Sample log files for testing parsers and shippers, free and CC0

Log files are text, but tooling meets them in two distinct shapes, and both are here.

log/nginx-access-1000-lines.log is 1,000 lines in the nginx combined access-log format: client address, timestamp, request line, status, bytes, referrer and user agent. The timestamps are fixed and every client address is an RFC 5737 documentation address, so the file contains no real IP addresses and parses the same way every time.

log/json-lines-app-1000.log is 1,000 application log records with one JSON object per line, the structured shape that log shippers and observability pipelines prefer.

Use them to test log parsers and shippers, dashboards that must handle both shapes, grok and regex patterns, and upload forms for diagnostic files. Both are UTF-8 with LF line endings. Related formats: NDJSON, which has the same one-object-per-line structure, and text files.

2 files. The same list as JSON: https://loremfile.dev/log/index.json

log files
File	Size	Properties	Description
`json-lines-app-1000.log`	167.7 KB (167,666 bytes)	utf-8, LF	1,000 application log records, one JSON object per line. Snippets `<a href="https://loremfile.dev/log/json-lines-app-1000.log">download</a>` `curl -O https://loremfile.dev/log/json-lines-app-1000.log`
`nginx-access-1000-lines.log`	110.1 KB (110,093 bytes)	utf-8, LF	1,000 nginx combined-format access lines with fixed timestamps and RFC 5737 documentation IP addresses. Snippets `<a href="https://loremfile.dev/log/nginx-access-1000-lines.log">download</a>` `curl -O https://loremfile.dev/log/nginx-access-1000-lines.log`

Every log file in one command, each checked against its hash: npx loremfile get --format log, or loremfile get --format log after pip install loremfile.

File names follow the naming grammar. Verify a download against sha256sums.txt.