Log Analyzer resides in the L2/demos/text/log_analyzer directory. It is an integration frame included three parts: Grok, GeoIP, and JsonWriter.