sysloglisted
Install: claude install-skill jmagar/syslog-mcp
# Syslog Skill
Rust-based syslog receiver and MCP server for homelab log intelligence. Receives RFC 3164/5424 syslog from all homelab hosts, stores in SQLite with FTS5 full-text search, and exposes one MCP tool with action dispatch for AI-driven log analysis.
## Tool
A single MCP tool, `mcp__syslog__syslog`, dispatches on a required `action` argument:
| action | purpose |
|--------|---------|
| `search` | Full-text search with FTS5 |
| `filter` | Structured filter-only log retrieval |
| `tail` | Most recent entries |
| `errors` | Error/warning summary by host and severity |
| `hosts` | List all known hosts with first/last seen |
| `sessions` | AI transcript sessions by project |
| `search_sessions` | Ranked grouped session search |
| `abuse` | Abuse hits in AI transcripts with same-session context |
| `abuse_incidents` | Groups abuse hits into scored incident candidates |
| `abuse_investigate` | Expands incidents into deterministic evidence bundles |
| `ai_correlate` | AI transcript anchors cross-referenced against non-AI logs |
| `usage_blocks` | AI activity in 5-hour windows |
| `project_context` | Summary for one AI project path |
| `list_ai_tools` | Distinct AI tools with counts |
| `list_ai_projects` | Distinct AI projects with counts |
| `correlate` | Cross-host event correlation in a time window |
| `stats` | Database statistics |
| `status` | Lightweight runtime and DB health |
| `apps` | Distinct app names with log and host counts |
| `source_ips` | Source identi