Powerful log file analysis for everyone [Releasing TextAnalysisTool.NET!]

This blog has moved to a new location and comments have been disabled.

All old posts, new posts, and comments can be found on The blog of dlaa.me.

See you there!


Comments (35)
  1. Wir hatten auf unserem Server mal wieder ein kleines Spamproblem, wie man Logfiles analysiert und was

  2. Brian Cook says:

    Can you or would you post code snips?

  3. David Anson says:


    Code snips of what?

  4. carehart says:

    Dave, nice tool. Thanks. It’s not clear from the readme if you’d prefer questions by email or here on the blog. Since others may have the same question, I’ll ask mine here. I don’t see how to set markers. Even in the sample file which has them set, I’m not seeing how they were set. I’ve tried right-clicking a line, I’ve looked on the menu. I fear I’ll hear I’ve missed something obvious.

    And for those who may miss it if they don’t read the help file (highly recommended), you move among filter-selected items with space and shift-space. Dave, since some may never think of that, it might be nice to add that as a menu option (along with setting markers) for those who may look there rather than the docs.

    But otherwise, nice tool. Thanks for sharing.

  5. David Anson says:


    Thanks for the kind words and suggestions! Markers are set with the Ctrl+1-8 key combination [line 154 of the documentation, but I know it’s easy to miss 🙂 ]. They support the same "filter ID" key scrolls to next matching line/Shift+"filter ID" scrolls to previous matching line behavior that filters do. This behavior works like the more general Space/Shift+Space behavior you call out, but applies only to the specified filter/marker, making it easy to cycle through all the marker ‘1’ items (or filter ‘c’ items, etc.). Point taken on the (lack of) discoverability here, thanks for bringing it up! My TODO list has been updated. 🙂

  6. ef2e2f2e says:

    very interesting tool. could be a good idea to add some useful functionalities lika events, db support, etc. want you add me in the development roaadmap?  let’s create a community of interested people.

  7. David Anson says:


    Thanks for the note! I’ve got a TODO list of potential future features, so if you’d like to send me a list of ideas via the contact form of this blog (http://blogs.msdn.com/delay/contact.aspx), I’d be happy to add them to my list!

  8. webmat says:

    Wow! That’s one hell of a nice tool! I love it 🙂 I particularly the keyboard shortcuts.

    Are you considering making this tool open source? That would be truly awesome. Nothing like open source to dispatch those todo list items. Or to get unexpected feature contributions, for that matter.

    Anyway, thanks a lot for making this app available as it is. Truly appreciated!

  9. jpitt42 says:

    The link for the tool is now dead.

  10. David Anson says:


    I've just fixed the link – thank you very much for letting me know about the problem! That link got broken during the blog migration and I didn't notice it because I only double-checked images.

    Sorry for the trouble – thanks again!

  11. SAM says:

    hi Delay,

    I am using this tool so greatly, but need to add 1 more thing. the font. How can I choose/resize the fonts?



  12. David Anson says:


    Thanks for the note, that's great to hear!

    For customizing things, here's the documentation says (Help menu, Documentation):

    You can customize certain aspects of the user interface by adding any of the

    following registry values:


      TabSize               DWORD   Character width of each Tab character ('t')

      FontSize              DWORD   Point size of text in the line display

      WindowTextColor    }  DWORD   0x00rrggbb color specification for the

      GrayTextColor      }          associated elements of the line display (note:

      HighlightTextColor }          specifying a custom color overrides the normal

      WindowColor        }          behavior of using the default system color)

      HighlightColor     }

  13. Norden says:

    hi, Delay

    can i change font type by edit registry? is there a certain key value for this?



  14. David Anson says:


    The font face/family is not currently configurable, sorry. 🙁

  15. Prash says:

    Hi, I tried out this tool and it is a really good tool in analyzing logs.

    I was wondering if I can get the source code for this tool.

    The reason I ask is because I would like to add an enhancement where  on double clicking a line (which contains a file name and a line number), it can directly open the file in a source editor at the given line number. I can give the source code back to you after adding this enhancement.

    Please let me know if this is possible or if there is any way of developing a plugin for this tool.



  16. David Anson says:


    TextAnalysisTool.NET is the only thing on my blog that I haven't shared source code for. (For a few different reasons, actually.) And while it supports plug-ins, they're specifically for importing different file types: blogs.msdn.com/…/if-they-build-it-i-will-come-and-link-to-it-wppformatter-plug-in-now-available-for-textanalysistool-net.aspx

    So for now, I'm afraid I can't help. However, I've wanted to port TextAnalysisTool.NET to WPF for a long time and have lots of plans for new features and extensibility hooks when I do. So what you're proposing may be quite easy in the new version! 🙂

  17. Srinath Danavulapati says:


    This is an awesome tool for log file analysis. I have been using it for the past 5 yrs and found it very very handy.

    Thanks a zillion..


  18. Billy says:

    great tool.

    wonderful experience.

  19. David Anson says:

    Srinath Danavulapati / Billy,

    Thank you very much – that's great to hear! 🙂

  20. Richard says:

    Hi David,

    Great tool! Easy to install and easy to use. However, I was looking for ways to modify it and search the net, but I only come up with the documentation stating that it is possibly to create plugins. Great, but how?

    I would like to be able to colorhighlight certain keywords, where each color is loaded from a separate textfile. Preferrably also print these as bold.

    I would like to preprocess a file, scrapping all lines that do not include a certain combination of characters, for example "XB_"

  21. David Anson says:


    Thanks for the kind words! 🙂

    The reason you can't find any info on TextAnalysisTool.NET plugins is that I haven't made the plugin architecture public (it's from .NET 1.1 days and *very* goofy). That said, if what you want to do is process input as a file is read, this is exactly what you want (ex: blogs.msdn.com/…/if-they-build-it-i-will-come-and-link-to-it-wppformatter-plug-in-now-available-for-textanalysistool-net.aspx).

    Please contact me via the "Email Blog Author" link in the sidebar of this blog and I'll send you a sample plugin that shows how they work.

  22. Dave M says:

    David.  Is there any chance you'll put the TextAnalysisTool on MacOX? Use Mono?

  23. Stefan Nilsson says:

    Hi David,

    Me and my colleagues use this tool extensively for log analysis of different kind of huge log files (telecom), and I must say that it is the best tool for text analysis I have ever seen, and it's free as well. Thanks! 🙂

    I have a few questions:

    When will a new version with added features and based on WPF be released?

    Would it be possible to add the option of coloring not only the font but also the font background? This would make it easier to spot e.g. errors.

    Would it be possible to add support for sending text line(s) to external applications?

  24. David Anson says:

    Dave M,

    I looked into this briefly just now and based on the Mono porting guidance,it seems like it could be somewhat involved to get TextAnalysisTool.NET running on Mono. I'll add this to my TODO list, but don't expect to get to it soon. 🙁

  25. David Anson says:

    Stefan Nilsson,

    Thanks for the kind note – I'm glad to hear you like it! 🙂

    Regarding your questions:

    * I've had plans to rewrite TextAnalysisTool.NET in WPF for a long while now, but never have the time to actually do the work. 🙁

    * Good idea, I'll add this to the TODO list!

    * I'm sure you know about copy/paste for exchanging data – what do you have in mind with regard to sending lines to other applications?

  26. Stefan Nilsson says:

    Yes, I know copy/paste ;), but sending to external application would be more efficient.

    As I said before, I work in telecom and we have big log files to analyze. They are actually even bigger since most of the data is packed in hex format and has to be decoded using different protocols.

    The log lines look like this:

    <time> <module> <protocol-type> <data>

    Sending to external application is done as command line transfer, i.e. the external application has to be able to take command line arguments. In Command Prompt it looks like this:

    C:Tool-folder> "toolname" "log lines to be decoded"

    The external application takes care of parsing the received log lines and selecting the correct protocol used to decode the data, and then displays the decoded output.

    Decoding the whole log file using a plugin (if possible) is not desired as the log would get too big and take too long time to generate due to the heavy decoding needed to decode all messages.

  27. David Anson says:

    Stefan Nilsson,

    I think I understand now, thanks! I've added a note to my TODO list for future reference. 🙂

  28. Carlo Merhi says:


    Fantastic tool! Thank you so much for doing this. One quick question if I may: I love the command line option and would like to know if it is possible to have an option to also export to a file instead of going through the GUI and doing File-Save Current Lines? I can wrap it with a Send-Key command if I have to etc but wondering if that is an option already of if you would be so kind as to add that.



  29. David Anson says:

    Carlo Merhi,

    Glad you like it! 🙂 I've gotten a request like that before, but it's not something the current version supports. I have a long-term goal to do a new implementation in WPF/.NET 4 to address a variety of requests like this – but I never seem to have the time to get to it. It's a great idea, though, and I've updated my TODO list!

  30. Vamsi Sanka says:

    It is a amazing tool. Whole of my team is using it. Thanks a lot!!


  31. faisal khan says:

    good tool and always iam using for vmware and i hope you will give updates

  32. Bravim says:


    I am new to the tool and found it very helpful (thanks for such tool).

    Is there any method to only highlight the particular string present in the filter not the whole line?  Because it is eye catching to highlight the particular string which I choose in the filter.

    Thnaks in advance.

  33. David Anson says:


    Highlighting within the line is not currently supported – but I've had a few other requests as well, so it's on the TODO list. 🙂

  34. sreekanth says:

    very nice tool ! Truely appreciated your work, saves lot of time.

    I would like to suggest some features exaclty what Carlo Merhi(command line option) , Stefan Nilsson(sending text lines to external applications) .

    "TextAnalysisTool.NET.exe LogsMyLog.log /Filters:"Saved FiltersMyConfig.tat"" saving the output content to clipboard(including line Numbers) / saving the output in file using command lIne.

    sending keyStrokes(Ctrl+S) to application in hidden manner would help much better as I am using AutoIt for automation.

    As of now is there any way to acheive this. It would be helpful to me.  Thanks in advance 🙂

    – sreekanth

Comments are closed.