Project Description
LogJoint is a log viewer tool. It makes it easier to analyze the work of multicomponent multithreaded applications by joining multiple logs into single view.

What differs LogJoint from other log viewers
The unique feature of LogJoint is the ability to join multiple logs into single view on the time basis. You can think of it as if the messages from several logs were put into the single file and sorted by time. LogJoint does it efficiently, the sizes don't matter. This is useful when you have to analyze the behavior of multi-component software system when the components interact with each other and each component writes its own log. For instance you may have a system that consists of several services and kernel drivers. Most likely these components write different types of logs into different locations. Suppose something bad happened at 2 AM in your system and now you want to find out the reason. You can open all the logs in LogJoint, locate 2 AM on the timeline, and check how the components were interacting at that time.

Log sources
LogJoint supports several types of logs:
  • Text files. LogJoint is not limited to any specific log file format. Instead, it can be taught to parse any format by providing an appropriate config file. LogJoint ships with the set of configs for some common formats (see Features section for details). LogJoint has wizards that generate configs automatically (currently supported: log4net and NLog pattern layout string import). Finally, the user can teach LogJoint how to parse their logs. That's for advanced users thought.
  • Windows Event Log
  • LogJoint can listen to OutputDebugString().

  • Support of huge log files. LogJoint doesn't load the whole files into memory. It loads the requested parts and moves the window when it's needed.
  • View file(s) tail function.
  • Quick navigate to a certain time by using the timeline.
  • Bookmarks.
  • Embedded support for:
    • Log4J XML format
    • Log4Net XML format
    • Any log4net format with custom layout
    • Any NLog format with custom layout
    • Logs produced by System.Diagnostics.TextWriterTraceListener class
    • Logs produced by System.Diagnostics.XmlWriterTraceListener class
    • Azure Diagnostics Log (WADLogsTable)
    • Sysinternals formats (filemon, procmon)
    • HTTP Error logs (Http.sys)
    • Microsoft IIS log formats
    • URLScan IIS filter logs
    • Oracle 11g alert log
    • Windows Event Log
  • Search. Searching function is not limited to the messages that are currently in memory.
  • Filters. You can filter out irrelevant messages or show the messages that you are interested in.
  • Highlighting. You can highlight messages. You can exclude from highlighting as well.
  • Automatic merge of rotated logs
  • Drag&drop support from Windows Explorer or from a web browser
  • Messages from different threads and log sources have different background color. Whole thread of log source can be hidden by single click.
  • A log source may provide "frames" information: messages that say "we entered a function, we left the function". Frames are handled by LogJoint special way. Frames can be collapsed/expanded, you can quickly navigate to the begin of to the end of the frame.


Last edited Mar 2, 2013 at 5:20 PM by sergeys, version 12