Features

Everything Purl actually does

Self-hosted log aggregation on ClickHouse. Each feature below is unlocked by the license key your plan issues — the badge tells you which plan that is.

Free

Free

Self-hosted log aggregation, unlimited and free forever.

Pro

$39/mo

For teams that want dashboards, AI and pipelines.

or $390/yr billed yearly

Enterprise

$199/mo

For organizations with compliance and identity requirements.

or $1990/yr billed yearly

Search & analysis

Find the line you need, watch new ones arrive, and let Purl group the repetitive ones for you.

KQL log search

Free

KQL-style query syntax with field-level search, wildcards and boolean operators — for example level:ERROR AND service:api.

Live tail

Free

Real-time WebSocket log streaming, with the same filters you use for search applied as lines arrive.

Pattern analysis

Free

Automatic clustering of log lines into patterns, with the variable parts replaced by typed placeholders and an occurrence count per pattern.

Unlimited saved searches

Free

Save any query and re-run it later. There is no cap on how many you keep — not even on the free plan.

Elasticsearch-compatible API

Pro

An ES-compatible _search endpoint, so tooling and queries written against Elasticsearch can talk to Purl.

LogsAnalyticsSettings
Live
level:ERROR AND service:api-gateway
Log Volume Over Time1h
18.2K Total1.5K Avg/bucket
Info/DebugWarningError
TimeLevelServiceMessage
14:32:01ERRORapi-gatewayConnection refused to upstream service: payments-svc:8080
14:32:01WARNauth-serviceRate limit exceeded for IP 192.168.1.42 — 150 req/min
14:32:00INFOuser-serviceUser session created: uid=a8f3k2 duration=3600s
14:31:59ERRORpayments-svcStripe webhook signature verification failed: sig_mismatch
14:31:59INFOk8s-ingressHealth check passed: /healthz responded 200 in 2ms
14:31:58WARNqueue-workerMessage processing delayed: queue depth=1247, avg_wait=4.2s
18,247 results in 12msConnected
Illustration of the search view — a drawing of the interface, not a product screenshot.

Alerting

Threshold rules over your own data, delivered where your team already is.

Alert rules

Free

Threshold-based alert rules on your logs. Unlimited rules on every plan.

Telegram alerts

Free

Deliver firing alerts to a Telegram chat through a bot token you control.

Slack alerts

Free

Deliver firing alerts to a Slack channel via a webhook.

Webhook alerts

Pro

POST alerts to any HTTP endpoint to route them into your own on-call or automation tooling.

Dashboards & AI

A place to keep the views you check every morning, plus assistance for when you do not know the query yet.

Custom dashboards

Pro

Build your own dashboards from saved queries and metrics instead of relying on a fixed overview screen.

AI query assistant

Pro

Describe what you are looking for in plain language and get a Purl query back to run and edit.

AI log analysis

Pro

Ask for a summary of a set of log lines or patterns instead of reading through them one by one.

purl — Analytics

Analytics

92Health
Updated: 8:38:44 PM
SystemErrors: 0.12%Cache: 34%ClickHouseSLA: 99.9%

2.4M

Total Logs

182.7 MB

Storage

14d 6h

Uptime

31.2K

Requests

0.023s

Avg Response

0.12%

Error Rate

Query Performance

Avg Time0.023s
Cache Hit34%
Total31.2K
Cached10.6K

Ingestion

Live
Buffer12
Inserts2.4M
Written182.7 MB
Rows2.4M

Latency

P500.018s
P950.087s
P990.142s
Max0.312s

Tables

2
logs2.4M rows · 182.7 MB
log_patterns1.2K rows · 84.3 KB

Cache

Hit Rate34%
Entries287
TTL60s

Throughput

Req/sec47/s
In2.1 KB
Out18.4 KB
Illustration of the analytics view — a drawing of the interface, not a product screenshot.

Operations

Purl runs on your own infrastructure, so the operational features are about keeping that deployment healthy.

Self-hosted deployment

Free

Docker Compose, a Helm chart, or a single install script. Your logs and your ClickHouse stay on your own infrastructure.

Kubernetes monitoring

Pro

Collect container logs as a DaemonSet, with pod, namespace and node metadata attached to each entry.

Ingest pipelines

Pro

Transform, enrich or drop log events on the way in, before they are stored.

Backup & restore

Pro

Scheduled backups of your Purl data, and a restore path for them.

Priority email support

Pro

Your support email goes to the front of the queue instead of the community channel.

Enterprise

Identity and compliance features for organizations that cannot run local dashboard accounts.

SSO / SAML 2.0

Enterprise

Sign in to the Purl dashboard through your existing SAML 2.0 identity provider.

LDAP / Active Directory

Enterprise

Authenticate dashboard users against your LDAP or Active Directory server.

Audit logs

Enterprise

A record of who did what in the dashboard, stored in your own deployment.

Dedicated support engineer

Enterprise

A named engineer who knows your deployment, instead of a shared queue.

Start on the free plan

Search, live tail, pattern analysis and alerting are free and unmetered. Add a license key when you need dashboards, AI, pipelines or enterprise identity.