mukesudo/mzgb

mzgb (mezgeb) — fast CLI for filtering very large log files. Means 'record' in Amharic. # mzgb **mzgb** (mezgeb — *"record"* in Amharic) is a fast CLI tool for filtering and navigating very large log files. Streams line by line — no memory issues, no matter the file size. Filter by log level, regex pattern, or time range. Invert matches, pipe structured JSON/CSV output, scan multiple files at once, and decompress `.gz`/`.bz2` on the fly. Works with plaintext, JSON, and logfmt. Pipes cleanly with `kubectl`, `journalctl`, `cat`, `jq`, and friends. ## Install ```bash # pip (base) pip install mzgb # With fast engines (Aho-Corasick + Bloom filter) pip install "mzgb[fast]" # With Drain3 template clustering pip install "mzgb[drain]" # Everything pip install "mzgb[all]" # pipx (isolated, recommended) pipx install mzgb # Homebrew (macOS) brew tap mukesudo/mzgb && brew install mzgb # Scoop (Windows) scoop bucket add mzgb github.com scoop install mzgb # Snap (Linux) snap install mzgb --classic # Nix nix run github:mukesudo/mzgb ``` Or from source: ```bash git clone github.com cd mzgb python3 -m mzgb --help ``` ## Usage ```bash # Filter by log level mzgb --level ERROR app.log # Pattern search with context lines mzgb --pattern "timeout" -C 2 app.log # Multi-pattern search (OR logic) — matches any keyword mzgb --pattern timeout --pattern refused --pattern error app.log # Filter by time range mzgb --from "2024-01-15 14:00" --to "2024-01-15 15:00" app.log # Invert — everything EXCEPT DEBUG mzgb --invert --level DEBUG app.log # Show line numbers mzgb -n --level ERROR app.log # Multiple files / globs mzgb --level ERROR service-a.log service-b.log mzgb --level ERROR /var/log/*.log # Structured output — pipe into jq or pandas mzgb --output json --level ERROR app.log | jq '.msg' mzgb --output csv app.log > report.csv # Compressed logs — .gz and .bz2 mzgb --level ERROR archive.log.gz mzgb --level ERROR archive.log.bz2 # Pipe from anywhere kubectl logs pod/api | mzgb --level ERROR journalctl …