It's laser-focused on efficiently querying logs from multiple remote hosts over SSH, filtering by time range and patterns, and drawing a timeline histogram for quick visual insight.

Here’s a quick demo showing how Nerdlog works across four remote nodes:

Originally hacked together in 2022 to replace sluggish Splunk setups, it was revisited in 2025 and released as a proper open-source tool.

Design highlights:

• No central server - Nerdlog connects directly to each host over SSH
• Logs stay remote - filtering and analysis is done on the hosts using standard tools like awk, head, tail; only the minimal necessary data is downloaded
• Bandwidth-efficient - most data is gzipped in transit