Built the log analysis platform for the factory's MES. It reads the logs of the API gateway, routing, SMT machine and IoT aggregator services into OpenSearch, finds the issues, explains them with an AI assistant, and alerts Teams while production is still affected.

• Go ingest path with only the standard library: the collector downloads just the new bytes of each log with HTTP Range requests, auto-scaled workers run the parsers, and an importer writes daily indices

• Logs and alerts run one to two minutes behind by reading the live file, and each record id is a hash of its line, so re-imports never duplicate

• Parsers split gateway errors into exception, root cause, class and method, show SQL to IT only, and flag out-of-limit measurements and template values sent instead of real machine data

• 19 alert rules in three levels, judged on the logs' own clock, so only incidents still going in the newest minute are sent

• Seven Teams destinations as Adaptive Cards or channel email through the company mail server, through an outbox with retries

• Issues page and AI answers whose links open exactly the records they talk about

• External API with read, tune and admin keys for other AI tools, with every change logged and undoable

• GitLab CI builds only changed images and deploys the API blue/green behind nginx. About 300 Python tests, Go unit tests and 140 Vitest tests run in CI