Features
Everything Frabs does to help you understand your servers. No fluff. Just signal.
Server Replay
The most powerful way to understand what changed on your server. A clean timeline of important events, in order, with context.
- ✓SSH logins and failed attempts
- ✓Service starts, stops, restarts, failures
- ✓Package installs, removals, and upgrades
- ✓Docker container events
- ✓Nginx, PHP, MySQL, Apache errors
- ✓Cron job executions and failures
- ✓Reboots detected automatically
- ✓Firewall and port changes
- ✓Rule-based incident explanations
Raw Logs
Powerful full-text search across every raw log line from your server.
- ✓Search by text, IP, service, level
- ✓Filter by time range
- ✓Filter by log source
- ✓Copy any log line
- ✓View context around a log entry
- ✓Export as CSV or JSON
- ✓Paginated with jump-to-time
- ✓Process ID and request ID filtering
Live Tail
Watch your server logs stream live in real time. Filter while you watch.
- ✓Server-Sent Events — no polling
- ✓Filter live stream by source
- ✓Filter live stream by level
- ✓Pause and resume
- ✓Auto-scroll with buffer
- ✓Colour-coded severity levels
Alerts
Get notified when something important happens on your server.
- ✓Server offline (no heartbeat)
- ✓High error count spike
- ✓Failed SSH login spike
- ✓Service stopped or failed
- ✓Disk usage above threshold
- ✓Memory usage above threshold
- ✓CPU usage above threshold
- ✓Nginx 5xx error spike
- ✓PHP fatal error detected
- ✓MySQL stopped
- ✓Docker container restart loop
- ✓Cooldown to prevent alert spam
- ✓Email and in-console notifications
SSH Monitoring
Track every SSH event on your server. See who connected and when.
- ✓Successful SSH logins
- ✓Failed SSH attempts
- ✓Brute-force detection
- ✓Sudo command tracking
- ✓User created or deleted events
- ✓SSH key additions
Log Sources
Frabs collects from every major log source on Ubuntu and Debian.
- ✓systemd journal
- ✓auth.log / SSH
- ✓syslog / kern.log
- ✓Nginx access and error logs
- ✓Apache access and error logs
- ✓PHP-FPM logs
- ✓MySQL / MariaDB logs
- ✓Docker container logs
- ✓UFW firewall logs
- ✓apt / dpkg package logs
- ✓Cron logs
Server Health
Lightweight metrics alongside your logs for context.
- ✓CPU usage
- ✓Memory usage
- ✓Disk usage
- ✓Load average (1m, 5m, 15m)
- ✓Uptime
- ✓Process count
- ✓Network RX/TX
Agent
A lightweight systemd service that runs quietly on your server.
- ✓Installs in seconds with one command
- ✓Runs as frabs-agent.service
- ✓Heartbeat every 30 seconds
- ✓Log batches every 5 seconds
- ✓Offline buffering (up to 100MB)
- ✓Auto-retry with exponential backoff
- ✓Redacts passwords, tokens, and secrets
- ✓Read-only — no remote commands
Security
Security is core to a product that handles server logs.
- ✓HTTPS only
- ✓HTTP-only session cookies
- ✓Bcrypt password hashing
- ✓Hashed agent tokens
- ✓Short-lived install tokens (30 min)
- ✓Organisation-level data isolation
- ✓Secret redaction before upload
- ✓Rate-limited auth and ingestion
- ✓Signed agent payloads
- ✓Audit log for all account actions