Full-sail search
Hand-tuned AVX-512 and NEON kernels scan compressed columns without decoding them first. Regex, substring and token search all run at memory bandwidth.
logship is the next-gen log explorer, forged in Rust. Columnar storage, SIMD-powered search and a query language you already know — so you find the treasure while the question is still in your head.
Every plank — ingest, storage, query — is built in Rust to keep latency in the milliseconds, even when your logs run terabytes deep.
Hand-tuned AVX-512 and NEON kernels scan compressed columns without decoding them first. Regex, substring and token search all run at memory bandwidth.
Logs are sharded into Arrow-compatible columns with zstd + dictionary encoding. Expect 12–20× compression on typical JSON logs.
Stream millions of events per second into your terminal or browser. Filters apply at ingest, so you only see what matters.
Ship plain text, JSON or logfmt. Fields are discovered automatically and indexed lazily — no mappings, no reindexing, no YAML.
One 18 MB binary. No JVM, no ZooKeeper, no armada to babysit. Runs on a laptop, scales out to object storage.
100% safe Rust on the hot path. No GC pauses, no segfaults at 3am, no leaks below deck — just predictable p99s.
Full-text search + group-by over 1 TB of JSON logs on a single 32-core node. Lower is better.
Native builds for macOS, Windows and Linux on x86_64 and ARM64, straight from GitHub Releases.
Checking GitHub for the latest release… open it on GitHub →