Native macOS · SwiftUI · Development preview

Syslog traffic,
under control.

LogSalvo is becoming a native Mac workspace for generating, receiving, inspecting and forwarding syslog traffic—built for engineers who need to see exactly what crossed the wire.

Explore the product View the original project

0.4.0development release
macOSnative SwiftUI app
Local firstno cloud account

LogSalvo Traffic Pulse icon, with cyan network pulses around a central log stream

A new identity

The branding has changed, too.

The Swift edition retires the legacy Tech Shed application artwork in favour of the LogSalvo Traffic Pulse: a dedicated product mark inspired by messages moving through a live network.

The cyan pulse, deep navy interface and “Syslog Traffic Studio” descriptor now run through the app and its macOS icon, giving LogSalvo an identity of its own while keeping its Tech Shed roots.

The workspace

Built around the traffic.

Two focused workspaces cover both sides of a syslog conversation without hiding the protocol details.

LogSalvo Swift send workspace showing destination, transport, security and RFC 3164 message controls — **Send with intent.** Choose a destination and transport, build RFC 3164 or RFC 5424 messages, pace a run, retry failures and preview the exact output before transmission.

LogSalvo Swift receive workspace showing listener settings, filters, message table and detail inspector — **Receive and investigate.** Listen on UDP or TCP, filter a live stream, inspect parsed fields and raw payloads, then export what matters.

Capabilities

A traffic studio, not just a sender.

Compose & send

RFC 3164 and RFC 5424 formatting, templates, structured data, message padding, pacing, retries, run cancellation and dry-run previews.

Transport securely

UDP, TCP and TLS with system or custom CA trust, Keychain-backed client identities, IPv4 and IPv6 resolution and explicit source binding.

Parse real traffic

Understand RFC syslog alongside JSON, Cisco IOS, CEF and UniFi payloads, with PRI decoding, search, sorting and a raw-message inspector.

Forward at scale

Relay exact payloads to multiple UDP, TCP or TLS destinations with filters, bounded queues, retries, loop prevention and health counters.

Keep useful evidence

Pause and queue a live view, bound in-memory retention and export selected traffic as CSV, JSON Lines or unchanged raw payloads.

Stay aware

Opt-in macOS notifications support privacy-conscious summaries, rules, deduplication, rate limiting and click-through to the matching event.

Native by design

Rebuilt for the Mac, not wrapped for it.

The Swift migration separates protocol handling, transport, receiving and privileged operations into focused modules. The interface is built in SwiftUI, supports system, light and dark appearances, and uses accessibility-aware native controls.

Privileged ports without a privileged app

Listening on ports 1–1023 uses an authenticated LaunchDaemon helper with a narrow XPC boundary. The main LogSalvo interface continues to run as the signed-in user.

CoreTransportReceiverPrivilegedCLIMac

Project status

A working preview, with more migration ahead.

Version 0.4.0 is a development release for Apple silicon, with the core sender, receiver, forwarding, notification and settings workflows in place. Production signing, notarisation and final interface parity are still on the roadmap.

The original Python edition remains the cross-platform reference while the native macOS app develops alongside it.

Read about the original LogSalvo →

Syslog traffic,under control.