Integrations
Logchef is a query and control plane for logs that already live in ClickHouse or VictoriaLogs — it doesn’t collect or ship logs itself. Getting logs in front of Logchef is a three-step pipeline:
- Collect — an agent (Vector, the OpenTelemetry Collector) reads logs from your services, files, containers, or cluster
- Store — the agent writes rows into a ClickHouse table (or a VictoriaLogs stream)
- Explore — you point a Logchef source at that table and query it with LogchefQL, SQL, or LogsQL
The guides below cover each collection path, how to shape the ClickHouse schema, and the tools (CLI, MCP server) for working with the data once it’s there.
Shipping Logs
Section titled “Shipping Logs”- Shipping Logs with Vector — general-purpose log pipeline: syslog, files, Docker, journald
- OpenTelemetry Collector — the
clickhouseexporterand theotel_logsschema - Kubernetes Logs — DaemonSet collection with the Collector or Vector
- Docker Logs — Vector’s
docker_logssource against the Docker socket - Shipping NGINX Logs to ClickHouse — a worked example with a purpose-built schema
- Using VictoriaLogs with Logchef — connect a VictoriaLogs datasource instead of ClickHouse
Schema
Section titled “Schema”- Schema Design — field types, codecs, and indexing for fast, storage-efficient queries
Querying the Data
Section titled “Querying the Data”- Logchef CLI — query logs from the terminal, built for scripting and quick investigations
- MCP Server — connect AI coding assistants to Logchef over the Model Context Protocol
Next steps
Section titled “Next steps”- New to Logchef? Start with Quick Start
- Already have logs in ClickHouse? Jump to Query Interface and Search Syntax