Claude MarketplacesSubmit
james116blue avatar

Journald MCP Server

james116blue/journald-mcp-server

Gives Claude direct access to systemd journal logs for incident response and forensic analysis. Exposes tools to query journal entries with natural language datetime filtering (like "2 hours ago" or "yesterday at 3pm"), filter by systemd unit or syslog identifier, and search message content. Also provides resources to list all units and identifiers across time ranges, plus fetch the first entry datetime. Built on systemd-python and supports stdio, SSE, or HTTP transports. Reach for this when you need to troubleshoot Linux systems, correlate service failures, or hunt through logs without leaving your Claude conversation. Requires systemd-journal group access to run as non-root.

GitHub stars
1
tools
2
transport
STDIO
last updated
Dec 19, 2025
View on GitHub

Tools

2 tools

Public tool metadata for what this MCP can expose to an agent.

get_journal_entriesGet journal entries with datetime filtering

Get journal entries with datetime filtering

No parameter schema in public metadata yet.

get_recent_logsGet recent journal logs from the last N minutes

Get recent journal logs from the last N minutes

No parameter schema in public metadata yet.

Sponsors

Promote your product hereReach 125k+ visitors monthlyPromote your product hereReach 125k+ visitors monthlyAgent CaffeineSponsoredClose your lid, come back to finished workSnugSponsoredThe clipboard manager for the AI eraPromote your product hereReach 125k+ visitors monthlyWaxSponsoredBlock anything with supervision, without erasing your iPhonePromote your product hereReach 125k+ visitors monthlyknobsSponsoredSee your site on any phone, any day, in any language

Readme

Journald MCP Server

An MCP server for accessing systemd journal logs.

Features

  • List systemd units from journal logs
  • List syslog identifiers from journal logs
  • Get datetime of first journal entry
  • Filter journal entries by datetime range (since/until)
  • Filter by systemd unit or syslog identifier
  • Filter by message content (case-insensitive substring matching)
  • Natural language datetime parsing (e.g., "2 hours ago", "yesterday at 3pm")
  • List units and identifiers within specific time ranges

Installation

# Install dependencies
uv sync

Usage

Run as non-root: Give the user systemd-journal group access usermod -aG systemd-journal $USER

Run the server with:

uv run server.py [OPTIONS]

CLI Options

  • --transport: Transport protocol to use (stdio, sse, or streamable-http). Default: stdio
  • --port: Port to listen on for HTTP transport (ignored for stdio transport). Default: 3002
  • --log-level: Logging level (DEBUG, INFO, WARNING, ERROR, CRITICAL). Default: INFO

Examples

View the full README on GitHub

Details

Repository
github.com/james116blue/journald-mcp-server
Category
Monitoring & Observability
Package
journald-mcp-server
Transport
STDIO
Registry
MCP registry, active

Related Monitoring & Observability MCP servers

View all
1clauxel avatarMcpuptimeledger Mcpclauxel/mcp-uptime-ledger-mcpMCP uptime, schema, auth, and SLA receipt monitoring.0stars
2monte-carlo-data avatarMonte Carloio.github.monte-carlo-data/mcpData + AI observability — monitor and troubleshoot production-grade agents and the context they use.0stars
3tom18a avatarSiteVitalstom18a/sitevitals-mcpMonitor website health, uptime, SEO, security and performance via your AI assistant.0stars
4edholofy avatarEyepupedholofy/agentic-analyticsAgentic visitor analytics — five tools that hand the next CRO fix to your coding agent.0stars
5thomasxm avatarCrowdsentinel Mcp Serverthomasxm/crowdsentinels-ai-mcpAI threat hunting & incident response for Elasticsearch/OpenSearch with endpoint & network forensics0stars
6spre-sre avatarLumino MCP Serverspre-sre/lumino-mcp-serverAI-powered SRE observability for Kubernetes/OpenShift with 40+ Tekton debugging tools8stars