# loglook loglook is a self-hosted infrastructure app. Small read-only viewer and API for the syslog files Unraid's built-in syslog server collects (syslog-IP.log and its rotated copies). It is open source and self-hosted, installable on Unraid. Canonical page: https://ourlocalhost.com/app/7206/loglook ## Description Small read-only viewer and API for the syslog files Unraid's built-in syslog server collects (syslog-IP.log and its rotated copies). Pick a device and a time window and loglook finds the lines by their own timestamps across the live and rotated files, so you never open a multi-gigabyte file by hand. Three views of any window: the lines, top patterns (MACs, IPs and numbers collapsed so repeats become one row with a count) and counts per captured value. Filters take plain text or a regex, and a window can end earlier to compare today with previous days. A read-only JSON API behind bearer tokens serves the same queries to scripts and automations such as n8n. Tokens are created in the web UI, shown once, and stored hashed. Setup: set Syslog Folder to your Unraid syslog share (Settings, Syslog Server, Local syslog folder). Open the web UI, create the admin user, then open Sources: every ## Platform availability Available on 1 of 9 platforms: Unraid. ## Health score 39/100 (Low), based on 3 of 4 factors. - Maintained: 72 (last commit 0 days ago) - Popular: 0 (0 GitHub stars) - Easy to install: 20 (1 install platform, Docker image) ## Links - Unraid: https://ca.unraid.net/apps/app_00e69662c51f5dfe - GitHub: https://github.com/ccmpbll/loglook ## Common questions ### Which volumes should I mount when running loglook in Docker? Mount the Unraid syslog share read-only to /logs, plus writable /config and /data folders. The README uses /mnt/user/syslog:/logs:ro, ./config:/config, and ./data:/data. ### What should I set if I expose the web UI through a reverse proxy? Serve loglook over HTTPS behind the reverse proxy. Also set LOGLOOK_SECURE_COOKIES=true. ### How does loglook treat syslog lines that do not include a time zone? It reads them as local time using the timezone chosen on the Sources page. The default is America/New_York, and the year is inferred. ### How are API tokens handled for scripts and automations? Tokens are created in the web UI, shown once, and only a hash is stored. Send them to the read-only JSON API as Authorization: Bearer . ### Can I edit sources.yml by hand, and what happens if I make it invalid? Yes, plain YAML changes are picked up, but saving from the Sources page rewrites the file and loses comments. If an edit stops parsing, the last good configuration stays in use and changes are paused until the file is fixed or deleted. --- Source: Our Local Host (https://ourlocalhost.com/app/7206/loglook), the self-hosted and open-source app directory.