 Go access is an open-source real-time web log analyzer and interactive viewer that runs in terminals of unix systems through your browser This is actually kind of neat So I've used this for a little while and I was doing a security video and people had had some questions Hey, what's that tool you use? I left the link in that video, but I'm going to talk a little bit about it So it is open source It runs in a terminal and it's very full featured for doing log analysis now Few people asked me already if it will do log analysis outside of web server logs a little bit It does Apache nginx Amazon elastic load balancing cloud front and I'm sure if you jump in their forums their ways you can Use it to analyze our things. This is you know analyzing standard kind of log formats It has a lot of features and it's really tiny really late wait matter of fact. It doesn't have any dependencies except for And curses so when you run this from a terminal or you want to run an input There's not a lot to load you just load the go access Binary's and run it and output it and that's it. Let me show you real quick how it works So from the command line is pretty simple. It's go access Minus f and then location of the files. This is my discord server that runs my forums it's running a bunch of server and the go access is looking for the Docker container which is under discourse shared standalone log bar blah blah blah right here So we're gonna go ahead and go access SF to that Once know the log format and This is where we're gonna get some errors and let me show you a little bit about this So the tricky part about go access can be that you have to do some formatting on there So what I've done is There's more than one way to do this you can actually create a file in Etsy and Put these parameters in but you have to look at the log formats and make the determination of the log formats of How for example engine X is outputting these and then matching this in and I'll leave This log format I think I can put this inside of the description of the video because this was a little bit tricky And my friend Phil had helped me out with this because it has not the discourse service specifically used a weird format But when I run this on my other standard Apache servers The default format for Apache is fine discourse when they spun this into the Docker Use a couple custom parameters and did things differently in your log files So you kind of have to go through the log files look at it and then create and go access on there I just wanted to comment on it So if you want to parse this for other things it is documented you just have to get these parameters on there and what this parameters are is The different header information and log information of what you want to parse and what arrangement you wanted to go into And for example when you can see some of these are where you say percent care it there That's just throwing away certain data because it's not data We need for the go access then we have the date format and it's you know When you're doing day month year your month's day whichever one those are you have to get that format And then the time format and then we have it now If you didn't notice this is just wrapped along on there for different lines Also, I wanted to include two days. This has a daily log rotate So go access just f bar log discourse here to stand alone bar log Engine X access log and then same one again dot one because that's we have it set for when the log rotation Dot one will be the next log rotation for each day that it runs So now we're take telling go access to take both of these files Assemble them together using this log format using this date format using this time format Pretty straightforward Exit out and this is the result when you run it It takes a second to run to parse all this and then we start getting the data We're looking for and this is all in real time. So if you're watching the total requests go up I'm gonna do this bring this over and refresh the page a couple times for this and Here comes all the total requests going up each time I hit this So you're watching the numbers up in these corners keep going up. So this is all real time You can look at what exactly is happening on your server. You can watch the Pull information and start generating all the requests And I'm not gonna scroll up and down so I'm not gonna show all the IP addresses That it shows in here, but you kind of get the idea all these are being updated and I can just be in here and Mouse arrow up and down a little bit Won't get to the IP address part But you can kind of see how I can go up and down you can expand it's got help file in here So all of this from the command line driven you can start grabbing and putting the other statistics Which is just really slick that you can do that and if you notice at the top here Overall analyze requests January 12th and January 13th So today and yesterday and then it's telling me the log sources those two files that we said right here but definitely Really handy tool for this and let me show you what it looks like in report And I have a report that I sanitize for IP addresses That I can actually show you what's going on our discourse server and some of the stats that I look at So when you look at the dashboard, this is when you run a report now to run this report instead of outputting to the terminal You just add and I'll show you real quick on the Pieces here and we go over here to the man page Examples When you do the output you actually just say go access log dash o report dot html And when I add that it produced a report dot html static one-time file I'm not doing the if you add real-time it'll constantly push data to that html file And it has its own little web server it can set up Well kind of like a web server where you can pull that data directly from your server I just pulled the file over if you look at the top here. It's not actually on the server I copied the file over through SSH and just viewing it right here, but this gives you an idea hits browser hits I've already removed the IP addresses from here One of the things I thought was interesting when I look at some of the unique visitors that are hitting my forums browsers time distribution operating system there we go is a Lot more a lot of Linux users So we're only 63 percent of the people have visiting my forums are using Windows and 63 percent and then 23 percent of you running Linux Mac 5% Android unknown 2% people masking what they're even doing a chromo s 0.08% so not many Chromebook users at least showing up in here Unix like and Darwin so it's like I said it gives me a lot of interesting stats This is only for two days worth of stats that I've pulled in here It's definitely a really slick utility for doing this I I don't really use the report HTML that much that they do But I think it's novel to have it mostly I'll pull in the terminal grab a log file kind of look at it And I'm not I'm using it in the forums as an example But in my security example, I obviously I used it because I look at when wire someone hitting and what are they doing on one of my Servers whether that be my invoice ninja server or my screen connect server, which I used in my security example Someone was just constantly refreshing a page and pulling a weird amount of bandwidth, but not actually Doing any requests or actions like they are here where they're actually, you know browsing through or trying to even click on anything They're just pulling the page Repetitively in a dial service manner and it's most things it very quickly from the terminal You're like yep that IP is the problem IP and I showed in that another video. Well, he says a great utility It's free. Obviously. It's open source. Do it. You please with it a lot of examples in their outputs I mean, there's a lot of flexibility this has on different things you can do which is great Have at it go and play with it and go ahead and go on their website where they have an entire real-time demo of what it looks like You're running the latest version Yeah, especially because this is a lot more hits than I get so go ahead go access.io. I'll leave links in description. Thanks Thanks for watching if you enjoyed this video Go ahead and hit the thumbs up if you want to see more content from my channel Go ahead and hit subscribe and the bell icon and hopefully YouTube will send you a notice if you're interested in Contracting launch systems for any type of IT services work or consulting work Go ahead and head over to Lawrence systems comm and fill out our contact and get in touch with us If you would like to help the channel out in other ways You can use our affiliate links below in the description or we have a link directly to our Lawrence systems page We have a list of different affiliate offers and it's very appreciated if you use any of those for signing up any The services and many of them offer you discounts if you want to head over to our forums There'll be a link in the description for our forums Wherever they may be because we've been looking at different forum platforms, but they'll always be relevantly linked right there All right Once again, thanks leave some feedback and comments below on this video if you loved it if you hated it I try to reply to everyone the people who hate and the people who love them So thank you very much and see you next time