LogRadarAI v2.2.3

Features

Screenshots

LogRadarAI features a modern, responsive interface with both light and dark themes.

Architecture

LogRadarAI collects logs from multiple sources, processes them through a central monitor, and leverages local AI for intelligent analysis.

Quick Start

🐳 Docker Compose (Recommended)

git clone https://github.com/ftsiadimos/logaimonitor.git
cd logaimonitor
cp docker-compose.example.yml docker-compose.yml
# Edit docker-compose.yml — set SECRET_KEY, OLLAMA_HOST,
# TELEGRAM_BOT_TOKEN, TELEGRAM_CHAT_ID (or configure via the web UI later)
docker compose up -d

Open http://localhost:5059.

📦 Manual Installation

pip install -r requirements.txt

# Start Redis
docker run -d --name redis -p 6379:6379 redis:7-alpine

# Install Ollama and pull a model
curl -fsSL https://ollama.ai/install.sh | sh
ollama pull llama3.2
ollama serve

# Run the app
python app.py

Configuration

Environment variables can be set in docker-compose.yml or changed later via the web UI (Settings).

Rsyslog Configuration

On each Linux server create /etc/rsyslog.d/99-logaimonitor.conf:

# Forward all logs via UDP
*.* @logaimonitor-host:5514

# Or via TCP (more reliable)
*.* @@logaimonitor-host:5515

sudo systemctl restart rsyslog

Forward Specific Logs Only

# Auth / security only
auth,authpriv.* @logaimonitor-host:5514

# Errors and above
*.err @logaimonitor-host:5514

# Kernel messages
kern.* @logaimonitor-host:5514

Test with logger

logger -n logaimonitor-host -P 5514 -d "Test message from server"

Docker Logs from External Hosts

Option 1 — Docker Syslog Logging Driver (Recommended)

docker run -d \
  --log-driver=syslog \
  --log-opt syslog-address=udp://logaimonitor-host:5514 \
  --log-opt tag="{{.Name}}" \
  your-image

Or set as default in /etc/docker/daemon.json:

{
  "log-driver": "syslog",
  "log-opts": {
    "syslog-address": "udp://logaimonitor-host:5514",
    "tag": "{{.Name}}"
  }
}

sudo systemctl restart docker

Option 2 — Docker Remote API

Edit /etc/docker/daemon.json on the remote host:

{ "hosts": ["unix:///var/run/docker.sock", "tcp://0.0.0.0:2375"] }

Then set DOCKER_SOCKET=tcp://remote-host:2375 on LogAI Monitor.

Option 3 — rsyslog on Remote Host

# /etc/rsyslog.d/99-docker-forward.conf
module(load="imjournal")
:programname, startswith, "docker" @logaimonitor-host:5514

Telegram Notifications

Set up Telegram alerts in four simple steps:

1. Create a bot with @BotFather and copy the bot token.
2. Send a message to your bot.
3. Get your chat ID from https://api.telegram.org/bot<TOKEN>/getUpdates.
4. Set TELEGRAM_BOT_TOKEN and TELEGRAM_CHAT_ID via environment variables or the Settings page.

Usage

Creating Filters

1. Go to Filters in the sidebar and click Create Filter.
2. Configure conditions: Severity, Source Contains, Message Contains, or Message Regex.
3. Enable Telegram notification if desired, then save.

AI Analysis

1. Go to AI Analysis and click Analyze Recent Logs for a batch analysis.
2. Use the Chat Assistant to ask questions about your logs.
3. Click any log entry → Analyze with AI for a detailed breakdown.

Docker Containers

Go to Docker Containers in the sidebar to view all running containers, browse their logs, and trigger AI analysis per container.

API Reference

LogRadarAI exposes a RESTful API for programmatic access. All endpoints require authentication.

Ports

Tech Stack

Troubleshooting

📋 Logs not appearing

• Check rsyslog configuration on source servers.
• Verify network connectivity on ports 5514/5515.
• Check firewall rules.
• View container logs: docker compose logs -f logaimonitor

🤖 Ollama not working

• Verify Ollama is running: curl http://localhost:11434/api/tags
• Check the model is pulled: ollama list
• Verify the OLLAMA_HOST environment variable.

💬 Telegram not sending messages

• Verify the bot token is correct.
• Check the chat ID — you must start a conversation with the bot first.
• Use Test Connection in Settings.