Multiple Data Sources
Pull from REST APIs, tail log files, or receive syslog events. Normalize everything into a searchable, queryable index.
AGPL-3.0 • Django • PostgreSQL
Delve
Pipeline-based data ingestion, search, and analytics for operations teams. Ingest from REST APIs, flat files, and syslog, then query, visualize, and alert without standing up a heavy analytics stack.
3
Ingestion source types
Air-gap
Ready to deploy
AGPL
Open source
What Delve Does
A complete data pipeline from ingestion to analysis, lightweight enough to run anywhere.
Pipeline Search Syntax
Filter, transform, and aggregate data using a pipeline query language. Search-time and index-time field extraction included.
Interactive Dashboards
Build operational dashboards from your data. Track metrics, visualize trends, and share views with your team.
Configurable Alerts
Define alert conditions on your data pipelines. Get notified when things go wrong before your users do.
Docker & Air-Gap Ready
Docker Compose for standard deployments. Automated packaging via bootstrap.py for air-gapped or fully offline environments.
Custom Applications
Extend Delve with custom application modules. Build specialized workflows on top of the ingestion and search infrastructure.
Right-Sized Analytics for Regulated Environments
Delve gives operations teams the visibility they need without the enterprise SIEM overhead.
Operational Monitoring
Ingest logs and metrics from your infrastructure. Build dashboards that tell you what’s happening right now without shipping data to a cloud service.
Security Event Analysis
Collect and query security events from DataPower, API gateways, and application servers. Lightweight enough to run alongside your existing tooling.
Data Validation
Ingest API responses or exported data for validation and troubleshooting. Spot anomalies and inconsistencies before they cause production issues.
Works Well With
Delve stays lightweight on purpose. These tools fill the gaps around it.
SIEMatic
Need findings, MITRE ATT&CK context, retention policies, and alerting on top of search? SIEMatic is the security-focused big sibling. Delve stays the right call when you want visibility without SIEM overhead.
Learn More →MAST
Delve already ingests DataPower and API gateway security events. MAST is the estate manager producing them, including backups, config promotion, and governance at scale.
Learn More →LogSieve
Need an offline, single-host look at the same kind of log data? LogSieve does ad-hoc triage entirely in the browser, no server required.
Learn More →Get Started with Delve
Delve is AGPL-3.0 open source. McIndi offers commercial support for organizations that need production SLAs, custom integrations, and hands-on onboarding.