goaccess

GoAccess is an open-source, real-time web log analyzer designed for system administrators, DevOps engineers, and security professionals. It parses web server logs on the fly to provide actionable HTTP statistics and visual reports, helping users monitor traffic, detect anomalies, and troubleshoot issues. Key capabilities include: - Multiple Output Formats: Supports interactive terminal output, real-time HTML dashboards, JSON, and CSV reports. - Broad Log Support: Compatible with various log formats including Apache, Nginx, Amazon S3, CloudFront, Elastic Load Balancing, Google Cloud Storage, Caddy, and Traefik, with support for custom log format strings. - Real-Time Monitoring: Updates metrics every 200ms in the terminal and every second in HTML output. - Performance Features: Written in C with optimized in-memory hash tables for large datasets, multi-thread parsing support, and on-disk persistence for incremental log processing. - Advanced Metrics: Tracks application response times, visitor counts, bandwidth, virtual host resource consumption, and ASN mapping for malicious traffic detection. - Deployment Flexibility: Can be run as a standalone binary on *nix systems, via Docker, or remotely over SSH.