Loupe: Log Forensics

From the App Store Source

Loupe is on-device log forensics for serious investigations — incident response, security triage, and root-cause analysis, all running entirely on your Mac. Drop in logs from many sources — syslog, nginx and Apache access logs, the macOS unified log, JSON, Windows EVTX, packet captures (pcap/pcapng), and email — and Loupe correlates them into a single unified timeline. The story jumps out at a glance: rate spikes, error bursts, and severity escalations are surfaced automatically. The built-in narrator writes a clear root-cause analysis for you, and every claim it makes is anchored to byte-level citations in your original files — click any statement to jump straight to the raw bytes. A SHA-256 hash is recorded at ingest, so chain of custody is preserved end to end. Nothing you ingest ever leaves your Mac. No network requests, no telemetry, no accounts. Export a tamper-evident, AES-256 encrypted bundle to hand off — audit log and hashes included. FEATURES • Unified, correlated timeline across every source • Native parsers: syslog, nginx/Apache, unified log, JSON, EVTX, pcap/pcapng, email • Automatic anomaly detection (error bursts, rate spikes, escalations) • AI narrator writeups with byte-level citations • SHA-256 chain of custody + hash-chained audit log • AES-256 encrypted export bundles (HTML, Markdown, PDF, IODEF) • 100% on-device — no network, no telemetry Start with a 14-day free trial. Loupe Pro is $9.99/month or $99/year. Terms of Use (EULA): https://useloupe.tools/legal/terms Privacy Policy: https://useloupe.tools/legal/privacy

Every number in these answers comes from the data shown above on this page.