1C Log Checker
1C Log Parser Service
Parser for 1C event and technology logs into ClickHouse, with Grafana dashboards and an MCP interface for agents
Install
docker network create infra
cd deploy/docker
docker compose up -dFill in deploy/docker/.env and configs/cluster_map.yaml first. Outside a devcontainer remove the work_data volume from docker-compose.yml.
This is third-party code. Review the repository files before installing.
What it does
Reads 1C event logs (.lgf, .lgp, .lgx) and technology logs, loads them into ClickHouse and shows them in ready Grafana dashboards. The MCP server lets an agent query events from both logs in minimal or full format. Separate tools save, generate, restore and disable the logcfg.xml technology log config.
Who it is for. 1C developers and administrators investigating errors and performance on server databases.
Good fit when
- Find new event log errors from the last 24 hours
- Investigate locks, slow SQL and exceptions in the technology log
- Have the agent enable the technology log for specific events and restore settings afterwards
- Store and analyze logs from several databases in one place
Not a fit when
- No Docker, or your 1C servers do not run on Windows
- You need PostgreSQL or MS SQL log analysis: still on the roadmap
Example request
Show event log errors for the ERP database over the last day, grouped by error textLimitations
Designed for a Windows host with 1C logs and Docker Desktop. Requires manual conf.cfg edits per platform version and a cluster_map.yaml with cluster and database GUIDs. Technology log parsing has not been tested at scale, tests show about 170 records per second. Grafana runs without authentication by default.
How to disable. Remove the 1c-log-checker block from the MCP client config and stop the stack with docker compose down in deploy/docker. If the agent enabled the technology log, restore settings with logc_restore_techlog or logc_disable_techlog.
MCP
- Transport
- http, stdio
- Authentication
- not required
| Environment variables | |
|---|---|
| LOG_DIRS required | Event log directories separated by semicolons |
| TECHLOG_DIRS | Technology log directories |
| TECHLOG_CONFIG_DIR | Non-system directory for logcfg.xml |
| CLICKHOUSE_PASSWORD secret | ClickHouse password, default logchecker |
| LOG_RETENTION_DAYS | Log retention in days, default 30 |
Security check
- Runs a Docker stack with ClickHouse, Grafana and an MCP server
- Tools change the technology log config on the 1C server
- Grafana has no auth by default, and logs may contain user data
README in short
The Go service parses 1C event and technology logs, writes them into ClickHouse with daily partitions and TTL, and provisions Grafana dashboards for activity, errors, metadata and the technology log. The MCP server is available over HTTP and stdio. The README details path and conf.cfg setup, external Docker resources, ClickHouse tables and troubleshooting. The author recommends a separate TECHLOG_SKILL for technology log work.
FAQ
Why is cluster_map.yaml needed?
It tells the agent the cluster and database GUIDs so it can request logs for a specific database. The service does not work without it.
How long are logs kept?
30 days by default, set by LOG_RETENTION_DAYS.
How fast is event log parsing?
According to the README, a 30 GB log with 250 million rows loads in about 50 minutes without deduplication.
Related
Kubernetes MCP
MCP Server Kubernetes
MCP server for managing a Kubernetes cluster through kubectl and Helm, with a non-destructive mode
HashiCorp's official MCP server for the Terraform Registry and HCP Terraform: providers, modules, policies and workspaces
CLI for full-cycle CI/CD to Kubernetes: image builds, Helm-based deploys and container registry cleanup
Terraform Skill
Terraform & OpenTofu Skill for AI Agents
A Terraform and OpenTofu best-practices skill: tests, modules, state, CI/CD and security scanning for AWS, Azure and GCP