LoggiFly: Real-time Docker Log Monitoring and Notifications

Summary

LoggiFly is a lightweight tool designed to monitor Docker container logs for predefined keywords or regex patterns. It provides instant alerts for security breaches, system errors, or custom events, sending notifications through various channels like Ntfy or Apprise. This versatile solution helps users stay informed about their containerized applications and automate responses to critical log events.

Use at your own risk

OSRepos shares public repositories for knowledge and discovery only. Any installation, execution, configuration, or use of code from these repositories is the user's own responsibility. Always review the repository, source code, dependencies, licenses, and security implications before running or installing anything. OSRepos is not responsible for issues, damages, or losses resulting from third-party repositories.

Introduction

LoggiFly is an efficient, lightweight tool for monitoring Docker container logs. It allows users to define specific keywords or regex patterns to detect events like security breaches, system errors, or custom application behaviors. Upon detection, LoggiFly sends instant notifications to your preferred channels, ensuring you're always aware of what's happening within your containerized environment. It's ideal for catching security breaches, debugging crashes, restarting containers on errors, and monitoring custom app behaviors.

Installation

LoggiFly is designed for easy deployment, primarily leveraging Docker, Docker Swarm, and Podman environments. While detailed setup instructions are available in the official documentation, a typical installation involves pulling the LoggiFly Docker image and configuring your config.yaml file to specify containers to monitor and notification rules.

For comprehensive guidance on getting started, including specific commands and configuration examples, please refer to the official documentation.

Examples

LoggiFly excels in various monitoring scenarios. For instance, you can configure it to detect failed login attempts in a Vaultwarden container, immediately alerting you to potential security threats. Another practical use is monitoring for specific error messages in application logs, triggering an automatic restart of the problematic container to maintain service availability. It can also track custom events, such as a user downloading an audiobook from your Audiobookshelf server, providing insights into application usage.

Why Use LoggiFly

LoggiFly stands out with its robust feature set, making it an invaluable tool for anyone managing Docker environments. Key capabilities include:

Flexible Log Detection: Supports plain text, regex, and multi-line pattern matching for comprehensive log analysis.
Extensive Notification Support: Integrates with Ntfy and Apprise, offering alerts across 100+ services like Slack, Discord, and Telegram.
Automated Actions: Ability to trigger container stop or restart based on critical log events.
Contextual Alerts: Automatically attaches relevant log files to notifications for quicker debugging.
Dynamic Configuration: Reloads config.yaml automatically upon changes, ensuring continuous monitoring without manual restarts.
Remote Host Monitoring: Connects to and monitors multiple remote Docker hosts.
Multi-Platform Compatibility: Runs seamlessly on Docker, Docker Swarm, and Podman.