I built an AI log monitor for my homelab — local LLM reads my *arr logs so I don't have to

My homelab runs the usual stack — Sonarr, Radarr, Prowlarr, qBittorrent, Plex. I was getting ntfy alerts at all hours for things like ffprobe metadata reads and HTTP 429s from indexers. Not actionable, just noise. So I built Cortex : a monitoring layer that sends Docker logs through a local LLM (Ollama) every 30 minutes, filters the noise, and routes only meaningful alerts to my phone. The problem with threshold-based monitoring Standard monitoring tools watch numbers. CPU > 80%? Alert. Disk > 9