logmerger

logmerger [options] files...

logmerger is a TUI utility for viewing a merged display of multiple log files, correlated by timestamp. It reads plain text logs, gzip-compressed logs (.gz), CSV (.csv) and JSONL (.jsonl) files, and has experimental support for packet capture (.pcap) files.Log entries from the various files are sorted by their timestamps and presented in a unified, color-coded display where each file gets its own column for easy identification. Many common timestamp formats are detected automatically; additional formats can be supplied with --timestamp_format.

FILES

One or more log files to merge. Files ending in .gz, .csv, .jsonl, or .pcap (experimental) are read accordingly.

Show the merged output in the interactive TUI browser. This is the default.

Display the merged log data as an inline merge to stdout instead of opening the TUI.

Save the merged output to a file. Use - for stdout; files ending in .md are written as a Markdown table.

Start of the time window to select for merging.

End of the time window to select for merging.

Clip merging to the time range of the logs in the first log file.

Ignore log lines that do not have a timestamp instead of attaching them to the previous entry.

Total screen width to use for interactive mode.

Add a line-number column to the output.

Encoding to use when reading the log files.

One or more custom strptime-style timestamp formats to recognize.

Relies on recognizable timestamps in each log file for accurate merging. Lines without a timestamp are attached to the preceding entry unless --ignore_non_timestamped is given. pcap support requires the optional dependency, installed with `pip install logmerger[pcap]`.

logmerger is an open-source tool written in Python by Paul McGuire (ptmcg) and distributed on PyPI as the logmerger package (`pip install logmerger`).

lnav(1), tail(1), sort(1)