GoAccess Real Time Log Analyzer

GoAccess is an open source real-time log analyzer and interactive viewer that runs in the terminal on Unix systems or through any web browser, providing fast and valuable HTTP statistics for system administrators who require a visual server report on the fly. Written in C, it achieves millisecond-level processing speeds and requires only ncurses as a dependency, making it lightweight enough to run on minimal resource environments. The tool parses nearly all web log formats including Apache, Nginx, Amazon S3, Elastic Load Balancing, CloudFront, Caddy, Google Cloud Storage, and custom formats defined through a simple format string. Real-time terminal output updates continuously with both overview panels and detailed visitor breakdowns showing operating systems, browsers, countries, referrers, request URLs, status codes, and HTTP methods. Beyond analytics, it serves as a practical security monitoring tool for detecting suspicious activity, unusual traffic patterns, brute-force attempts, automated scanners, bot behavior, and anomalous requests directly from raw log data. While the terminal interface is the default, it can generate complete self-contained real-time HTML dashboards using Bootstrap for analytics, monitoring, and data visualization in the browser, as well as JSON and CSV reports for programmatic consumption and integration with monitoring pipelines. The HTML dashboard updates in real time via WebSocket without page reloads, making it suitable for embedding in operational dashboards and NOC displays. The project has accumulated over 20,000 GitHub stars and is distributed under the MIT license, with active development adding features like incremental log processing, persisted data storage, TLS support, IPv6 support, and configurable color themes for the terminal output.