Alternatives to Sumo Logic in 2026

Loki grafana

Like Prometheus, but for logs.

Complete system Production-ready You already use Prometheus and Grafana and want low-cost centralised logs.

★ 29k AGPL-3.0 Go Active, pushed today

OpenObserve openobserve

Open source observability platform for logs, metrics, traces, RUM (web, android, ios), Session replay, pipelines, SLO and LLM observability. A sophisticated, simple and highly performant alternative to Datadog, Splunk, and Elasticsearch with 140x lower storage costs and single binary deployment.

Complete system Production-ready You want a cheaper self-hosted alternative to Elasticsearch, Splunk or Datadog for logs and traces.

★ 23k AGPL-3.0 TypeScript Active, pushed today

Dozzle amir20

Realtime log viewer for containers. Supports Docker, Swarm and K8s.

Complete system Production-ready You run containers on a few hosts and want to watch logs in a browser without a logging stack.

★ 15k MIT Go Active, pushed today

Quickwit quickwit-oss

Cloud-native OSS search engine for observability

Building block Usable You need cheap, large-scale log search and want to move off Elasticsearch.

★ 12k Apache-2.0 Rust Active, pushed today

LNAV tstack

Log file navigator

Developer tool Production-ready You read server or application logs on the command line and want more than less and grep.

★ 11k BSD-2-Clause C++ Active, pushed yesterday

HyperDX hyperdxio

Resolve production issues, fast. An open source observability platform unifying session replays, logs, metrics, traces and errors powered by ClickHouse and OpenTelemetry.

Complete system Usable You want a Datadog-style debugging experience self-hosted on ClickHouse.

★ 10k MIT TypeScript Active, pushed today

Nerdlog dimonomid

Nerdlog: fast, remote-first, multi-host TUI log viewer with timeline histogram and no central server

Developer tool Usable You manage a handful of servers and want fast cross-host log search without deploying a logging stack.

★ 1.6k BSD-2-Clause Go Active, pushed 30 days ago

CLP y-scope

Compressed Log Processor (CLP) is a free log management tool capable of compressing logs and searching the compressed logs without decompression.

Building block Usable You store very large log volumes and storage cost matters more than a polished UI.

★ 1.1k Apache-2.0 C++ Active, pushed today

LogTide logtide-dev

🛡️ Open-source, self-hosted log management. Privacy-first alternative to Datadog & ELK. Lightweight, GDPR-compliant, and deployed in minutes with Docker.

Complete system Experimental A small team wants simple self-hosted logging in Docker without the weight of ELK.

★ 458 AGPL-3.0 TypeScript Active, pushed today

Rootprint rootprint

Open-source, self-hosted logs and traces with full-text search directly on S3-compatible object storage.

Complete system Experimental You want cheap log and trace retention on object storage with a simple UI.

★ 441 Apache-2.0 Svelte Active, pushed today

Loggo aurc

A powerful terminal app for structured log streaming

Developer tool Usable You read JSON logs in the terminal and want them readable and filterable.

★ 294 MIT Go Active, pushed 2 months ago

Graylog Ansible Role Graylog2

Ansible role which installs and configures Graylog

Developer tool Usable You deploy Graylog servers with Ansible.

★ 224 Apache-2.0 Jinja Active, pushed 8 days ago

ZeroTrust Your Home lucadibello

🔐 Securing Your Digital Sanctuary, Trust None, Protect Everything.

List, course or other material Usable You want a worked example for hardening a home server setup.

★ 192 MIT Shell Active, pushed 38 days ago

Timberjack DeRuina

Timberjack is a Go log rolling library with support for size-based, time-based, and manual rotation.

Building block Usable Your Go service writes its own log files and you need time-based rotation that lumberjack lacks.

★ 171 MIT Go Active, pushed 16 days ago

FlowG link-society

Low Code / Visual Scripting log processing software

Complete system Experimental You want low-code log pipelines with a UI instead of writing Vector or Logstash configs.

★ 170 MIT Go Active, pushed today

Logrotatewin plecos

This is a Windows implementation of the logrotate utility found in Linux platforms. The goal is to use the same command line parameters and files as the Linux version.

Developer tool Usable You manage log files on Windows servers and want logrotate's familiar behaviour.

★ 141 GPL-3.0 C# Active, pushed 21 days ago

DTail mimecast

DTail is a distributed DevOps tool for tailing, grepping, catting logs and other text files on many remote machines at once.

Developer tool Usable You troubleshoot across a fleet of servers and logs are not centralised.

★ 130 Apache-2.0 Go Active, pushed 42 days ago

Gol kevincobain2000

No you don't need a 64GB RAM and ElasticSearch. An all in One - Dependency free (docker, local, remote) Log Viewer in Browser. Written in GO with God Speed.

Developer tool Usable You want to read and search a server's logs in a browser without setting up a logging stack.

★ 117 MIT Astro Slowing, pushed 4 months ago

Logagent-js sematext

Extensible log shipper with input/output plugins, buffering, parsing, data masking, and small memory/CPU footprint

Building block Usable Only if you already use it; Fluent Bit or Vector are better maintained.

★ 391 Apache-2.0 JavaScript Quiet, pushed 2 years ago

LogESP dogoncouch

Open Source SIEM (Security Information and Event Management system).

Complete system Experimental Only to study a simple SIEM design.

★ 227 MIT Python Quiet, pushed 3 years ago

sematext-agent - Docker sematext

Sematext Docker Agent - host + container metrics, logs & event collector

Integration Experimental Not for new setups; Sematext has replaced it with newer agents.

★ 209 Apache-2.0 JavaScript Quiet, pushed 3 years ago

Octopussy Octopussy-Project

Octopussy - Open Source Log Management Solution

Complete system Experimental Not for new deployments.

★ 164 GPL-3.0 Perl Quiet, pushed 6 years ago

Splunk Enterprise Cisco

Unify security and observability at petabyte scale on the Splunk data platform for trusted AI. Stop threats and prevent downtime at machine speed.

Complete system Production-ready A large organisation needs one platform for security and operations data at high volume and has staff who can write SPL and run the deployment.

Commercial

Loggly SolarWinds

Log Analysis / Log Management by Loggly: the world's most popular log analysis & monitoring in the cloud. Free trial. See why ⅓ of the Fortune 500 use us!

Complete system Production-ready You already use SolarWinds products and want hosted log search that fits with them.

13 readers a month Since 2009 Commercial

Papertrail SolarWinds

Papertrail lets you search, react, and resolve infrastructure issues instantly with real-time log tailing. Sign up and start debugging.

Complete system Production-ready A small team wants hosted log tailing and search set up in minutes, without running its own log stack.

Commercial

Better Stack Logs Better Stack

30x cheaper than Datadog. Predictable pricing. Exceptional customer support. 7,000+ happy customers. 60-day money back guarantee.

Complete system Production-ready A startup or small team wants cheaper hosted logging than Datadog, with uptime checks and on-call from the same vendor.

Commercial