Freedom251 › Log Management Software
Logcheck
What Logcheck is
Logcheck is a free, open-source Linux package for reviewing system logs and finding entries that may indicate faults or security concerns. It compares log lines with a customizable database of regular expressions, then reports entries that are not recognized as routine to a system administrator. The package description names logs from systemd-journald, rsyslog, or another system log daemon. The related logcheck-database package supplies expressions for matching system log entries and may support other log-checking tools. Debian classifies Logcheck as a security log analyzer and monitoring utility. Reports can be sent by email, with a default mail transport agent listed as a dependency. Scheduling files include cron configuration plus a systemd service and timer. The source package also builds logtail, which identifies lines newly added to log files. The stable package is version 1.4.5+deb13u1, available for all architectures, and is deployed on your own Linux system.
Who it suits
Logcheck suits Linux administrators who want scheduled review of system logs and email reports. It is intended for self-hosted environments and security or monitoring work.
What it does well
- Free, open-source package
- Customizable regular-expression rules
- Supports systemd-journald and rsyslog logs
- Cron and systemd scheduling included
- Email reporting supported
What to know first
- Linux and self-hosted only
- Requires a mail transport agent
- No free trial
Plans
| Plan | Billed and limits | Price |
|---|---|---|
| Logcheck | Debian package · all available architectures | Free |
As packages.debian.org lists them, read 12 Oct 2026. The maker's own page has the final word.
Verdict
Logcheck provides focused log review for Linux systems, using configurable rules to surface unusual entries. Its self-hosted design, scheduling files, and email support fit administrators managing their own infrastructure.
Facts from Logcheck's own pages
- Code hosting
- The package source repository is hosted at salsa.debian.org/debian/logcheck. · packages.debian.org, 12 Oct 2026
- Delivery
- The stable package page lists the package for all available architectures, with a package size of 28.9 kB and installed size of 120.0 kB. · packages.debian.org, 12 Oct 2026
- Deployment options
- self-hosted · packages.debian.org, 21 Sept 2026
- Email dependency
- The package depends on a default mail transport agent, with several providers listed on the package page. · packages.debian.org, 12 Oct 2026
- Email reporting
- The project page says log file entry summaries can be mailed to a system administrator via a cron job. · salsa.debian.org, 12 Oct 2026
- How it works
- It checks log entries against a customizable database of regular expressions and reports entries not identified as routine to the system administrator. · packages.debian.org, 12 Oct 2026
- License
- The package copyright file identifies the software as GPL-2.0 and says it is distributed without warranty. · metadata.ftp-master.debian.org, 12 Oct 2026
- Log sources
- The page names systemd-journald, rsyslog, or another system log daemon as sources of system log entries. · packages.debian.org, 12 Oct 2026
- Maintainers
- The Debian logcheck team, Jose M Calhariz, and Mathias Gibbens are listed as maintainers. · packages.debian.org, 12 Oct 2026
- Package availability
- The stable Debian package is version 1.4.5+deb13u1 and is available for architecture all. · packages.debian.org, 5 Oct 2026
- Package size
- The Debian package page lists a package size of 28.9 kB and an installed size of 120.0 kB. · packages.debian.org, 5 Oct 2026
- Purpose
- Logcheck analyzes system logs for unexpected entries that could indicate problems or security issues. · packages.debian.org, 12 Oct 2026
- Related utility
- The source package also builds logtail, which identifies new lines added to the end of log files. · packages.debian.org, 12 Oct 2026
- Rule database
- The related logcheck-database package provides system log rules for logcheck. · packages.debian.org, 12 Oct 2026
- Rules database
- The related logcheck-database package provides regular expressions for matching system log entries and might also be used by other log checkers. · packages.debian.org, 5 Oct 2026
- Scheduling
- The Debian package file list includes a cron configuration and a systemd service and timer. · packages.debian.org, 5 Oct 2026
- Security use
- Debian tags Logcheck as a security log analyzer and a monitoring utility. · packages.debian.org, 5 Oct 2026
- Support
- The Debian support page says support is offered by volunteers and that users may hire a consultant if community support and documentation do not meet their needs. · debian.org, 12 Oct 2026
- Supported log sources
- The package description names logs produced by systemd-journald, rsyslog, or another system log daemon. · packages.debian.org, 5 Oct 2026
Where Logcheck stands on Freedom251
- Log Management Software#60 of 111