Kafka Resource Analyzer

Get an overview of the chaos in your Kafka cluster — without connecting to it.

Paste the output of your topic and ACL dumps and get an instant analysis: topic hierarchy, partition and replication consistency, config audit, and an interactive access graph of your ACLs.

Everything runs 100% locally in your browser — your data never leaves your machine. No cluster connection, no upload, no installation. The example below is the (entirely fictional) Kafka platform of a wind farm operator — replace it with your own dumps.

Topics empty

Plain name list, kafka-topics.sh --describe output, or Strimzi KafkaTopic YAML — auto-detected.

Apache Kafka bin/kafka-topics.sh --bootstrap-server broker:9092 --describe

Strimzi kubectl get kafkatopics -n <namespace> -o yaml

Topic: windworks.telemetry.scada.raw	PartitionCount: 24	ReplicationFactor: 3	Configs: retention.ms=1209600000
Topic: windworks.telemetry.scada.validated	PartitionCount: 24	ReplicationFactor: 3	Configs: retention.ms=604800000
Topic: windworks.telemetry.vibration	PartitionCount: 12	ReplicationFactor: 3	Configs: retention.ms=1209600000
Topic: windworks.telemetry.power-output	PartitionCount: 12	ReplicationFactor: 3	Configs:
Topic: windworks.telemetry.scada.raw.archive	PartitionCount: 6	ReplicationFactor: 3	Configs: retention.ms=-1
Topic: windworks.telemetry.weather-correlated	PartitionCount: 6	ReplicationFactor: 3	Configs: segment.bytes=104857600,segment.ms=86400000
Topic: windworks.turbine.state	PartitionCount: 6	ReplicationFactor: 3	Configs: cleanup.policy=compact,min.compaction.lag.ms=0
Topic: windworks.turbine.status	PartitionCount: 6	ReplicationFactor: 3	Configs:
Topic: windworks_turbine_status	PartitionCount: 3	ReplicationFactor: 3	Configs:
Topic: windworks.turbine.firmware-updates	PartitionCount: 3	ReplicationFactor: 3	Configs: max.message.bytes=10485760
Topic: windworks.turbine.metadata	PartitionCount: 3	ReplicationFactor: 3	Configs: cleanup.policy=compact,delete.retention.ms=60000
Topic: windworks.commands.turbine-control	PartitionCount: 1	ReplicationFactor: 3	Configs:
Topic: windworks.alerts.critical	PartitionCount: 6	ReplicationFactor: 3	Configs: min.insync.replicas=3
Topic: windworks.alerts.notifications	PartitionCount: 6	ReplicationFactor: 3	Configs:
Topic: windworks.alerts.heartbeat	PartitionCount: 3	ReplicationFactor: 3	Configs: retention.ms=3600000
Topic: windworks.alerts.acknowledged	PartitionCount: 3	ReplicationFactor: 3	Configs: compression.type=gzip
Topic: turbine-maintenance-events	PartitionCount: 6	ReplicationFactor: 3	Configs: min.insync.replicas=1
Topic: turbine-maintenance-workorders	PartitionCount: 3	ReplicationFactor: 3	Configs: preallocate=true
Topic: turbine-maintenance-history	PartitionCount: 3	ReplicationFactor: 3	Configs: retention.bytes=536870912
Topic: windworks.settlement.meter-readings	PartitionCount: 12	ReplicationFactor: 3	Configs: min.insync.replicas=2
Topic: windworks.settlement.invoices	PartitionCount: 3	ReplicationFactor: 5	Configs: min.insync.replicas=3
Topic: windworks.settlement.corrections	PartitionCount: 3	ReplicationFactor: 3	Configs: unclean.leader.election.enable=true
Topic: windworks.settlement.audit-log	PartitionCount: 6	ReplicationFactor: 3	Configs: retention.ms=31536000000
Topic: weather_forecast_feed	PartitionCount: 3	ReplicationFactor: 3	Configs:
Topic: windworks.weather.observations	PartitionCount: 8	ReplicationFactor: 3	Configs:
Topic: anomaly-detector-1.2.0-turbine-window-store-changelog	PartitionCount: 6	ReplicationFactor: 3	Configs:
Topic: anomaly-detector-1.2.0-turbine-window-store-repartition	PartitionCount: 6	ReplicationFactor: 3	Configs:
Topic: anomaly-detector-1.1.0-turbine-window-store-changelog	PartitionCount: 6	ReplicationFactor: 3	Configs: cleanup.policy=compact
Topic: anomaly-detector-1.1.0-turbine-window-store-repartition	PartitionCount: 6	ReplicationFactor: 3	Configs:
Topic: power-forecast-2.0.1-forecast-store-changelog	PartitionCount: 3	ReplicationFactor: 3	Configs: cleanup.policy=compact,min.cleanable.dirty.ratio=0.1
Topic: windworks.reporting.daily-production	PartitionCount: 3	ReplicationFactor: 3	Configs: message.timestamp.type=LogAppendTime
Topic: windworks.reporting.kpi-dashboard	PartitionCount: 3	ReplicationFactor: 3	Configs:
Topic: windworks.erp.workorder-sync	PartitionCount: 3	ReplicationFactor: 3	Configs:
Topic: windworks.erp.asset-master	PartitionCount: 3	ReplicationFactor: 3	Configs: cleanup.policy=compact
Topic: test-turbine-data	PartitionCount: 3	ReplicationFactor: 2	Configs:
Topic: tmp.delete-me	PartitionCount: 1	ReplicationFactor: 3	Configs:
Topic: windworks.legacy.scada-bridge	PartitionCount: 3	ReplicationFactor: 3	Configs: flush.ms=1000
Topic: windworks.legacy.scada-bridge-dlq	PartitionCount: 3	ReplicationFactor: 3	Configs: retention.ms=604800000

ACLs empty

kafka-acls.sh --list output or Strimzi KafkaUser YAML — auto-detected.

Apache Kafka bin/kafka-acls.sh --bootstrap-server broker:9092 --list

Strimzi kubectl get kafkausers -n <namespace> -o yaml

Current ACLs for resource `ResourcePattern(resourceType=TOPIC, name=windworks.telemetry., patternType=PREFIXED)`:
 	(principal=User:svc-scada-ingest, host=*, operation=WRITE, permissionType=ALLOW)
	(principal=User:svc-scada-ingest, host=*, operation=DESCRIBE, permissionType=ALLOW)
	(principal=User:svc-anomaly-detector, host=*, operation=READ, permissionType=ALLOW)

Current ACLs for resource `ResourcePattern(resourceType=TOPIC, name=anomaly-detector-, patternType=PREFIXED)`:
 	(principal=User:svc-anomaly-detector, host=*, operation=ALL, permissionType=ALLOW)

Current ACLs for resource `ResourcePattern(resourceType=GROUP, name=anomaly-detector, patternType=PREFIXED)`:
 	(principal=User:svc-anomaly-detector, host=*, operation=READ, permissionType=ALLOW)

Current ACLs for resource `ResourcePattern(resourceType=TRANSACTIONAL_ID, name=anomaly-detector-, patternType=PREFIXED)`:
 	(principal=User:svc-anomaly-detector, host=*, operation=WRITE, permissionType=ALLOW)

Current ACLs for resource `ResourcePattern(resourceType=TOPIC, name=windworks.alerts.critical, patternType=LITERAL)`:
 	(principal=User:svc-anomaly-detector, host=*, operation=WRITE, permissionType=ALLOW)
	(principal=User:svc-alert-router, host=*, operation=READ, permissionType=ALLOW)

Current ACLs for resource `ResourcePattern(resourceType=TOPIC, name=windworks.alerts.notifications, patternType=LITERAL)`:
 	(principal=User:svc-alert-router, host=*, operation=WRITE, permissionType=ALLOW)
	(principal=User:svc-mobile-push, host=*, operation=READ, permissionType=ALLOW)

Current ACLs for resource `ResourcePattern(resourceType=TOPIC, name=power-forecast-, patternType=PREFIXED)`:
 	(principal=User:svc-power-forecast, host=*, operation=ALL, permissionType=ALLOW)

Current ACLs for resource `ResourcePattern(resourceType=GROUP, name=power-forecast, patternType=PREFIXED)`:
 	(principal=User:svc-power-forecast, host=*, operation=READ, permissionType=ALLOW)

Current ACLs for resource `ResourcePattern(resourceType=TRANSACTIONAL_ID, name=power-forecast-, patternType=PREFIXED)`:
 	(principal=User:svc-power-forecast, host=*, operation=WRITE, permissionType=ALLOW)

Current ACLs for resource `ResourcePattern(resourceType=TOPIC, name=windworks.weather.observations, patternType=LITERAL)`:
 	(principal=User:svc-power-forecast, host=*, operation=READ, permissionType=ALLOW)

Current ACLs for resource `ResourcePattern(resourceType=TOPIC, name=windworks.reporting.daily-production, patternType=LITERAL)`:
 	(principal=User:svc-power-forecast, host=*, operation=WRITE, permissionType=ALLOW)
	(principal=User:svc-erp-sink, host=*, operation=READ, permissionType=ALLOW)

Current ACLs for resource `ResourcePattern(resourceType=TOPIC, name=windworks., patternType=PREFIXED)`:
 	(principal=User:svc-grafana, host=*, operation=READ, permissionType=ALLOW)

Current ACLs for resource `ResourcePattern(resourceType=GROUP, name=grafana-, patternType=PREFIXED)`:
 	(principal=User:svc-grafana, host=*, operation=READ, permissionType=ALLOW)

Current ACLs for resource `ResourcePattern(resourceType=GROUP, name=*, patternType=LITERAL)`:
 	(principal=User:svc-legacy-scada, host=*, operation=ALL, permissionType=ALLOW)

Current ACLs for resource `ResourcePattern(resourceType=CLUSTER, name=kafka-cluster, patternType=LITERAL)`:
 	(principal=User:svc-legacy-scada, host=*, operation=ALL, permissionType=ALLOW)

Current ACLs for resource `ResourcePattern(resourceType=TOPIC, name=windworks.legacy., patternType=PREFIXED)`:
 	(principal=User:svc-legacy-scada, host=*, operation=ALL, permissionType=ALLOW)

Current ACLs for resource `ResourcePattern(resourceType=TOPIC, name=windworks.turbine.firmware-updates, patternType=LITERAL)`:
 	(principal=User:svc-legacy-scada, host=*, operation=ALL, permissionType=ALLOW)

Current ACLs for resource `ResourcePattern(resourceType=TOPIC, name=windworks.turbine.state, patternType=LITERAL)`:
 	(principal=User:svc-legacy-scada, host=*, operation=ALL, permissionType=ALLOW)

Current ACLs for resource `ResourcePattern(resourceType=TOPIC, name=windworks.turbine.metadata, patternType=LITERAL)`:
 	(principal=User:svc-legacy-scada, host=*, operation=READ, permissionType=ALLOW)

Current ACLs for resource `ResourcePattern(resourceType=TOPIC, name=windworks.settlement., patternType=PREFIXED)`:
 	(principal=User:svc-billing, host=*, operation=ALL, permissionType=ALLOW)

Current ACLs for resource `ResourcePattern(resourceType=GROUP, name=billing-app, patternType=LITERAL)`:
 	(principal=User:svc-billing, host=*, operation=READ, permissionType=ALLOW)

Current ACLs for resource `ResourcePattern(resourceType=TOPIC, name=turbine-maintenance-, patternType=PREFIXED)`:
 	(principal=User:svc-maintenance, host=*, operation=READ, permissionType=ALLOW)
	(principal=User:svc-maintenance, host=*, operation=WRITE, permissionType=ALLOW)

Current ACLs for resource `ResourcePattern(resourceType=GROUP, name=maintenance-app, patternType=LITERAL)`:
 	(principal=User:svc-maintenance, host=*, operation=READ, permissionType=ALLOW)

Current ACLs for resource `ResourcePattern(resourceType=TOPIC, name=windworks.erp., patternType=PREFIXED)`:
 	(principal=User:svc-erp-sink, host=*, operation=READ, permissionType=ALLOW)

Current ACLs for resource `ResourcePattern(resourceType=GROUP, name=connect-erp, patternType=PREFIXED)`:
 	(principal=User:svc-erp-sink, host=*, operation=READ, permissionType=ALLOW)

Current ACLs for resource `ResourcePattern(resourceType=TOPIC, name=windworks.telemetry.v1., patternType=PREFIXED)`:
 	(principal=User:svc-fleet-import, host=*, operation=ALL, permissionType=ALLOW)

Current ACLs for resource `ResourcePattern(resourceType=TOPIC, name=windworks.turbine.blade-sensors, patternType=LITERAL)`:
 	(principal=User:svc-fleet-import, host=*, operation=READ, permissionType=ALLOW)

Current ACLs for resource `ResourcePattern(resourceType=TOPIC, name=win, patternType=PREFIXED)`:
 	(principal=User:svc-ops-dashboard, host=*, operation=READ, permissionType=ALLOW)

100% local — your data never leaves the browser

What it shows you

Topic hierarchy — your topic names, split at their separators and rendered as an explorable tree. Spot naming conventions (and violations) at a glance.
Consistency — how many topics use how many partitions and which replication factors are in use. Hopefully just one.
Config audit — every topic config that is set, with its value distribution. For example: cleanup.policy — 10× compact, 5× delete, 20× not set. Expand any value to see the culprits.
ACL analysis — who is allowed to do what: per principal, per resource, operation distribution, and an interactive access graph.
Cross-check — load topics and ACLs together to find topics without any ACL and ACL patterns that match nothing.

About the example data

The preloaded example is the completely fictional Kafka platform of a wind farm operator: SCADA telemetry flows in, Kafka Streams applications detect anomalies and forecast power output, and alerting, maintenance, settlement and ERP integrations hang off it. Three generations of teams have left their traces — deliberately: almost every warning the analyzer can raise has a specimen in there, from the test-turbine-data topic with replication factor 2 to the legacy SCADA account with wildcard ACLs.

Topics empty

ACLs empty

What it shows you

About the example data

Contact

Address

E-Mail Address

Links