Skip to content

Trevohack/Log-On-The-Go

Folders and files

NameName
Last commit message
Last commit date

Latest commit

Β 

History

10 Commits
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 

Repository files navigation

Log On The Go

Local-first security log analysis with on-demand intelligence.
Built for developers, sysadmins, and production servers


πŸš€ What is LOTG?

Log On The Go (LOTG) is a modern log analysis platform that lets you:

  • Analyze security logs on demand
  • Upload files or analyze logs by path
  • Inspect risk levels, attack patterns, and timelines
  • Keep everything local-first and controlled

No background magic.
No forced cloud dependency.
You decide when analysis happens.


🧩 Modes

πŸ”Ή Standard Mode (LOTG)

  • Upload log files
  • Analyze logs by file path
  • View detailed security reports instantly

πŸ”Ή Server Mode (LOTG Serv)

  • Designed for servers & businesses
  • Secure access via credentials
  • Analyze pre-configured server log paths
  • Same analysis engine, same results, cleaner workflow
  • Make a user using python -m app.init_users

LOTG Serv runs locally but is structured for production environments.


πŸ” What Gets Analyzed?

LOTG supports a wide range of logs including:

  • Linux auth logs (auth.log, secure)
  • SSH authentication events
  • Apache access logs
  • Syslog-style files
  • Mixed or unknown formats (graceful fallback)

Each analysis includes:

  • Risk score & level (LOW / MEDIUM / HIGH)
  • Suspicious IPs
  • Brute-force attempts
  • Attack chains & anomalies
  • Timeline & narrative summary

🧠 How It Works

  1. Choose a mode (Upload / Path / SERV)
  2. Trigger analysis manually
  3. Logs are parsed & normalized
  4. Security patterns are detected
  5. Results are returned as structured JSON
  6. Frontend presents expandable, readable reports

Nothing is modified.
Nothing runs in the background without you knowing.


πŸ–₯️ Tech Stack

Backend

  • Python
  • FastAPI
  • Read-only log parsing

Frontend

  • React (Vite)
  • Modern, dark, security-focused UI
  • Expandable analysis views

▢️ Running the App (Dev)

From the project root:

npm install concurrently --save-dev 
cd frontend && npm install && cd .. 
npm run dev 

Demo

Click to expand demo

πŸ“Š Log Analysis Demo

Input

  • auth.log
  • apache2.log

What LOTG shows

  • Risk score: HIGH
  • Brute-force detection
  • Attack chain correlation
  • Timeline of suspicious activity

Screenshot

image image image image

Sample Output (JSON)

{
  "risk_level": "HIGH",
  "risk_score": 85,
  "attackers": 3
}

About

Local-first security log analysis with on-demand intelligence

Resources

License

Stars

Watchers

Forks

Releases

No releases published

Packages

 
 
 

Contributors