Log management
Store and search logs, and alert on patterns or counts in them.
Read first: What to alert on.
Lists: Log management tools in 2026 Best log management tools in 2026 Open source log management tools in 2026 Log management tools with a free plan in 2026 Self-hosted log management tools in 2026
-
Hosted event store for logs, traces and other event data, queried with the APL language, with dashboards and monitors. Integrates with Vercel, Cloudflare and OpenTelemetry.
-
Better Stack's log, metric and trace store built on ClickHouse, queried with SQL or a live-tail view. Shares an account with Better Stack uptime and on-call.
-
Remote logging for mobile and web apps: the SDK sends device logs to the cloud so you can read what happened on a user's device, with crash reports and user feedback.
-
Index-free log store (formerly Humio) that compresses and searches large log volumes quickly; sold by CrowdStrike for security and operations logging.
-
Small web UI that streams and searches live Docker container logs across hosts, with no log storage. Optional Dozzle Cloud adds grouped alerts and log analysis.
-
Elasticsearch, Logstash, Kibana and Beats: full-text indexing and search of logs with Kibana dashboards and alerting. Self-host the free distribution or buy Elastic Cloud.
-
Lightweight C log and metrics processor from the Fluentd project, common as the node-level agent in Kubernetes. Ships to Loki, Elasticsearch, cloud logging and OTLP.
-
CNCF graduated log collector that reads, parses, buffers and forwards logs to hundreds of outputs through a plugin system. Written in Ruby and C.
-
Log aggregation system that indexes only labels, not full log text, and stores chunks in object storage. Queried with LogQL from Grafana; hosted as part of Grafana Cloud.
-
Centralised log collection with parsing pipelines, stream routing, search and alert conditions. Graylog Open is free to self-host; paid editions add security analytics and archiving.
-
Terminal log file navigator that merges several log files into one timeline, highlights errors, and lets you query log lines with SQL. Runs locally, no server.
-
Log ingestion and search backed by Google BigQuery, popular with Cloudflare Workers, Vercel and Elixir apps. Now part of Supabase and open source.
-
SolarWinds hosted log management: ship logs over syslog or HTTP, search and filter them, and build charts and email alerts on the paid plans.
-
Hosted observability platform that grew out of managed ELK: log search and alerting on OpenSearch, plus metrics and traces. Priced per GB ingested.
-
ManageEngine's cloud SIEM that collects logs from servers, network devices and cloud services for search, audit reports and compliance reporting. Has a Free edition.
-
Single-binary store for logs, metrics and traces on object storage, with SQL search, dashboards and alerts. Self-host the open source build or use the pay-as-you-go cloud.
-
Apache-licensed fork of Elasticsearch and Kibana run under the Linux Foundation. Indexes and searches logs, with OpenSearch Dashboards, alerting and trace analytics plugins.
-
SolarWinds hosted syslog and app log aggregation with a live-tail web viewer, saved searches that trigger alerts, and archives to S3. Billed per GB.
-
Log and telemetry store written in Rust that keeps data as Parquet on object storage and queries it with SQL. Open source server, plus a hosted cloud and enterprise edition.
-
Rust search engine for logs and traces that indexes into object storage and searches there directly, with Elasticsearch-compatible and Jaeger APIs. The team joined Datadog in January 2025.
-
Self-hosted server for structured logs and traces, popular in .NET shops via Serilog. Search with a SQL-like syntax, build dashboards and send alerts.
-
Log indexing and search platform (Splunk Enterprise, self-hosted, or Splunk Cloud) with the SPL query language, dashboards and alerting. Widely used for security and IT operations.
-
Cloud log analytics and SIEM with a query language, dashboards, scheduled searches and security detections. Flex pricing based on data volume; trial only.
-
Rust observability pipeline from Datadog that collects, transforms and routes logs and metrics between sources and sinks, run as agent or aggregator.
-
Log database from the VictoriaMetrics team, run as a single binary or cluster, queried with LogsQL and viewable in Grafana. Accepts Loki, Elasticsearch and OTLP ingestion.
No tools match every filter. to see the full list.