OpenObserve replaces Splunk with an S3-native log and telemetry engine that uses Parquet columnar storage and SQL to lower infrastructure costs.
OpenObserve stores telemetry directly in Apache Parquet files on object storage and executes queries through an embedded Apache Arrow DataFusion engine. Written in Rust, the platform combines logs, metrics, traces, and frontend session replay into a single binary without requiring indexing clusters. That design eliminates inverted indexes on ingest, allowing engineering teams to query high-volume telemetry streams using standard SQL and PromQL.
Splunk provides enterprise log aggregation and security analysis, but relies on indexers that construct inverted indices on expensive block storage. As daily ingestion reaches terabytes, indexing demands heavy CPU and memory, driving up infrastructure footprints alongside per-gigabyte licensing fees. OpenObserve replaces that design with a stream pipeline. Ingest nodes buffer incoming records, convert them into compressed Parquet files, and flush them to object storage like Amazon S3 or MinIO. Stateless queriers scan partition metadata and column chunks on demand, matching search speeds on everyday filters with smaller compute footprints.
The trade-off centers on security analytics and query semantics. Splunk maintains certified apps, user behavior analytics, and SIEM detections powered by Search Processing Language. OpenObserve covers log ingestion, ad-hoc exploration, dashboards, and alerting using OpenTelemetry and SQL. Teams moving from Splunk ingest standard OTLP streams without forwarder lock-in, though complex SPL pipelines require SQL rewrites, and single sign-on requires an enterprise contract.
Is OpenObserve a drop-in replacement for Splunk? No. OpenObserve handles operational logging, metrics, and tracing through SQL and OpenTelemetry, but lacks SPL syntax and Splunk's proprietary SIEM apps.
Can OpenObserve be self-hosted for free in commercial environments? Yes. The open-source distribution is free for production use, though enterprise capabilities like SAML authentication and granular access control require a commercial license.
How does OpenObserve achieve lower storage costs than traditional log databases? OpenObserve writes compressed columnar Parquet files to object storage instead of building full-text inverted indexes on expensive local disks.
OpenObserve is a compelling solution when escalating ingestion volumes make traditional log platforms unaffordable and teams want the flexibility of SQL querying over object storage. It is less suitable for security operations teams that depend on Splunk's turnkey SIEM detections and vendor application catalog. Actively maintained with updates pushed in September 2026, the project provides its AGPL-3.0 codebase under terms that allow organizations to run high-scale self-hosted observability without per-gigabyte data penalties.
Commands from the official package registries. Each package is matched to OpenObserve through the registry's own link to its source code or website.
winget install --id openobserve.openobserve -esudo pacman -S openobserveWe started this exact setup from scratch in a clean Linux machine on Nov 1, 2026 and checked it through OpenObserve's own API: every check passed. Recipes are re-checked regularly and removed if they stop working.
mkdir -p openobserve && cd openobserve
curl -fsSL https://open-source.store/tools/openobserve/compose.yml -o compose.ymlcat > .env <<EOF
[email protected]
ZO_ROOT_USER_PASSWORD=$(openssl rand -base64 32)
ZO_WEB_URL=http://localhost:5080
EOFZO_ROOT_USER_EMAIL — Email address for the initial root admin user.ZO_ROOT_USER_PASSWORD — Initial password for the root admin user. Generated above; keep it secret.ZO_WEB_URL — Public URL for web UI access, redirects, and alert links.docker compose up -dservices:
openobserve:
image: openobserve/openobserve:v1.1.2
ports:
- "5080:5080"
environment:
ZO_ROOT_USER_EMAIL: ${ZO_ROOT_USER_EMAIL}
ZO_ROOT_USER_PASSWORD: ${ZO_ROOT_USER_PASSWORD}
ZO_WEB_URL: ${ZO_WEB_URL}
ZO_DATA_DIR: /data
volumes:
- openobserve-data:/data
restart: always
volumes:
openobserve-data:
Go, gRPC and Protobuf done right, LLM agents in production, and the hard parts of shipping a first product.
Show that OpenObserve is listed as an open-source alternative. Paste into your README:
Ubuntu 24.04 · Apple container, Docker 29.1.3, Compose 2.40.3+ds1-0ubuntu1~24.04.1. Images pulled in 19 s: openobserve/openobserve:v1.1.2.
Based on the upstream setup. Official Docker setup from OpenObserve documentation. Image pinned to v1.1.2, persistent data directory mounted to named volume, root credentials and public web URL configured via .env.
openobserve-1 | 2026-11-01T05:49:33.836034666Z 2026-11-01T05:49:33.833105541+00:00 INFO config::axum::middlewares::access_log: 192.168.64.13 "GET /prweb/PRAuth/app/default/ HTTP/1.1" 401 - "-" "-" "Mozilla/5.0 (Kubuntu; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 0.000 openobserve-1 | 2026-11-01T05:49:33.836037416Z 2026-11-01T05:49:33.833311666+00:00 INFO config::axum::middlewares::access_log: 192.168.64.13 "GET /lab.html?vpath=//interact.sh HTTP/1.1" 401 - "-" "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.5 Safari/604.1" 0.000 openobserve-1 | 2026-11-01T05:49:33.836039833Z 2026-11-01T05:49:33.833625708+00:00 INFO config::axum::middlewares::access_log: 192.168.64.13 "GET /helpdesk/WebObjects/Helpdesk.woa HTTP/1.1" 401 - "-" "-" "Mozilla/5.0 (Macintosh, Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.13 Safari/605.1.15" 0.000 openobserve-1 | 2026-11-01T05:49:33.836042125Z 2026-11-01T05:49:33.833928833+00:00 INFO config::axum::middlewares::access_log: 192.168.64.13 "GET /sphinx/sphinx.conf HTTP/1.1" 401 - "-" "-" "Mozilla/5.0 (Kubuntu; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36" 0.000 openobserve-1 | 2026-11-01T05:49:33.836044375Z 2026-11-01T05:49:33.834222833+00:00 INFO config::axum::middlewares::access_log: 192.168.64.13 "GET /administrator/auth.json HTTP/1.1" 401 - "-" "-" "Mozilla/5.0 (X11; Linux x86_64; rv:1.9.7.20) Gecko/ Firefox/3.6.7" 0.000 openobserve-1 | 2026-11-01T05:49:33.836047750Z 2026-11-01T05:49:33.834510916+00:00 INFO config::axum::middlewares::access_log: 192.168.64.13 "GET /redmine/config/initializers/secret_token.rb HTTP/1.1" 401 - "-" "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_0) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.0 Safari/605.1.15" 0.000 openobserve-1 | 2026-11-01T05:49:33.839804041Z 2026-11-01T05:49:33.835837916+00:00 INFO config::axum::middlewares::access_log: 192.168.64.13 "GET /config/settings.old.php HTTP/1.1" 401 - "-" "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:132.0) Gecko/20100101 Firefox/132.0" 0.000 openobserve-1 | 2026-11-01T05:49:33.839823625Z 2026-11-01T05:49:33.836279083+00:00 INFO config::axum::middlewares::access_log: 192.168.64.13 "GET /store/app/etc/local.xml HTTP/1.1" 401 - "-" "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14.3) AppleWebKit/614.31.14 (KHTML, like Gecko) Version/17.0.96 Safari/614.31.14" 0.000 openobserve-1 | 2026-11-01T05:49:33.839825000Z 2026-11-01T05:49:33.836563666+00:00 INFO config::axum::middlewares::access_log: 192.168.64.13 "GET /RST_status.htm%00currentsetting.htm HTTP/1.1" 401 - "-" "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/99.0.4844.51 Safari/537.36" 0.000 openobserve-1 | 2026-11-01T05:49:33.839826000Z 2026-11-01T05:49:33.836822208+00:00 INFO config::axum::middlewares::access_log: 192.168.64.13 "GET /mobile-app/v3/?pid=77A89299&isMobile=%20clq95%22%3E%3Cscript%3Ealert(document.domain)%3C/script%3Elb1ra HTTP/1.1" 401 - "-" "-" "Mozilla/5.0 (Knoppix; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" 0.000 openobserve-1 | 2026-11-01T05:49:33.839827125Z 2026-11-01T05:49:33.837074500+00:00 INFO config::axum::middlewares::access_log: 192.168.64.13 "GET /wp-admin/admin.php?page=wp_ajax_rsvp-form&tribe_tickets_redirect_to=https://interact.sh HTTP/1.1" 401 - "-" "-" "Mozilla/5.0 (X11; Linux x86_64; rv:1.9.5.20) Gecko/ Firefox/3.6.6" 0.000 openobserve-1 | 2026-11-01T05:49:33.839828125Z 2026-11-01T05:49:33.837416+00:00 INFO config::axum::middlewares::access_log: 192.168.64.13 "GET /index.php?option=com_jprojectmanager&controller=../../../../../../../../../../etc/passwd%00 HTTP/1.1" 401 - "-" "-" "Mozilla/5.0 (X11; Linux x86_64; rv:1.9.5.20) Gecko/ Firefox/3.6.16" 0.000 openobserve-1 | 2026-11-01T05:49:33.839829041Z 2026-11-01T05:49:33.837690500+00:00 INFO config::axum::middlewares::access_log: 192.168.64.13 "GET /helpdesk/WebObjects/Helpdesk.woa HTTP/1.1" 401 - "-" "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36" 0.000 openobserve-1 | 2026-11-01T05:49:33.839829875Z 2026-11-01T05:49:33.837718625+00:00 INFO config::axum::middlewares::access_log: 192.168.64.13 "GET /store/app/etc/local.xml HTTP/1.1" 401 - "-" "-" "Mozilla/5.0 (CentOS; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36" 0.000 openobserve-1 | 2026-11-01T05:49:33.839830791Z 2026-11-01T05:49:33.838016166+00:00 INFO config::axum::middlewares::access_log: 192.168.64.13 "GET /lab.html?vpath=//interact.sh HTTP/1.1" 401 - "-" "-" "Mozilla/5.0 (Windows NT 6.2; rv:140.) Gecko/20100101 Firefox/140." 0.000 openobserve-1 | 2026-11-01T05:49:33.839831625Z 2026-11-01T05:49:33.838178541+00:00 INFO config::axum::middlewares::access_log: 192.168.64.13 "GET /jsp/help-sb-download.jsp?sbFileName=../../../etc/passwd HTTP/1.1" 401 - "-" "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 0.000 openobserve-1 | 2026-11-01T05:49:33.839832500Z 2026-11-01T05:49:33.838336708+00:00 INFO config::axum::middlewares::access_log: 192.168.64.13 "GET /sphinxsearch/sphinx.conf HTTP/1.1" 401 - "-" "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Safari/605.1.15" 0.000 openobserve-1 | 2026-11-01T05:49:33.839833333Z 2026-11-01T05:49:33.838510625+00:00 INFO config::axum::middlewares::access_log: 192.168.64.13 "GET /cgi-bin/GetFileContent.cgi?USER=root&PWD=D1D1D1D1D1D1D1D1D1D1D1D1A2A2B0A1D1D1D1D1D1D1D1D1D1D1D1D1D1D1B8D1&PATH=/etc/passwd HTTP/1.1" 401 - "-" "-" "Mozilla/5.0 (X11; Linux x86_64; rv:1.9.6.20) Gecko/ Firefox/3.6.14" 0.000 openobserve-1 | 2026-11-01T05:49:33.839834333Z 2026-11-01T05:49:33.838623625+00:00 INFO config::axum::middlewares::access_log: 192.168.64.13 "GET /jsp/help-sb-download.jsp?sbFileName=../../../etc/passwd HTTP/1.1" 401 - "-" "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.1.2 Safari/605.1.15" 0.000 openobserve-1 | 2026-11-01T05:49:33.839836708Z 2026-11-01T05:49:33.838826833+00:00 INFO config::axum::middlewares::access_log: 192.168.64.13 "GET /wp-admin/admin.php?page=wp_ajax_rsvp-form&tribe_tickets_redirect_to=https://interact.sh HTTP/1.1" 401 - "-" "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.5 Safari/605.1.15" 0.000 openobserve-1 | 2026-11-01T05:49:33.839837666Z 2026-11-01T05:49:33.838915583+00:00 INFO config::axum::middlewares::access_log: 192.168.64.13 "GET /wp-content/plugins/mail-masta/inc/lists/csvexport.php?pl=/etc/passwd HTTP/1.1" 401 - "-" "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:137.0) Gecko/20100101 Firefox/137.0" 0.000 openobserve-1 | 2026-11-01T05:49:33.839838666Z 2026-11-01T05:49:33.839077625+00:00 INFO config::axum::middlewares::access_log: 192.168.64.13 "GET /cgi-bin-hax/ExportSettings.sh HTTP/1.1" 401 - "-" "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; ClaudeBot/1.0; [email protected])" 0.000 openobserve-1 | 2026-11-01T05:49:33.839839625Z 2026-11-01T05:49:33.839107916+00:00 INFO config::axum::middlewares::access_log: 192.168.64.13 "GET /bin/get/XWiki/SuggestSolrService?outputSyntax=plain&media=json&nb=1000&query=q%3D*%3A*%0Aq.op%3DAND%0Afq%3Dtype%3ADOCUMENT%0Afl%3Dtitle_%2C+reference%2C+links%2C+doccontentraw_%2C+objcontent__&input=+ HTTP/1.1" 401 - "-" "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.36" 0.000 openobserve-1 | 2026-11-01T05:49:33.839840875Z 2026-11-01T05:49:33.839172500+00:00 INFO config::axum::middlewares::access_log: 192.168.64.13 "GET /mobile-app/v3/?pid=77A89299&isMobile=%20clq95%22%3E%3Cscript%3Ealert(document.domain)%3C/script%3Elb1ra HTTP/1.1" 401 - "-" "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; WOW64; rv:41.0) Gecko/20100101 Firefox/140.0.1 (x64 de)" 0.000 openobserve-1 | 2026-11-01T05:49:33.839841791Z 2026-11-01T05:49:33.839200541+00:00 INFO config::axum::middlewares::access_log: 192.168.64.13 "GET /site/auth.json HTTP/1.1" 401 - "-" "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_9_3) AppleWebKit/537.75.14 (KHTML, like Gecko) Version/7.0.3 Safari/E7FBAF" 0.000 openobserve-1 | 2026-11-01T05:49:33.839842666Z 2026-11-01T05:49:33.839267916+00:00 INFO config::axum::middlewares::access_log: 192.168.64.13 "GET /cb_install/ HTTP/1.1" 401 - "-" "-" "Mozilla/5.0 (SS; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.36" 0.000 openobserve-1 | 2026-11-01T05:49:33.839843500Z 2026-11-01T05:49:33.839291458+00:00 INFO config::axum::middlewares::access_log: 192.168.64.13 "GET /bin/get/XWiki/SuggestSolrService?outputSyntax=plain&media=json&nb=1000&query=q%3D*%3A*%0Aq.op%3DAND%0Afq%3Dtype%3ADOCUMENT%0Afl%3Dtitle_%2C+reference%2C+links%2C+doccontentraw_%2C+objcontent__&input=+ HTTP/1.1" 401 - "-" "-" "Mozilla/5.0 (ZZ; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36" 0.000 openobserve-1 | 2026-11-01T05:49:33.839844750Z 2026-11-01T05:49:33.839362958+00:00 INFO config::axum::middlewares::access_log: 192.168.64.13 "GET /RST_status.htm%00currentsetting.htm HTTP/1.1" 401 - "-" "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 0.000 openobserve-1 | 2026-11-01T05:49:33.839845583Z 2026-11-01T05:49:33.839383916+00:00 INFO config::axum::middlewares::access_log: 192.168.64.13 "GET /cb_install/ HTTP/1.1" 401 - "-" "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:123.0) Gecko/20100101 Firefox/123.0" 0.000 openobserve-1 | 2026-11-01T05:49:33.839847375Z 2026-11-01T05:49:33.839455541+00:00 INFO config::axum::middlewares::access_log: 192.168.64.13 "GET /sphinx/sphinx.conf HTTP/1.1" 401 - "-" "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:64.0) Gecko/20100101 Firefox/64.0" 0.000 openobserve-1 | 2026-11-01T05:49:33.839848291Z 2026-11-01T05:49:33.839480208+00:00 INFO config::axum::middlewares::access_log: 192.168.64.13 "GET /redmine/config/initializers/secret_token.rb HTTP/1.1" 401 - "-" "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10) AppleWebKit/537.36 (KHTML, like Gecko) Version/8.0 Safari/537.36" 0.000 openobserve-1 | 2026-11-01T05:49:33.839849291Z 2026-11-01T05:49:33.839553291+00:00 INFO config::axum::middlewares::access_log: 192.168.64.13 "GET /settings.php.txt HTTP/1.1" 401 - "-" "-" "Mozilla/5.0 (ZZ; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36" 0.000 openobserve-1 | 2026-11-01T05:49:33.839850291Z 2026-11-01T05:49:33.839573750+00:00 INFO config::axum::middlewares::access_log: 192.168.64.13 "GET /index.php?option=com_jprojectmanager&controller=../../../../../../../../../../etc/passwd%00 HTTP/1.1" 401 - "-" "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_6) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/12.0 Safari/605.1.15" 0.000 openobserve-1 | 2026-11-01T05:49:33.839851458Z 2026-11-01T05:49:33.839649166+00:00 INFO config::axum::middlewares::access_log: 192.168.64.13 "GET /src/auth.json HTTP/1.1" 401 - "-" "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15" 0.000 openobserve-1 | 2026-11-01T05:49:33.839860791Z 2026-11-01T05:49:33.839672041+00:00 INFO config::axum::middlewares::access_log: 192.168.64.13 "GET /cgi-bin-hax/ExportSettings.sh HTTP/1.1" 401 - "-" "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Safari/605.1.15 MarketGoo/2.1" 0.000 openobserve-1 | 2026-11-01T05:49:33.839862000Z 2026-11-01T05:49:33.839741416+00:00 INFO config::axum::middlewares::access_log: 192.168.64.13 "GET /cgi-bin/GetFileContent.cgi?USER=root&PWD=D1D1D1D1D1D1D1D1D1D1D1D1A2A2B0A1D1D1D1D1D1D1D1D1D1D1D1D1D1D1B8D1&PATH=/etc/passwd HTTP/1.1" 401 - "-" "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/99.0.4844.51 Safari/537.36" 0.000 openobserve-1 | 2026-11-01T05:49:33.839863083Z 2026-11-01T05:49:33.839760541+00:00 INFO config::axum::middlewares::access_log: 192.168.64.13 "GET /config.php.bak HTTP/1.1" 401 - "-" "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4.1 Safari/605.1.15" 0.000 openobserve-1 | 2026-11-01T05:49:33.841115458Z 2026-11-01T05:49:33.841056916+00:00 INFO config::axum::middlewares::access_log: 192.168.64.13 "GET /source/auth.json HTTP/1.1" 401 - "-" "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 0.000 openobserve-1 | 2026-11-01T05:49:33.841662125Z 2026-11-01T05:49:33.841610875+00:00 INFO config::axum::middlewares::access_log: 192.168.64.13 "GET /xwiki/bin/get/XWiki/SuggestSolrService?outputSyntax=plain&media=json&nb=1000&query=q%3D*%3A*%0Aq.op%3DAND%0Afq%3Dtype%3ADOCUMENT%0Afl%3Dtitle_%2C+reference%2C+links%2C+doccontentraw_%2C+objcontent__&input=+ HTTP/1.1" 401 - "-" "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.18362" 0.000 openobserve-1 | 2026-11-01T05:49:33.842286750Z 2026-11-01T05:49:33.842201833+00:00 INFO config::axum::middlewares::access_log: 192.168.64.13 "GET /config/settings.old.php HTTP/1.1" 401 - "-" "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.10 Safari/605.1.15" 0.000 openobserve-1 | 2026-11-01T05:49:33.844694208Z 2026-11-01T05:49:33.844576500+00:00 INFO config::axum::middlewares::access_log: 192.168.64.13 "GET /config.php.dist HTTP/1.1" 401 - "-" "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.57.2 (KHTML, like Gecko) Version/5.1.7 Safari/534.57.2" 0.000 openobserve-1 | 2026-11-01T05:49:33.847264750Z 2026-11-01T05:49:33.845586708+00:00 INFO config::axum::middlewares::access_log: 192.168.64.13 "GET /www/auth.json HTTP/1.1" 401 - "-" "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.2 Safari/605.1.15" 0.000 openobserve-1 | 2026-11-01T05:49:33.847271250Z 2026-11-01T05:49:33.845841916+00:00 INFO config::axum::middlewares::access_log: 192.168.64.13 "GET /config.php.old HTTP/1.1" 401 - "-" "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) ConnectPC Safari/537.36" 0.000 openobserve-1 | 2026-11-01T05:49:33.847273333Z 2026-11-01T05:49:33.846079750+00:00 INFO config::axum::middlewares::access_log: 192.168.64.13 "GET /sites/auth.json HTTP/1.1" 401 - "-" "-" "Mozilla/5.0 (X11; Linux i686; rv:1.9.7.20) Gecko/ Firefox/3.6.4" 0.000 openobserve-1 | 2026-11-01T05:49:33.847992208Z 2026-11-01T05:49:33.847429958+00:00 INFO config::axum::middlewares::access_log: 192.168.64.13 "GET /sphinxsearch/sphinx.conf HTTP/1.1" 401 - "-" "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_4) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.1 Safari/605.1.15" 0.000 openobserve-1 | 2026-11-01T05:49:33.847996458Z 2026-11-01T05:49:33.847507666+00:00 INFO config::axum::middlewares::access_log: 192.168.64.13 "GET /config.php.save HTTP/1.1" 401 - "-" "-" "Mozilla/5.0 (Fedora; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" 0.000 openobserve-1 | 2026-11-01T05:49:33.847998375Z 2026-11-01T05:49:33.847693458+00:00 INFO config::axum::middlewares::access_log: 192.168.64.13 "GET /web/auth.json HTTP/1.1" 200 2958 "-" "-" "Mozilla/5.0 (Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36" 0.000 openobserve-1 | 2026-11-01T05:49:33.848000375Z 2026-11-01T05:49:33.847720208+00:00 INFO config::axum::middlewares::access_log: 192.168.64.13 "GET /config.php.bak HTTP/1.1" 401 - "-" "-" "Mozilla/5.0 (ZZ; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" 0.000 openobserve-1 | 2026-11-01T05:49:33.848002250Z 2026-11-01T05:49:33.847942166+00:00 INFO config::axum::middlewares::access_log: 192.168.64.13 "GET /xwiki/bin/get/XWiki/SuggestSolrService?outputSyntax=plain&media=json&nb=1000&query=q%3D*%3A*%0Aq.op%3DAND%0Afq%3Dtype%3ADOCUMENT%0Afl%3Dtitle_%2C+reference%2C+links%2C+doccontentraw_%2C+objcontent__&input=+ HTTP/1.1" 401 - "-" "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.0 Safari/605.1.15" 0.000 openobserve-1 | 2026-11-01T05:49:33.848530750Z 2026-11-01T05:49:33.848479833+00:00 INFO config::axum::middlewares::access_log: 192.168.64.13 "GET /private/auth.json HTTP/1.1" 401 - "-" "-" "Mozilla/5.0 (X11; Linux x86_64; rv:1.9.6.20) Gecko/ Firefox/3.8" 0.000 openobserve-1 | 2026-11-01T05:49:33.849346416Z 2026-11-01T05:49:33.849266708+00:00 INFO config::axum::middlewares::access_log: 192.168.64.13 "GET /secure/auth.json HTTP/1.1" 401 - "-" "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.1.1 Mobile/15E148 Safari/604.1" 0.000 openobserve-1 | 2026-11-01T05:49:33.850053916Z 2026-11-01T05:49:33.849972+00:00 INFO config::axum::middlewares::access_log: 192.168.64.13 "GET /site/auth.json HTTP/1.1" 401 - "-" "-" "Mozilla/5.0 (Fedora; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" 0.000 openobserve-1 | 2026-11-01T05:49:33.850437583Z 2026-11-01T05:49:33.850362125+00:00 INFO config::axum::middlewares::access_log: 192.168.64.13 "GET /.config.php.swp HTTP/1.1" 401 - "-" "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:128.0) Gecko/20100101 Firefox/128.3" 0.000 openobserve-1 | 2026-11-01T05:49:33.850712041Z 2026-11-01T05:49:33.850668500+00:00 INFO config::axum::middlewares::access_log: 192.168.64.13 "GET /secret/auth.json HTTP/1.1" 401 - "-" "-" "Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10_6_8; es-es) AppleWebKit/533.21.1 (KHTML, like Gecko) Version/5.0.5 Safari/533.21.1" 0.000 openobserve-1 | 2026-11-01T05:49:33.850921750Z 2026-11-01T05:49:33.850879250+00:00 INFO config::axum::middlewares::access_log: 192.168.64.13 "GET /config.php.dist HTTP/1.1" 401 - "-" "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7" 0.000 openobserve-1 | 2026-11-01T05:49:33.851231083Z 2026-11-01T05:49:33.851177458+00:00 INFO config::axum::middlewares::access_log: 192.168.64.13 "GET /config.php.txt HTTP/1.1" 401 - "-" "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36" 0.000 openobserve-1 | 2026-11-01T05:49:33.851710958Z 2026-11-01T05:49:33.851471125+00:00 INFO config::axum::middlewares::access_log: 192.168.64.13 "GET /sites/auth.json HTTP/1.1" 401 - "-" "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Safari/605.1.15" 0.000 openobserve-1 | 2026-11-01T05:49:33.851714333Z 2026-11-01T05:49:33.851655583+00:00 INFO config::axum::middlewares::access_log: 192.168.64.13 "GET /secrets/auth.json HTTP/1.1" 401 - "-" "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:70.0) Gecko/20100101 Firefox/70.0" 0.000 openobserve-1 | 2026-11-01T05:49:33.851715916Z 2026-11-01T05:49:33.851671083+00:00 INFO config::axum::middlewares::access_log: 192.168.64.13 "GET /config.php.old HTTP/1.1" 401 - "-" "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Gecko/20100101 Firefox/140.0.2 (x64 de)" 0.000 openobserve-1 | 2026-11-01T05:49:33.852131041Z 2026-11-01T05:49:33.852087041+00:00 INFO config::axum::middlewares::access_log: 192.168.64.13 "GET /config/settings.old.php HTTP/1.1" 401 - "-" "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/113.0" 0.000 openobserve-1 | 2026-11-01T05:49:33.853299333Z 2026-11-01T05:49:33.853206708+00:00 INFO config::axum::middlewares::access_log: 192.168.64.13 "GET /env/auth.json HTTP/1.1" 401 - "-" "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.1.1 Safari/605.1.15" 0.000 openobserve-1 | 2026-11-01T05:49:33.853826625Z 2026-11-01T05:49:33.853761125+00:00 INFO config::axum::middlewares::access_log: 192.168.64.13 "GET /environment/auth.json HTTP/1.1" 401 - "-" "-" "Mozilla/5.0 (X11; Linux i686; rv:1.9.6.20) Gecko/ Firefox/14.0" 0.000 openobserve-1 | 2026-11-01T05:49:33.854226333Z 2026-11-01T05:49:33.853991083+00:00 INFO config::axum::middlewares::access_log: 192.168.64.13 "GET /config.php.save HTTP/1.1" 401 - "-" "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/602.4.8 (KHTML, like Gecko) Version/10.0 Safari/602.4.8" 0.000 openobserve-1 | 2026-11-01T05:49:33.854229625Z 2026-11-01T05:49:33.854167541+00:00 INFO config::axum::middlewares::access_log: 192.168.64.13 "GET /private/auth.json HTTP/1.1" 401 - "-" "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36" 0.000 openobserve-1 | 2026-11-01T05:49:33.854566750Z 2026-11-01T05:49:33.854523833+00:00 INFO config::axum::middlewares::access_log: 192.168.64.13 "GET /.config.php.swp HTTP/1.1" 401 - "-" "-" "Mozilla/5.0 (Fedora; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36" 0.000 openobserve-1 | 2026-11-01T05:49:33.854786416Z 2026-11-01T05:49:33.854735916+00:00 INFO config::axum::middlewares::access_log: 192.168.64.13 "GET /test/auth.json HTTP/1.1" 401 - "-" "-" "Mozilla/5.0 (Kubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36" 0.000 openobserve-1 | 2026-11-01T05:49:33.854976666Z 2026-11-01T05:49:33.854932666+00:00 INFO config::axum::middlewares::access_log: 192.168.64.13 "GET /secure/auth.json HTTP/1.1" 401 - "-" "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.11 Safari/605.1.15" 0.000 openobserve-1 | 2026-11-01T05:49:33.855642625Z 2026-11-01T05:49:33.855294708+00:00 INFO config::axum::middlewares::access_log: 192.168.64.13 "GET /tests/auth.json HTTP/1.1" 401 - "-" "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.57.2 (KHTML, like Gecko) Version/5.1.7 Safari/534.57.2" 0.000 openobserve-1 | 2026-11-01T05:49:33.855645708Z 2026-11-01T05:49:33.855445833+00:00 INFO config::axum::middlewares::access_log: 192.168.64.13 "GET /secret/auth.json HTTP/1.1" 401 - "-" "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36" 0.000 openobserve-1 | 2026-11-01T05:49:33.855647125Z 2026-11-01T05:49:33.855591500+00:00 INFO config::axum::middlewares::access_log: 192.168.64.13 "GET /config.php.txt HTTP/1.1" 401 - "-" "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.5.20" 0.000 openobserve-1 | 2026-11-01T05:49:33.855920083Z 2026-11-01T05:49:33.855880+00:00 INFO config::axum::middlewares::access_log: 192.168.64.13 "GET /secrets/auth.json HTTP/1.1" 401 - "-" "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.0.0 Safari/537.36" 0.000 openobserve-1 | 2026-11-01T05:49:33.856286916Z 2026-11-01T05:49:33.856247875+00:00 INFO config::axum::middlewares::access_log: 192.168.64.13 "GET /dev/auth.json HTTP/1.1" 401 - "-" "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Version/15.4 Safari/537.36" 0.000 openobserve-1 | 2026-11-01T05:49:33.857260583Z 2026-11-01T05:49:33.857198291+00:00 INFO config::axum::middlewares::access_log: 192.168.64.13 "GET /config/settings.old.php HTTP/1.1" 401 - "-" "-" "Mozilla/5.0 (X11; Linux i686; rv:1.9.7.20) Gecko/ Firefox/3.6.2" 0.000 openobserve-1 | 2026-11-01T05:49:33.857928333Z 2026-11-01T05:49:33.857722375+00:00 INFO config::axum::middlewares::access_log: 192.168.64.13 "GET /development/auth.json HTTP/1.1" 401 - "-" "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.1.1 Safari/605.1.15" 0.000 openobserve-1 | 2026-11-01T05:49:33.857931375Z 2026-11-01T05:49:33.857876333+00:00 INFO config::axum::middlewares::access_log: 192.168.64.13 "GET /env/auth.json HTTP/1.1" 401 - "-" "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.159 Safari/537.36" 0.000 openobserve-1 | 2026-11-01T05:49:33.858429166Z 2026-11-01T05:49:33.858228208+00:00 INFO config::axum::middlewares::access_log: 192.168.64.13 "GET /staging/auth.json HTTP/1.1" 401 - "-" "-" "Mozilla/5.0 (Mac OS X 13_2) AppleWebKit/537.36 (KHTML, like Gecko) Edge/117.0 Safari/537.36" 0.000 openobserve-1 | 2026-11-01T05:49:33.858436166Z 2026-11-01T05:49:33.858379041+00:00 INFO config::axum::middlewares::access_log: 192.168.64.13 "GET /environment/auth.json HTTP/1.1" 401 - "-" "-" "Mozilla/5.0 (X11; Linux i686; rv:1.9.5.20) Gecko/ Firefox/3.6.12" 0.000 openobserve-1 | 2026-11-01T05:49:33.858920000Z 2026-11-01T05:49:33.858722666+00:00 INFO config::axum::middlewares::access_log: 192.168.64.13 "GET /prod/auth.json HTTP/1.1" 401 - "-" "-" "Mozilla/5.0 (Knoppix; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.36" 0.000 openobserve-1 | 2026-11-01T05:49:33.858926041Z 2026-11-01T05:49:33.858872125+00:00 INFO config::axum::middlewares::access_log: 192.168.64.13 "GET /test/auth.json HTTP/1.1" 401 - "-" "-" "Mozilla/5.0 (Windows NT 6.1; rv:105.0) Gecko/20100101 Firefox/105.0" 0.000 openobserve-1 | 2026-11-01T05:49:33.859412125Z 2026-11-01T05:49:33.859216541+00:00 INFO config::axum::middlewares::access_log: 192.168.64.13 "GET /production/auth.json HTTP/1.1" 401 - "-" "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.18363" 0.000 openobserve-1 | 2026-11-01T05:49:33.859414791Z 2026-11-01T05:49:33.859365583+00:00 INFO config::axum::middlewares::access_log: 192.168.64.13 "GET /tests/auth.json HTTP/1.1" 401 - "-" "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/12.1.2 Safari/605.1.15" 0.000 openobserve-1 | 2026-11-01T05:49:33.860046375Z 2026-11-01T05:49:33.859840166+00:00 INFO config::axum::middlewares::access_log: 192.168.64.13 "GET /includes/auth.json HTTP/1.1" 401 - "-" "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; zh-CN; rv:1.9) Gecko/2008052906 Firefox/3.0" 0.000 openobserve-1 | 2026-11-01T05:49:33.860070833Z 2026-11-01T05:49:33.859965583+00:00 INFO config::axum::middlewares::access_log: 192.168.64.13 "GET /dev/auth.json HTTP/1.1" 401 - "-" "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.0.2 Safari/605.1.15" 0.000 openobserve-1 | 2026-11-01T05:49:33.864627750Z 2026-11-01T05:49:33.864543208+00:00 INFO config::axum::middlewares::access_log: 192.168.64.13 "GET /development/auth.json HTTP/1.1" 401 - "-" "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_5_2) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15" 0.000 openobserve-1 | 2026-11-01T05:49:33.864641208Z 2026-11-01T05:49:33.864548708+00:00 INFO config::axum::middlewares::access_log: 192.168.64.13 "GET /include/auth.json HTTP/1.1" 401 - "-" "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/600.1.25 (KHTML, like Gecko) Version/8.0 Safari/600.1.25" 0.000 openobserve-1 | 2026-11-01T05:49:33.865069083Z 2026-11-01T05:49:33.865031500+00:00 INFO config::axum::middlewares::access_log: 192.168.64.13 "GET /lib/auth.json HTTP/1.1" 401 - "-" "-" "Mozilla/5.0 (ZZ; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36" 0.000 openobserve-1 | 2026-11-01T05:49:33.865203750Z 2026-11-01T05:49:33.865178458+00:00 INFO config::axum::middlewares::access_log: 192.168.64.13 "GET /staging/auth.json HTTP/1.1" 401 - "-" "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/113.0" 0.000 openobserve-1 | 2026-11-01T05:49:33.865439625Z 2026-11-01T05:49:33.865411791+00:00 INFO config::axum::middlewares::access_log: 192.168.64.13 "GET /prod/auth.json HTTP/1.1" 401 - "-" "-" "Mozilla/5.0 (X11; Linux i686; rv:1.9.5.20) Gecko/ Firefox/3.6.20" 0.000 openobserve-1 | 2026-11-01T05:49:33.865651708Z 2026-11-01T05:49:33.865626208+00:00 INFO config::axum::middlewares::access_log: 192.168.64.13 "GET /production/auth.json HTTP/1.1" 401 - "-" "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/94.0.4606.81 Safari/537.36" 0.000 openobserve-1 | 2026-11-01T05:49:33.865863208Z 2026-11-01T05:49:33.865836916+00:00 INFO config::axum::middlewares::access_log: 192.168.64.13 "GET /includes/auth.json HTTP/1.1" 401 - "-" "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 15_3) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3 Safari/605.1.15" 0.000 openobserve-1 | 2026-11-01T05:49:33.866065291Z 2026-11-01T05:49:33.866040916+00:00 INFO config::axum::middlewares::access_log: 192.168.64.13 "GET /include/auth.json HTTP/1.1" 401 - "-" "-" "Mozilla/5.0 (X11; Linux i686; rv:1.9.5.20) Gecko/ Firefox/13.0" 0.000 openobserve-1 | 2026-11-01T05:49:33.868469208Z 2026-11-01T05:49:33.868410958+00:00 INFO config::axum::middlewares::access_log: 192.168.64.13 "GET /lib/auth.json HTTP/1.1" 401 - "-" "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.13; rv:78.0) Gecko/20100101 Firefox/78.0" 0.000 openobserve-1 | 2026-11-01T05:49:33.868708583Z 2026-11-01T05:49:33.868676666+00:00 INFO config::axum::middlewares::access_log: 192.168.64.13 "GET /libs/auth.json HTTP/1.1" 401 - "-" "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" 0.000 openobserve-1 | 2026-11-01T05:49:33.868852250Z 2026-11-01T05:49:33.868830125+00:00 INFO config::axum::middlewares::access_log: 192.168.64.13 "GET /libs/auth.json HTTP/1.1" 401 - "-" "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/117.0" 0.000 openobserve-1 | 2026-11-01T05:49:33.868969208Z 2026-11-01T05:49:33.868950333+00:00 INFO config::axum::middlewares::access_log: 192.168.64.13 "GET /library/auth.json HTTP/1.1" 401 - "-" "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:68.0) Gecko/20100101 Firefox/68.0" 0.000 openobserve-1 | 2026-11-01T05:49:33.869292583Z 2026-11-01T05:49:33.869270833+00:00 INFO config::axum::middlewares::access_log: 192.168.64.13 "GET /vendor/auth.json HTTP/1.1" 401 - "-" "-" "Mozilla/5.0 (Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36" 0.000 openobserve-1 | 2026-11-01T05:49:33.869424666Z 2026-11-01T05:49:33.869403083+00:00 INFO config::axum::middlewares::access_log: 192.168.64.13 "GET /library/auth.json HTTP/1.1" 401 - "-" "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/117.0" 0.000 openobserve-1 | 2026-11-01T05:49:33.869522000Z 2026-11-01T05:49:33.869502166+00:00 INFO config::axum::middlewares::access_log: 192.168.64.13 "GET /vendors/auth.json HTTP/1.1" 401 - "-" "-" "Mozilla/5.0 (Fedora; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" 0.000 openobserve-1 | 2026-11-01T05:49:33.870013958Z 2026-11-01T05:49:33.869831250+00:00 INFO config::axum::middlewares::access_log: 192.168.64.13 "GET /vendor/auth.json HTTP/1.1" 401 - "-" "-" "Mozilla/5.0 (Windows NT 6.1; rv:33.0) Gecko/20100101 Firefox/33.0" 0.000 openobserve-1 | 2026-11-01T05:49:33.870018416Z 2026-11-01T05:49:33.869938+00:00 INFO config::axum::middlewares::access_log: 192.168.64.13 "GET /node_modules/auth.json HTTP/1.1" 401 - "-" "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Whale/4.32.315.22 Safari/537.36" 0.000 openobserve-1 | 2026-11-01T05:49:33.870294791Z 2026-11-01T05:49:33.870184791+00:00 INFO config::axum::middlewares::access_log: 192.168.64.13 "GET /vendors/auth.json HTTP/1.1" 401 - "-" "-" "Mozilla/5.0 (X11; Linux i686; rv:1.9.6.20) Gecko/ Firefox/4.0" 0.000 openobserve-1 | 2026-11-01T05:49:33.870307833Z 2026-11-01T05:49:33.870271333+00:00 INFO config::axum::middlewares::access_log: 192.168.64.13 "GET /storage/auth.json HTTP/1.1" 401 - "-" "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4324.182 Safari/537.36" 0.000 openobserve-1 | 2026-11-01T05:49:33.870516916Z 2026-11-01T05:49:33.870488958+00:00 INFO config::axum::middlewares::access_log: 192.168.64.13 "GET /node_modules/auth.json HTTP/1.1" 401 - "-" "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.3 Mobile/15E148 Safari/604.1" 0.000 openobserve-1 | 2026-11-01T05:49:33.870616666Z 2026-11-01T05:49:33.870595333+00:00 INFO config::axum::middlewares::access_log: 192.168.64.13 "GET /database/auth.json HTTP/1.1" 401 - "-" "-" "Mozilla/5.0 (Kubuntu; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36" 0.000 openobserve-1 | 2026-11-01T05:49:33.870805750Z 2026-11-01T05:49:33.870781041+00:00 INFO config::axum::middlewares::access_log: 192.168.64.13 "GET /storage/auth.json HTTP/1.1" 401 - "-" "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_9_5) AppleWebKit/601.4.4 (KHTML, like Gecko) Version/9.0.3 Safari/537.86.4" 0.000 openobserve-1 | 2026-11-01T05:49:33.871057708Z 2026-11-01T05:49:33.870948208+00:00 INFO config::axum::middlewares::access_log: 192.168.64.13 "GET /db/auth.json HTTP/1.1" 401 - "-" "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:94.0) Gecko/20100101 Firefox/94.0" 0.000 openobserve-1 | 2026-11-01T05:49:33.871059416Z 2026-11-01T05:49:33.871028541+00:00 INFO config::axum::middlewares::access_log: 192.168.64.13 "GET /database/auth.json HTTP/1.1" 401 - "-" "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64; rv:109.0) Gecko/20100101 Firefox/113.0" 0.000 openobserve-1 | 2026-11-01T05:49:33.871345000Z 2026-11-01T05:49:33.871315333+00:00 INFO config::axum::middlewares::access_log: 192.168.64.13 "GET /db/auth.json HTTP/1.1" 401 - "-" "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 11) AppleWebKit/619.23 (KHTML, like Gecko) Version/15.3.85 Safari/619.23" 0.000 openobserve-1 | 2026-11-01T05:49:33.871483166Z 2026-11-01T05:49:33.871455708+00:00 INFO config::axum::middlewares::access_log: 192.168.64.13 "GET /auth/auth.json HTTP/1.1" 401 - "-" "-" "Mozilla/5.0 (Debian; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36" 0.000 openobserve-1 | 2026-11-01T05:49:33.871720791Z 2026-11-01T05:49:33.871615708+00:00 INFO config::axum::middlewares::access_log: 192.168.64.13 "GET /auth/auth.json HTTP/1.1" 401 - "-" "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.5 Safari/605.1.15 AlohaBrowser/7.6.0" 0.000 openobserve-1 | 2026-11-01T05:49:33.871722333Z 2026-11-01T05:49:33.871698541+00:00 INFO config::axum::middlewares::access_log: 192.168.64.13 "GET /authentication/auth.json HTTP/1.1" 401 - "-" "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64; rv:109.0) Gecko/20100101 Firefox/112.0" 0.000 openobserve-1 | 2026-11-01T05:49:33.872004666Z 2026-11-01T05:49:33.871981291+00:00 INFO config::axum::middlewares::access_log: 192.168.64.13 "GET /oauth/auth.json HTTP/1.1" 401 - "-" "-" "Mozilla/5.0 (Knoppix; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" 0.000 openobserve-1 | 2026-11-01T05:49:33.872130375Z 2026-11-01T05:49:33.872107958+00:00 INFO config::axum::middlewares::access_log: 192.168.64.13 "GET /authentication/auth.json HTTP/1.1" 401 - "-" "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 0.000 openobserve-1 | 2026-11-01T05:49:33.872352291Z 2026-11-01T05:49:33.872248250+00:00 INFO config::axum::middlewares::access_log: 192.168.64.13 "GET /keys/auth.json HTTP/1.1" 401 - "-" "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:137.0) Gecko/20100101 Firefox/137.0" 0.000 openobserve-1 | 2026-11-01T05:49:33.872358250Z 2026-11-01T05:49:33.872326791+00:00 INFO config::axum::middlewares::access_log: 192.168.64.13 "GET /oauth/auth.json HTTP/1.1" 401 - "-" "-" "Mozilla/5.0 (X11; Ubuntu; Linux aarch64; rv:90.0) Gecko/20100101 Firefox/90.0" 0.000 openobserve-1 | 2026-11-01T05:49:33.872646208Z 2026-11-01T05:49:33.872542916+00:00 INFO config::axum::middlewares::access_log: 192.168.64.13 "GET /keys/auth.json HTTP/1.1" 401 - "-" "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_2) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.4 Safari/605.1.15" 0.000 openobserve-1 | 2026-11-01T05:49:33.872650416Z 2026-11-01T05:49:33.872624291+00:00 INFO config::axum::middlewares::access_log: 192.168.64.13 "GET /credentials/auth.json HTTP/1.1" 401 - "-" "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 0.000 openobserve-1 | 2026-11-01T05:49:33.872928250Z 2026-11-01T05:49:33.872827791+00:00 INFO config::axum::middlewares::access_log: 192.168.64.13 "GET /credentials/auth.json HTTP/1.1" 401 - "-" "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.159 Safari/537.36" 0.000 openobserve-1 | 2026-11-01T05:49:33.872929791Z 2026-11-01T05:49:33.872908208+00:00 INFO config::axum::middlewares::access_log: 192.168.64.13 "GET /creds/auth.json HTTP/1.1" 401 - "-" "-" "Mozilla/5.0 (X11; Linux x86_64; rv:1.9.6.20) Gecko/ Firefox/3.6.7" 0.000 openobserve-1 | 2026-11-01T05:49:33.873110333Z 2026-11-01T05:49:33.873084125+00:00 INFO config::axum::middlewares::access_log: 192.168.64.13 "GET /creds/auth.json HTTP/1.1" 401 - "-" "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:88.0) Gecko/20100101 Firefox/88.0" 0.000