Superlog

Summary

Superlog is an open-core observability workspace for OpenTelemetry data, and it is open-source with an Apache 2.0 license. It functions as an agentic telemetry system, ingesting traces, logs, and metrics to group noisy signals into incidents, running as a service that can be installed via coding agents. It is aimed at teams needing a local-first product surface for debugging production systems and its documentation describes it as an observability workspace for OpenTelemetry data. Development activity shows commits within the last year.

Open-source observability tool that uses AI agents to self-heal your software

Command line

Values are placeholders taken from each option’s declared default. Nothing is executed here — the output shown is a recording of a run that already happened.

Release history

1. changes since 2026-07-29 Aug 28, 2026 · issue 009

   Superlog adds GCP disconnect, Cloudflare Workers selection, GCP log filters, Sentry webhook multiplexing, and MCP write-scope authoring tools.

   └──▷ GET THIS VERSION
   copy

   $ git clone --branch commits-2026-07-29 https://github.com/superloglabs/superlog.git
   # already have the repo? check out this version:
   $ git checkout commits-2026-07-29

   └──▷ TRY IT
   Remove a connected Google Cloud integration — for example, when rotating GCP credentials or offboarding a project.
   copy

   $ curl -X POST https://app.superlog.sh/api/gcp/authorizations/<authorizationId>/disconnect \
     -H 'Content-Type: application/json' \
     -H 'Authorization: Bearer <token>' \
     -d '{"authorizationState": "<state>"}'

   • ›Adds GCP log group intake filters so ingested log groups can be selectively included or excluded.
   • ›Adds secure multiplexing for Sentry OAuth callbacks and webhooks — a single Sentry App client can now serve multiple apps via a strict HTTPS callback allowlist, with request-byte-exact webhook forwarding to preserve signatures.
   • ›Adds Cloudflare Workers as a selectable runtime target for connected services.
   • ›Adds Responder to the public navigation and landing hero, linking to responder.superlog.sh.
   • ›Preserves alert incident correlation across queued intake so incidents are not split when log delivery is delayed.
   +1 moreshow less

   • ›Groups causal error cascades together to surface root causes rather than duplicate downstream symptoms.
2. changes since 2026-07-27 Aug 26, 2026 · issue 008

   Superlog adds Railway structured log parsing, GCP log filters, Cloudflare Workers support, and Google Cloud integration disconnect

   └──▷ GET THIS VERSION
   copy

   $ git clone --branch commits-2026-07-27 https://github.com/superloglabs/superlog.git
   # already have the repo? check out this version:
   $ git checkout commits-2026-07-27

   └──▷ TRY IT
   Disconnect a previously authorized Google Cloud integration via the API.
   copy

   $ curl -X POST https://app.superlog.dev/api/gcp/authorizations/<authorizationId>/disconnect \
     -H 'Content-Type: application/json' \
     -d '{"authorizationState": "<state>"}'

   • ›Adds POST /api/gcp/authorizations/{authorizationId}/disconnect endpoint to disconnect a Google Cloud integration.
   • ›Adds GCP log group intake filters to control which log groups are ingested from Google Cloud.
   • ›Adds support for selecting Cloudflare Workers as a monitored target.
   • ›Parses structured Railway logs — JSON, logfmt/containerd, PostgreSQL, and HTTP access log formats — extracting typed OTLP attributes and correcting stderr-derived severity.
   • ›Adds Sentry callback and webhook routing for shared Sentry integration.
   +7 moreshow less

   • ›Acknowledges Vercel quota drops as a recognized signal.
   • ›Preserves alert-to-incident correlation across queued intake.
   • ›Shows quota reset date in the billing usage view.
   • ›Raises the free investigations limit and adds a pay-as-you-go welcome grant.
   • ›Supports configured Portless web hosts.
   • ›Displays up to three active incidents in the home widget with an animated scroll shadow.
   • ›Captures browser render exceptions for observability.
3. changes since 2026-07-23 Aug 21, 2026 · issue 004

   Superlog adds Google Cloud disconnect, GCP log filters, Sentry webhook routing, MCP timeout recovery, and PR overlap guards.

   └──▷ GET THIS VERSION
   copy

   $ git clone --branch commits-2026-07-23 https://github.com/superloglabs/superlog.git
   # already have the repo? check out this version:
   $ git checkout commits-2026-07-23

   └──▷ TRY IT
   Disconnect a Google Cloud integration when rotating credentials or offboarding a GCP project.
   copy

   $ curl -X POST https://<your-superlog-instance>/api/gcp/authorizations/<authorizationId>/disconnect \
     -H 'Content-Type: application/json' \
     -d '{"authorizationState": "<state>"}'

   • ›Adds POST /api/gcp/authorizations/{authorizationId}/disconnect endpoint to disconnect a Google Cloud integration.
   • ›Adds GCP log group intake filters and bounded GCP log group discovery to control what gets ingested.
   • ›Adds shared Sentry callback and webhook routing for Sentry alert ingestion.
   • ›Adds guardProposedPullRequestOverlap and overlappingFilesForPullRequestClaim to block conflicting agent pull request deliveries when changed files overlap.
   • ›Adds changedFilesFromAgentRunResult and changedFilesFromUnifiedDiff utilities to extract file-level change sets from agent runs and diffs.
   +10 moreshow less

   • ›Adds resolvePullRequestTargetBaseBranch for improved PR base-branch resolution during delivery.
   • ›Adds a materialized SuperlogProjectId column and dedicated set index to ClickHouse logs and traces tables, routing log and trace queries through the materialized column for indexable multi-tenant scans.
   • ›Wraps query_logs, query_traces, query_metrics, and list_services MCP tools with timeout recovery, converting ClickHouse timeouts into retry_required results that narrow the query to a one-hour window.
   • ›Captures ad-network click IDs (twclid, gclid, fbclid, msclkid, li_fat_id) from signup URLs into a short-lived first-party cookie (sl_click_ids, 30 min) for server-side attribution.
   • ›Shows quota reset date in the billing usage view.
   • ›Fits three incidents in the active-incidents home widget with an animated scroll shadow.
   • ›Acknowledges Vercel quota drops as a recognized signal.
   • ›Preserves alert-to-incident correlation across queued intake.
   • ›Allows configured Portless web hosts.
   • ›Adds org_name to the first_telemetry_received analytics event.