ELKTrail
Live log tail for Kibana and Elastic
Kibana Discover is great for investigating. It is not built for watching. ELKTrail turns any Kibana deployment into a fast, dense, tail -f style log stream that keeps up while you work.
Built for watching logs
01
Live by default
New lines arrive every second (adjustable from 0.5 s to 30 s) and the view follows the tail. The side panel keeps streaming while you work in other tabs.
02
Search as simple as grep
Words, exact phrases, -exclude, field:value, AND / OR, and groups, Papertrail-style. Switch to KQL or Lucene to match Kibana Discover.
03
Click to drill down
Click any host, program, severity, request ID, or email in a line to filter on it. Keep several searches open in tabs and save the ones you reuse.
04
Private and zero setup
Uses your existing Kibana session. No API keys, tokens, or config files. Logs stay in memory and nothing is sent to any external server.
ELKTrail auto-detects host, severity, program, message, and request-ID fields from ECS, OpenTelemetry, syslog, Heroku, and similar formats, and handles buffers of up to 20,000 lines while staying smooth.
Created by Mark Liapustin (clizSec) for developers, SREs, on-call engineers, and security teams who miss tail -f but keep their logs in Elastic. ELKTrail is in beta, and feedback is welcome.