Horus documentation
Learn how to install, configure, and run Horus investigations on your production systems.
Horus is an open-source, local-first incident investigation engine. It connects runtime evidence — logs, metrics, queue state, database state — with source intelligence to produce deterministic, evidence-backed reports.
What you will find here
- Getting started: install Horus and run your first investigation.
- Installation options: curl, npm, and Homebrew.
- CLI reference: setup, investigations, source analysis, runtime evidence, Lens, memory, and Cloud commands.
- Connectors: logs, metrics, database state, and queues across sixteen configured runtime connector types, plus local Git and native Lens evidence.
- Source intelligence: local code indexing, symbol search, relationship paths, and graph insights.
- Memory: how Horus remembers confirmed outcomes, recalls related past incidents when an investigation starts, and measures its own accuracy.
- Agent packet: a compact, honesty-framed briefing built for coding agents.
Documentation version
These docs cover Horus CLI v0.24.3, the native Rust build, which has the v0.23 commands plus horus service and a reworked horus watch, and the current Cloud implementation. Run horus --version to check your install. Incident-memory sync and the macOS background service ship in v0.24.3 but are still a pilot; see Cloud release limits.