superlog

Agentic observability for OpenTelemetry: ingest traces, logs and metrics, group noisy signals into incidents, then let pluggable agent runners investigate while you sleep. Self-hosted, open-core.

1,381 103 TypeScript Apache-2.0updated 2 days ago

agents

View on GitHubDispute this mapping →

Curator's take

Worth a look if you already emit OTel and want triage automated: it fingerprints and groups signals into incidents, then hands them to an agent runner you install into your coding agent through their skills pack, instead of paging a human first. The community edition here is genuinely usable and self-hosted — web app, API, OTLP proxy, workers, ClickHouse-backed queries, Postgres schema. Read the open-core line carefully: the shipped default runner only records a local incident summary, so the investigation runtime is yours to plug in or theirs to host, and 'self-heal' is the pitch rather than something the free edition does unattended. YC-backed and early; needs Postgres, ClickHouse and Docker.

Mapped by ShipWithAI editors · links verified

README.md

Website · Code · Skills · Helpers · Discord

About

Superlog is an open-source agentic telemetry system. It ingests traces, logs, and metrics, groups noisy signals into incidents, and watches your infra while you sleep.

Installation

You can install Superlog in your project by using our skills in your favourite coding agent:

Run npx skills add superloglabs/skills --all and use the skills to install Superlog in this project

What is Superlog?

Superlog is an open-core observability workspace for OpenTelemetry data. It ingests traces, logs, and metrics, groups noisy signals into incidents, and gives teams a local-first product surface for debugging production systems.

This repository contains the fully open-source, free community edition:

Web app and API
OTLP ingest proxy
Worker processes for incident grouping and background jobs
Postgres schema and ClickHouse-backed telemetry queries
Agent runner interfaces for pluggable investigation runtimes
A default community agent runner that records a local incident summary

We also provide a hosted Superlog Cloud edition with a free tier, a pay-to-go plan and monthly credit packs.

Quick Start

Prerequisites:

Node.js 20+
pnpm 9+
Docker

Install dependencies:

pnpm install

Start the local stack:

docker compose up -d
pnpm --filter @superlog/db db:migrate
pnpm dev

The default local services are:

Web: http://localhost:5173
API: http://localhost:4100
OTLP intake: http://localhost:4101

Development

Run typechecks:

pnpm typecheck

Repository Layout

apps/web - Vite/React frontend
apps/api - HTTP API
apps/proxy - OTLP intake proxy
apps/worker - background workers and agent orchestration
packages/db - Drizzle schema and migrations
packages/fingerprint - telemetry fingerprinting helpers

License

Superlog is licensed under the Apache License 2.0.

Continue your stack

What teams reach for next — and why each earns a place beside superlog. Ranked by curator confidence.

Pairs well with

allama

Open-source AI security automation (SOAR): visual playbook builder, autonomous triage agents, and 80+ SIEM/EDR/identity/ticketing integrations. Self-hosted, multi-tenant.

Why it fitsThe same autonomous-triage pattern on the other side of the wall: allama routes SIEM and EDR alerts through playbooks and security agents, Superlog routes OTel incidents through investigation runners. Adjacent halves of an on-call stack.

Alternative to See all + compare →

opensre

Open-source framework for AI SRE agents plus the RL training and evaluation environment they need — connect 60+ tools you already run and investigate incidents on your own infra.

Why it fitsBoth put agents on incident duty. OpenSRE is a framework plus RL environment for building and evaluating SRE agents against 60+ tools you already run; Superlog is the observability product — ingest, fingerprint, group — with agent runners hanging off it. Build versus operate.