Self-host logforge
V3.0.1Docker dashboard with real-time logs, alerts, self-healing
- Stars
- 302
- Ports
- 443 (HTTPS browser and API access to /unicron (container port, mapped from UNICRON_APP_PORT)), 8443 (mTLS endpoint for Unicron-agent enrollment and traffic (container port, mapped from UNICRON_AGENT_MTLS_PORT))
logforge/unicronWhat is logforge?
LogForge Unicron runs as a single Docker Compose stack that provides a unified interface for viewing container logs, metrics, events, and file systems across local and remote hosts via enrolled agents. The alert engine supports custom rules with pre-built templates for restart loops, resource pressure, error patterns, and suspicious activity. Alerts can be delivered through multiple notification channels. Remediation actions like restarting, stopping, starting, or killing containers, plus running scripts, are guarded by cooldown periods, exponential backoff, rate limiting, and verification delays. A premium AI layer called Cirdan connects to local models via Ollama for incident analysis and guided remediation. Access uses a local admin account with session protection and password rotation. The appliance generates and manages its own TLS certificate authority. Installation options include an automated script, manual Docker Compose, Proxmox VM, direct Proxmox host, and Unraid Community Apps. The codebase is open source under Apache-2.0 with a premium tier for advanced central and edge workflows.
Should you self-host logforge?
logforge scores 47/100 on selfhost.directory (how scoring works) and ranks #28 of 44 in Container Management. It has 302 GitHub stars.
It shipped 3 stable releases in the past year. The latest, V3.0.1, came out on 28 October 2026. New versions land roughly every 6 months.
Setup is moderate: expect some configuration beyond a single command. An official Docker image is available. It is Apache-2.0-licensed.
Its closest alternative on selfhost.directory is Portainer (77/100, 38 735 stars). It scores higher overall, so compare the two before you pick. See logforge vs Portainer side by side.
Features
- Container metrics and events
- Custom alert rules
- Encrypted sensitive configuration
- File System Access
- Local admin authentication
- Multi-channel notifications
- Real-time Docker log streaming
- Remote host monitoring via agents
- Safe automated remediation
- Self-managed TLS certificate authority
logforge README
More in Log Management
logstashAn open-source server-side data pipeline that ingests, transforms and routes events with 200+ plugins; self-hosted via Docker, deb/rpm packages or tar/zip downloads.
logtideOpen-source, self-hosted log management and SIEM unifying logs, traces and metrics on TimescaleDB, ClickHouse or MongoDB, an alternative to Datadog, Splunk and ELK.
Manticore SearchSelf-hosted, open-source search database that speaks SQL and HTTP JSON, with full-text, vector, hybrid and conversational search pitched as an Elasticsearch alternative.
MapleMaple is a self-hosted observability platform on OpenTelemetry and ClickHouse unifying traces, logs, metrics, session replay with an MCP server for AI agents.
matanoMatano is a self-hosted, open-source security data lake deploying to AWS for log normalization, Python detection-as-code, and Iceberg-based analytics.
monoscopeOpen-source, self-hosted observability that keeps logs, metrics and traces in your own S3 buckets, with plain-English queries, scheduled AI agents and session replay.
netdataNetdata is an open-source, self-hosted infrastructure monitoring platform with per-second metrics, automated dashboards, ML anomaly detection, and zero-config deployment.
openobserveOpenObserve is a self-hosted, open-source observability platform unifying logs, metrics, traces, RUM, and AI observability with 140x lower storage costs.
ParseableParseable is a self-hosted, open-source observability platform in Rust on a Parquet data lake: logs, metrics and traces with alerting, dashboards, PromQL and SQL.
quickwitOpen-source self-hosted search engine for observability: full-text search and aggregations on logs and traces in S3 or MinIO, with an Elasticsearch-compatible API.
RootprintSelf-hosted log and trace search that stores indexes in your own S3-compatible bucket. OpenTelemetry ingestion, trace waterfall, service health dashboards.
rsyslogRsyslog is an open-source, high-performance syslog server that collects, transforms, and routes event data at scale with 100+ modules and 1M+ msgs/sec.
0 comments