turbot / tailpipe

git clone https://github.com/turbot/tailpipe.git

select * from logs; Tailpipe is an open source SIEM for instant log insights, powered by DuckDB. Analyze millions of events in seconds, right from your terminal.