Did someone get into your server?

Free with limits

auth.log, journalctl, Apache/Nginx or Windows events: brute force, logins after an attack and what happened next.

0 of 3 free uses today

Debian/Ubuntu: /var/log/auth.log* · RHEL/Fedora: /var/log/secure* (.gz files work too). If they do not exist, from the journal:

journalctl --since "-7d" -o short-iso _COMM=sshd + _COMM=sudo + _COMM=useradd + _COMM=usermod > accesos.log

Or everything at once, including rotated and web logs, with the collector (PRO): sudo python3 recoger_logs_linux.py

Drop one or more files.log, .gz or the Windows JSON: they never leave your browser

Or paste the lines

Log collectors for Linux and Windows (read-only)

Available on the PRO plan.