GoAccess is a very handy tool, that runs in the terminal on most *nix Systems (e.g. Linux, Mac OS X, BSD etc.) and displays relatime data gathered from Apache’s access logfile.web
It offers a very structured display with different 「modules」 that break down the parsed access.log data into sections:apache
Each module has a detail view that can be opened by pressing 「o」. The detail view gives you a scrollable list with more information on the currently selected data.ide
Since I couldn’t find a package for GoAccess in Debian lenny’s apt sources, I took the manual compile route. But the installation is still really easy and fast.this
aptitude install libglib2.0-dev, libncurses5-dev, libgeoip-dev
config.status: creating Makefile
config.status: creating config.h
config.status: executing depfiles commands
Once you are done installing you can start the program by typing in 「goaccess」 on the command prompt and pressing enter. If you don’t add any command line options, GoAccess will print a few lines of help text.es5
GoAccess - 0.3.3 Usage: goaccess [ -b ][ -s ][ -e IP_ADDRESS][ -f log_file ] The following options can also be supplied to the command: -f - Path to input log -b - Enable total bandwidth consumption. To achieve faster parsing, do not enable this flag. -s - Enable/report HTTP status codes. To avoid overhead while parsing, this has been disabled by default. -e - Exclude an IP from being counted under the HOST module. This has been disabled by default. For more details visit: http://goaccess.prosoftcorp.com
If you want all the features you can start it with:spa
goaccess -b -s -f /var/log/apache/access.log
Give it some time to parse the logfile (could take a very long time, depending on your logfile size), then you should see the mainscreen with live updating data and can start to use GoAccess.code