# Install logswan with Homebrew, apt

Fast Web log analyzer using probabilistic data structures. Version 2.1.17 via Homebrew; verified 2026-07-02. Also installable with debian: sudo apt install logswan.

## Install

```sh
sudo av install brew:logswan
```

Additional install commands:

### macOS

- Homebrew (100%):

```sh
brew install logswan
```

  Evidence: local Homebrew formula metadata

### Linux

- Debian apt (92%):

```sh
sudo apt install logswan
```

  Evidence: Debian stable package indexes: logswan from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz

## Package facts

- **Package key:** brew:logswan
- **Package manager:** Homebrew
- **Version:** 2.1.17
- **Source summary:** Fast Web log analyzer using probabilistic data structures
- **Homepage:** <https://www.logswan.org>
- **Repository:** <https://github.com/fcambus/logswan>
- **Last updated:** 2026-07-02T00:18:32Z
- **Generated:** 2026-08-03T19:37:03+00:00

## Executables

- logswan (alias)

## Install behavior

- Bottle: not available

## Freshness

- Page generated: 2026-08-03
- Package-manager version: 2.1.17
## Project history and usage

Logswan is a fast web-log analyzer focused on very large log files, especially API logs. It uses probabilistic data structures, including HyperLogLog counters, to keep memory use constant while estimating unique visitors.

### Project history

Frederic Cambus develops Logswan as intentionally opinionated software. The README states design goals of speed, memory efficiency, and simple code, and documents deliberate constraints such as Common Log Format support and byte-level reporting without rounded units.

The official GitHub repository was created in June 2015. The project remains small and C-focused, with Jansson and libmaxminddb as key dependencies and JSON output as its primary integration surface.

### Adoption history

Logswan's adoption is modest but practical: the README lists packages for OpenBSD, NetBSD, FreeBSD, Debian, Ubuntu, Void Linux, Gentoo, and Homebrew. The supplied package facts also show Homebrew, Debian, and Ubuntu entries.

The official GitHub repository shows a long-lived niche project with hundreds of stars, a small fork count, and regular releases through the 2.1.x series.

### How it is used

The CLI form is `logswan [-ghv] [-d db] logfile`, with `-` accepted for standard input. Output goes to standard output as JSON, making it easy to redirect into other tools.

GeoIP lookups are optional through `-g` and `-d db`. The README documents the default GeoIP2 database directory under `${CMAKE_INSTALL_PREFIX}/share/dbip`, but this is a data-file lookup rather than a Logswan configuration file.

### Why package nerds care

Logswan is interesting to package maintainers because it is a small, security-minded C tool with clear dependencies, sandboxing notes for OpenBSD pledge, optional seccomp, and deterministic JSON output. It is the opposite of a sprawling analytics stack.

### Timeline

- 2015: Official GitHub repository created.
- 2021: 2.1.12 release published.
- 2025: 2.1.15 release published.
- 2026: 2.1.16 release published.

### Related projects

- Logswan belongs to the family of web-log analyzers, but its README differentiates it by using HyperLogLog counters and by avoiding broad format support.

### Sources

- <https://api.github.com/repos/fcambus/logswan>
- <https://github.com/fcambus/logswan#readme>
- <https://github.com/fcambus/logswan/releases/tag/2.1.16>
- <https://www.logswan.org/>
- source_facts.package-manager


## Security Notes

narrow executable package without higher-risk signals.

- **Geiger risk:** green / low
- narrow executable package without higher-risk signals

## Other Package-Manager Records

- Debian apt - logswan - 2.1.15-1: normalized package name match | Debian stable package indexes: logswan from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | fast Web log analyzer using probabilistic data structures | https://github.com/fcambus/logswan
- Ubuntu apt - logswan - 2.1.14-2: normalized package name match | Ubuntu 24.04 LTS package indexes: logswan from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz | fast Web log analyzer using probabilistic data structures | https://github.com/fcambus/logswan


## Combined YAML source

View the package source record on GitHub. [combined/logswan.yml](https://github.com/mxcl/pkgdb/blob/main/combined/logswan.yml)


## Sources

- pkg.so package database
- Geiger risk classifier
- curated package history
- pkgdb category and tag curation
- external package-manager database matches
- cross-ecosystem install command graph