Documentation · Getting started
Getting started
A plain-language guide to asking your logs and reading the answers. There is nothing to install on your side; your team stands ForgeOrbis up once, then anyone with access can ask.
Why ForgeOrbis
Regulated plants keep months of machine logs in date-and-process folder trees. Answering a single auditor question can mean opening share after share and reading files line by line. ForgeOrbis turns that into one question and one sourced answer.
You keep everything where it is. ForgeOrbis reads your logs in place, inside your network, and never sends a line to an outside service.
What you can ask
Ask the way you would ask a colleague. Two kinds of questions both work:
- Counting and measuring, such as “how many labels did STATION_A1 print on 2026-07-10?” or “average print duration per label yesterday”.
- What happened and why, such as “why did LabelRun stop printing around 14:20 on 2026-07-09?”
You do not need query syntax, exact spellings, or the right folder. Ask in your own words and ForgeOrbis finds the evidence.
What an answer looks like
Every answer is sourced. A counting question returns an exact figure computed straight from your logs. An explanatory question returns a short written answer where every sentence points to the exact file, line, and timestamp behind it, each with a match score you can weigh.
When nothing in your logs matches, ForgeOrbis says NOT FOUND IN LOGS rather than guessing. That honesty is the point: an answer you can trust is one the system is willing to withhold.
- answer types
- exact · explained
- every claim
- cited
- when unsure
- it refuses
Your logs
During onboarding your team points ForgeOrbis at the folder tree where your logs already live. It reads and indexes them in place; nothing is copied out of your network. Common sources are supported, including Windows file shares, Linux and NFS directories, syslog and event forwarding, and a lightweight collector for busy log servers.
New log lines are picked up automatically, so answers stay current without anyone re-running anything.
Who sees what
Access follows your structure. Each role is scoped to the folders it is allowed to read: an auditor can see everything, while a single line sees only its own line. Every question is recorded to a tamper-evident audit log you can export to your SIEM.
Your first answer
ForgeOrbis is delivered and stood up by our team inside your environment. Once your log tree is connected, open Ask, type a question in plain language, and read the cited answer. There is nothing for you to install to start asking.