multi-file-log-correlator

What problem does it solve?

Multi-system incidents are hard to debug when related events are scattered across multiple log files with different timestamp formats and timezones. This skill helps you merge those logs into a unified timeline and surface cross-system correlations, gaps, and timing anomalies.

Core Features & Use Cases

• Unified timeline construction: Merge heterogeneous log sources into a single, time-ordered event stream with source attribution.
• Timezone normalization & timestamp alignment: Parse and normalize timestamps (including format differences) to a chosen output timezone.
• Cross-log correlation & trace reconstruction: Group events by extracted correlation IDs (e.g., request_id/trace_id) or by temporal proximity when IDs are absent.
• Gap detection: Identify missing coverage windows per source using a configurable gap threshold.
• Anomaly detection: Flag long correlation durations and error bursts to speed up incident triage.

Quick Start

Use the multi-file-log-correlator to correlate your app, nginx, and database logs into a single timeline and generate a full correlation report in Markdown.