache status makes the Apache server status readable, sortable and searchable. The pimped Apache status can merge the status of several servers that opens the possibility to identify the troubleshooter even in a loadbalanced website. The webbased tool offers a multilanguage, skinable interface with a built-in updater. In several views you see most requested pages, vhosts, used methods, IPs that make the most requests and more. All views are sortable tables you can filter by a keyword and are available as API Request too to get its data as CSV, XML or JSON. Compatible with PHP 7+8 (and should run on PHP 5.x - but is not supported). -
17
Claude Code History Viewer
Desktop app and web server to browse, search and analyze AI coding
Claude Code History Viewer is an offline desktop application and web interface for browsing and analyzing AI coding assistant conversations. It supports 31 development assistants, including Claude Code, Codex CLI, GitHub Copilot, Gemini CLI, Cursor, and OpenCode. Users can explore conversations organized by project, session, and worktree. A unified search engine finds messages across different AI providers. Its analytics dashboard visualizes token usage, estimated costs, and provider distribution. A session board provides timelines and visual comparisons of development activity. Real-time file monitoring automatically updates conversations as new messages appear. The application also includes message navigation, Claude Code settings management, MCP server configuration, and accessibility controls. Conversation data remains stored locally. -
18
LogExpert
Windows tail program and log file analyzer
LogExpert is a free, open-source Windows log viewer and analyzer that provides a graphical alternative to the Unix tail command. It monitors log files in real time and automatically displays newly appended entries. Users can open multiple files in a tabbed interface and search their contents using text or regular expressions. Custom highlighting rules make important events, warnings, and errors easier to identify. Its filtering system can isolate matching entries in separate tabs for focused investigation. Bookmarks and configurable triggers help users navigate logs and respond to specific events. A plugin architecture supports structured columns, additional log sources, Unicode text, and formats such as log4j XML and compact Serilog. -
19
QLogExplorer
A blazing-fast, cross-platform log viewer and analyzer
QLogExplorer is a free, open-source log viewer and analyzer designed to inspect large log files without excessive memory consumption. It uses chunk indexing to support browsing and searching while files are still being processed. Its nonlocking file access allows other applications to rotate, move, or delete active logs. Users can convert unstructured text into organized columns using regular expressions with named capture groups. Native JSON and NDJSON support simplifies working with structured application logs. Advanced searches combine substring, regular expression, and range filters with AND, OR, and negation operators. Reusable templates preserve column layouts, highlighting rules, and predefined searches. Built with C++ and Qt, QLogExplorer is available for Windows and Linux. -
20
Screen Squid
Log analyser for Squid access.log
Screen squid is web-based interface for viewing reports based on Squid proxy server log files. It can be accessed from web-browser through more than 50 reports. No extra files, only DB. All reports generated "on-the-fly". And we got personal cabinet for each user/group. -
21
Caudium WebServer is a single process multi-threaded webserver. It has a built-in pre-processing language and includes an easy to use web-based configuration interface.
-
22
AfterGlow is a scripts which facilitates the process of generating link graphs from CSV input. AfterGlow is written in Perl and generates output that can be read by GraphViz, Gephi, etc. Source: https://github.com/zrlram/afterglow Tarball: http://pixlcloud.com/afterglow-2
-
23
Simple Event Correlator (SEC) is a lightweight event correlator for network management, log file monitoring, security management, fraud detection, and other tasks which involve event correlation.
-
24
lla is an LDAP Logfile Analyser , it generates statistics At this moment only NS 4.11 Logfiles have been tested. Your on your own if you want to analyse other type of Logfiles. But feel free to give feedback on your experiments and contribute patches to t
-
25
pcapfix
repair corrupted pcap and pcapng files
this tool tries to repair your broken pcap and pcapng files by fixing the global header respectively packet blocks and recovering the packets by searching und guessing the packet headers or blocks
