Log Analysis

Technical Guide

Log Investigation Lives in One Person’s Head — Four Habits of a Team That Can Hand It Over

The handover note was three lines long. The query you built yesterday — could anyone else rebuild it right now…
Technical Guide

The Morning the Monthly Batch Died — Four Realities of Running a Data Pipeline

line 48,213,996. That's all you got. Can you look at that line right now? The pipeline hands you a coordinate.…
Technical Guide

“Please Produce the Logs from Three Years Ago” — Four Ways to Survive an Audit by Design

Two weeks to produce them. You retained them, yes. But how many days does it take to get them back out? Retent…
Technical Guide

Before You Carry Production Logs Home — Four Points of Friction Between Logs and Your Dev Environment

A build log, 480,000 lines. One line in there explains the failure. What do you do before you reach for the sc…
Technical Guide

Logs as Evidence — Four Principles for Preserving, Excerpting, and Proving Integrity

The reboot cost thirty-eight minutes of log. Fixing it was right. What should you have taken with you first? L…
Technical Guide

“less Is Enough” — Until It Isn’t: Four Limits of Command-Line Craft

[Update, 16 October 2026] Speed today — the first question is still on par; the gap opens from the second ques…
Comparison

How to Open and Search a 50GB Log File on a 16GB PC

[Update, 16 October 2026] Speed today — the gap from the second search on is wider than before; the first sear…
Technical Guide

The Traces Are in the Raw Log — Four Views on Lateral Movement, SQLi, and After-the-Fact Investigation

The encryption took eleven minutes. What matters is the six days before it. Which log do you read first, and i…
Technical Guide

“I Ordered It and It Never Arrived” — Four Support-Desk Log Investigations

One order number. That's the whole lead. The ticket says nothing else. The record of what happened is scattere…
Comparison

Is ripgrep Really the Fastest on a 51 GB Single File? — rg vs grep vs UwView Pro, Measured

rg lost to grep. You've been handed a 51 GB log, and your fingers type rg — the same reflex you use on a repos…