Spoor Ledger

Spoor Ledger — Log Analysis Workbench

A lightweight log analysis tool for developers, site reliability engineers, and backend teams. Stop digging through scattered .log / .gz files on a desktop, re-running the same CLI filters, or chasing trace_id links that never line up. Import a log file on your phone to browse, filter, query, summarize, and export—all parsing happens on-device so you can focus on the investigation itself.

What it brings to your workflow

Smart event browsing and filter tracking

Open logs: Supports text logs, JSON lines, access logs, and .gz archives; auto-detects UTF-8 / GB18030; remembers recently opened files for one-tap reopen.
Event list: Filter by level, keyword, time range, and correlated fields; bookmarks, notes, and full-text highlighting; tap trace_id / request_id to jump to related events on the same chain.
Inspector panel: See the current log source, active parser, and recognized fields in one place; switch templates and rebuild the index anytime.

Advanced query console

Pipeline syntax: e.g. level:error | stats count by level, where duration_ms > 500 | sort time desc—filter, sort, and aggregate quickly.
SQL subset: Common SELECT … FROM logs WHERE … GROUP BY … ORDER BY … LIMIT …; aggregates shown as tables.
Saved views and history: Save queries as favorite views; replay recent runs in one tap; export results directly.

Parser templates and field semantics

Built-in templates: Generic auto-detect, JSON lines, access logs (Nginx/Apache), and app logs with stack merging.
Custom parsing: Regex named capture groups or Grok patterns; map fields to timestamp / level / message body; multiline merge rules with live preview; save and reuse templates.

Export and diagnostics

Multi-format export: Filtered and query results as CSV / JSON / HTML; statistics reports with level and timeline charts, shared via the system share sheet.
Diagnostics panel: File info, parse coverage, unrecognized samples, large-file read performance, index capacity, and query cache management—useful for review and self-checks.

Log files, bookmarks, notes, queries, and templates stay on this device only and are never uploaded to any server.