allinurl/goaccess

Analysis updated 2026-05-18

★ 20,514CAudience · ops devopsComplexity · 2/5LicenseSetup · moderate

Mindmap

mindmap
  root((GoAccess))
    What it does
      Real-time log analysis
      Terminal dashboard
      HTML reports
    Log formats
      Apache Nginx
      AWS CloudFront
      Custom formats
    Security features
      Brute-force detection
      Bot identification
      ASN mapping
    Tech stack
      C language
      ncurses UI
      WebSocket server
    Use cases
      Traffic monitoring
      Security auditing
      Performance analysis

mindmap root((GoAccess)) What it does Real-time log analysis Terminal dashboard HTML reports Log formats Apache Nginx AWS CloudFront Custom formats Security features Brute-force detection Bot identification ASN mapping Tech stack C language ncurses UI WebSocket server Use cases Traffic monitoring Security auditing Performance analysis

Click or tap to explore — scroll the page freely

What do people build with it?

USE CASE 1

Monitor web server traffic in real-time from the command line without external tools or dashboards.

USE CASE 2

Detect brute-force attacks, bot activity, and suspicious traffic patterns directly from access logs.

USE CASE 3

Generate shareable HTML reports of traffic statistics and performance metrics for stakeholders.

USE CASE 4

Analyze large log files incrementally and persist results on disk for historical trend analysis.

What is it built with?

CncursesWebSocketHTMLJSONCSV

How does it compare?

	allinurl/goaccess	qmk/qmk_firmware	jart/cosmopolitan
Stars	20,514	20,364	20,798
Language	C	C	C
Setup difficulty	moderate	hard	hard
Complexity	2/5	3/5	4/5
Audience	ops devops	general	developer

Figures from each repo's GitHub metadata at analysis time.

How do you get it running?

Difficulty · moderate Time to first run · 30min

Requires ncurses library and C compiler, log file path configuration needed to point to actual server logs.

Use freely for any purpose including commercial, as long as you keep the copyright notice.

In plain English

GoAccess is a tool that reads the access logs your web server writes and turns them into live, easy-to-read statistics. You can view the report inside a terminal window over SSH, or open a self-contained HTML dashboard in a browser, and the numbers update in real time as new requests come in. The point is to answer common questions about a site without having to ship logs off to a separate analytics service. You can see how many visitors and hits you are getting, how much bandwidth is being used, which pages are slowest to respond, which virtual host on a multi-site server is taking the most load, and where traffic is coming from. There is also an Autonomous System Number lookup that helps spot suspicious sources, brute-force attempts, scanners, bots, and other anomalies straight from the logs, so it doubles as a lightweight security monitoring aid. It handles nearly any log format through a custom format string and ships with presets for common ones, including Apache, Nginx, Amazon S3, Amazon CloudFront, AWS Elastic Load Balancing, Squid, the W3C IIS format, Caddy's JSON structured format, and Traefik. Reports can be exported as HTML, JSON, or CSV. It can also process logs incrementally and persist data to disk so history is not lost between runs. GoAccess is written in C and depends only on the ncurses library, which keeps installs small. Packages are available for most Linux distributions, the BSDs, macOS via Homebrew, and Windows through Cygwin or WSL.

Copy-paste prompts

Prompt 1

How do I set up GoAccess to monitor my Nginx access logs in real-time on the command line?

Prompt 2

Show me how to generate an HTML report from my Apache access logs using GoAccess and view it in a browser.

Prompt 3

How can I use GoAccess to detect brute-force login attempts and suspicious traffic in my server logs?

Prompt 4

What's the fastest way to analyze a multi-gigabyte access log file with GoAccess and export the results as JSON?

Frequently asked questions

What is goaccess?

Real-time web log analyzer that reads Apache, Nginx, and other server logs and displays traffic stats and security insights in a terminal dashboard or HTML report.

What language is goaccess written in?

Mainly C. The stack also includes C, ncurses, WebSocket.

What license does goaccess use?

Use freely for any purpose including commercial, as long as you keep the copyright notice.

How hard is goaccess to set up?

Setup difficulty is rated moderate, with roughly 30min to a first successful run.

Who is goaccess for?

Mainly ops devops.

Open on GitHub → Explain another repo

This repo across BitVibe Labs

Scan in gitsafehub Deploy in gitdeployhub allinurl on gitmyhub

Verify against the repo before relying on details.