Log analytics demo: index-free SIEM search, no ingest wait
You are looking at Bitcoin value-flow graphraw log lines stored as contiguous containers, no inverted index in one Semurg substrate. Ask it to grep the raw logs for any status code, path, IP or error string and it runs the
real query live on this box, on data you can
download and re-run yourself ▸.
Click an example in the agent rail, or search any term, e.g. 500, /admin, a suspicious IP, an error string. Every run is measured end to end, on
this box, on the real dataset. Nothing is pre-computed.
A large corpus of real web access-log lines stored exactly as they arrived, durable on disk, with no schema-on-write and no inverted index. A search is a SIMD sweep of the raw log containers for any ad-hoc term, runnable the instant the logs land. No index build, no second system. Cold and warm rates, measured live.
the log-search leader
CANNOT FIND WHAT IT DID NOT INDEX. The inverted index has to be built before the first query, it answers only the fields it indexed, and it lives in a separate system from the raw logs.
semurg, one engine
Searchable the instant the lines land. Ingest is just an append, so a SIMD sweep answers any ad-hoc term (a status, a path, an IP, an unanticipated error string) with zero indexes built and zero schema-on-write.
No index build between ingest and the first query, and no field you forgot to index.
A large corpus of real web access-log lines. Measured live on this box. Download it and re-run any term yourself.
ask the agent to find a status code, path, IP or error string, the live scan renders here
The win here is collapse plus a real cold start, not a warm-vs-cold trick. A log platform that has finished building its index answers the one field it indexed quickly, but the index has to be built first, it cannot answer a field it did not index, and it lives in a separate system. Here ingest is just an append: the lines are searchable the instant they land, the scan answers any ad-hoc term, runs full-corpus aggregations a bucketed index chokes on, and fuses with graph, full-text and vectors in one pass. We show cold and warm side by side and never compare a warm path to anyone's cold one. This is one substrate.