◎

Log Field-Drift Checker

Free Runs entirely in your browser

A field gets renamed, a parser changes, a vendor pushes an update — and detections that depend on that field quietly stop firing. Paste a before and after log sample to see exactly what drifted, and which of your rules it breaks. Nothing you paste leaves your browser.

We compare the field names, types, and how often each is populated between the two samples. Nested fields are flattened to dot.paths.