Open Source PHP Log Analysis Software for Windows

OSSIM, AlienVault’s Open Source Security Information and Event Management (SIEM) product, provides event collection, normalization and correlation. For more advanced functionality, AlienVault Unified Security Management (USM) builds on OSSIM with these additional capabilities: * Log management * Advanced threat detection with a continuously updated library of pre-built correlation rules * Actionable threat intelligence updates from AlienVault Labs Security Research Team * Rich analytics dashboards and data visualization

Screen squid is web-based interface for viewing reports based on Squid proxy server log files. It can be accessed from web-browser through more than 50 reports. No extra files, only DB. All reports generated "on-the-fly". And we got personal cabinet for each user/group.

The pimped Apache status makes the Apache server status readable, sortable and searchable. The pimped Apache status can merge the status of several servers that opens the possibility to identify the troubleshooter even in a loadbalanced website. The webbased tool offers a multilanguage, skinable interface with a built-in updater. In several views you see most requested pages, vhosts, used methods, IPs that make the most requests and more. All views are sortable tables you can filter by a keyword and are available as API Request too to get its data as CSV, XML or JSON. Compatible with PHP 7+8 (and should run on PHP 5.x - but is not supported).

AutoIndex is a PHP script that makes a table that lists the files in a directory, and lets users access the files and subdirectories. It includes searching, icons for each file type, an admin panel, uploads, access logging, file descriptions, and more.

Analyse et filtrage de l'observateur d'évčnements de Windows NT. Récupčre les évčnements, les stocke dans une base MySQL et une série de pages PHP permettent de ne retenir que les évčnements les plus importants.

Application to display, as well as interpret, firewall information from a database to serve a variety of users needs. The application is online and cross-platform, written using PHP.

AVirCAP is a system for manual and / or automated detection of CodeRed and Nimda type of hack attempts and virtually all other kinds of "logable" intrusion attempts. It can work stand alone or together with other additional AVirCAP machines in the LAN/W

Capra is a Open Source tool to quickly get some nice and useful reports out off your Watchguard Fireware log files.

DAD is a Windows event log and syslog management tool that allows you to aggregate logs from hundreds to thousands of systems in real time. DAD requires no agents on the servers or workstations. Correlation and analysis is driven through a web front end.

The Distributed Intrusion Detection System.

IPHPLog (IP PHP Log) is a simple software written in PHP, JS and SQL that runs over a MySQL database manager system . IPHPLog can log the information of your visitors and organize that on a data base with GeoIP.

Ida, is a Apache log security analyzer written in PHP. It will scan Apache logs and report about security incidents like SQL injections, XSS attacks, path traveling and so on.

Log File Paladin is a wxWdigets based client and PHP based server application for automated monitoring of remote logs. It is designed to help technicians effortlessly monitor client machines which would otherwise receive no attention.

An easily configurable single php page for viewing graphs from MRTG via RRDTool.

Mojo Webstats is a simple web statistics tool. It uses Javascript, PHP and MySQL to process web statistics. Includes: 1) date/time, 2) document location and title, 3) ip address and hostname, 4) browser version, 5) visitor resolution, and 6) referrer.

Monolog sends your logs to files, sockets, inboxes, databases and various web services. See the complete list of handlers below. Special handlers allow you to build advanced logging strategies. This library implements the PSR-3 interface that you can type-hint against in your own libraries to keep a maximum of interoperability. You can also use it in your applications to make sure you can always use another compatible logger at a later time. As of 1.11.0 Monolog public APIs will also accept PSR-3 log levels. Internally Monolog still uses its own level scheme since it predates PSR-3. Tidelift delivers commercial support and maintenance for the open source dependencies you use to build your applications. Save time, reduce risk, and improve code health, while paying the maintainers of the exact dependencies you use. Monolog 1.x support is somewhat limited at this point and only important fixes will be done. You should migrate to Monolog 2 where possible to benefit from all the features.

Php Log Analyzer (aka PLA) is a Log Analysis tool for Apache. There are lots of log analyzer softwares available on the internet but most of them have their own data storage ways. PLA is a tool to analyze log files and store results into MySQL databases.

SIGOF (Security Information Graphics Oriented Forensic) aims at synthetizing security log, stored in a acid/base database schema, in order to provide a graphical / visual oriented security forensic and statistical analysis.

Slogbase is a lightweight database attached to objects in Second Life that provides the same functionality as Apache Web Server logs. It uses ordinary LSL code in Second Life to send sensor data to an external PHP/MySQL application.

Web application to manage abuse ssh usage and contacting the responsible network operater about the abuse.

PHP Daemon & Frontend for Squid Web Proxy Server. Provides both User Based bandwidth Monitoring, and Squid Logfile Analysys. Allows users to generate graphs of traffic usage, based on many different factors.

SquidFire is a PHP script to search Squid logs by IP or keywords. Its designed to make tracking specific users and sites easy.

SPA - Streaming Performance Analyzer is a utility to load Windows Media and Quicktime streaming server logs into an Oracle or MySQL database. A WEB based interface is provided from which reports may be viewed.

A PHP script for parsing MRTG log files and displaying network traffic statistics. It can display total traffic, avg. rate, peak time and rate over a selectable period of time. We wish to later support RRD tool and maybe even more log formats.

TraffStats: network Traffic Statistic - is a monitoring and traffic analysis software, using SNMP to collect data from any enabled device. - has the ability to generate graphs (using jpgraph) with the option to compare and sum up different devices.