goaccess

Analyze one or more log files in interactive mode

$ goaccess [path/to/logfile1] [path/to/logfile2] ...

$ goaccess [path/to/logfile] --log-format=[format|combined]

$ tail -f [path/to/logfile] | goaccess -

$ goaccess [path/to/logfile] -o [path/to/file.html] --real-time-html

goaccess [options] logfile

goaccess is an open-source real-time web log analyzer and interactive viewer. It parses web server logs (Apache, Nginx, etc.) and displays statistics in a terminal dashboard or generates HTML/JSON/CSV reports.
Features include real-time analysis with streaming logs, geolocation lookup, user agent parsing, and detailed metrics for visitors, requests, referrers, 404 errors, operating systems, and browsers.
The interactive terminal mode provides a ncurses-based dashboard with drill-down capabilities. HTML reports can update in real-time via WebSocket connections.

-o, --output FILE

Output to specified file (HTML, JSON, or CSV based on extension)

Specify log format string or use predefined: COMBINED, COMMON, etc.

Enable real-time HTML report updates via WebSocket

WebSocket URL for real-time HTML

Enable full user-agent parsing

Enable IP resolver for geolocation

Exclude specific IP from statistics

Ignore specific panel in output

GeoIP database for geolocation

~/.goaccessrc

User-level configuration file for default options like log format and output settings.

System-wide configuration file with default log format, date/time formats, and panel settings.

Log format must match the actual log format; mismatches cause parsing failures. Real-time HTML requires a running goaccess process. Large log files may require significant memory for processing.

goaccess was created by Gerardo Orellana and first released in 2009. It gained popularity as a lightweight, privacy-respecting alternative to cloud-based analytics services, particularly useful for quick server log analysis.

awstats(1), webalizer(1), nginx(8), apache2(8)