# 使用 Apache Combined 格式分析 Nginx 日志
goaccess /var/log/nginx/access.log --log-format=COMBINED

# 分析单个日志文件
goaccess /var/log/nginx/access.log --log-format=COMBINED

# 分析多个日志文件
goaccess /var/log/nginx/access.log.1 /var/log/nginx/access.log --log-format=COMBINED

# 使用通配符
goaccess /var/log/nginx/access.log* --log-format=COMBINED

# 从管道读取（实时跟踪）
tail -f /var/log/nginx/access.log | goaccess --log-format=COMBINED -

# 从标准输入读取
cat /var/log/nginx/access.log | goaccess --log-format=COMBINED -

goaccess /var/log/nginx/access.log \
  --log-format=COMBINED \
  -o /var/www/html/report.html

goaccess /var/log/nginx/access.log \
  --log-format=COMBINED \
  -o report.html \
  --html-title="我的网站分析报告" \
  --html-report-title="月度访问分析"

# 第一步：将解析结果持久化到文件
goaccess /var/log/nginx/access.log \
  --log-format=COMBINED \
  -o /tmp/goaccess_data.db \
  --persist

# 第二步：从持久化数据生成 HTML
goaccess /tmp/goaccess_data.db \
  -o report.html \
  --restore

goaccess /var/log/nginx/access.log \
  --log-format=COMBINED \
  -o report.html \
  --html-prefs='{"theme":"bright","perPage":50,"layout":"horizontal"}'

goaccess /var/log/nginx/access.log \
  --log-format=COMBINED \
  -o report.json

{
  "general": {
    "date_time": "2026/05/10 14:30:00",
    "total_requests": 12547,
    "valid_requests": 12500,
    "failed_requests": 47,
    "generation_time": 230,
    "unique_visitors": 1234,
    "unique_files": 567,
    "excluded_hits": 456,
    "referring_sites": 89,
    "not_found": 12,
    "log_size": 524288000,
    "bandwidth": 2684354560
  },
  "visitors": {
    "data": [
      {
        "hits": { "count": 1200, "percent": 9.57 },
        "visitors": { "count": 350, "percent": 28.36 },
        "data": "10.0.0.1"
      }
    ]
  },
  "requests": {
    "data": [...]
  },
  "static_requests": {
    "data": [...]
  },
  "not_found": {
    "data": [...]
  },
  "hosts": {
    "data": [...]
  },
  "os": {
    "data": [...]
  },
  "browsers": {
    "data": [...]
  },
  "referring_sites": {
    "data": [...]
  },
  "status_codes": {
    "data": [...]
  },
  "geolocation": {
    "data": [...]
  }
}

# 用 jq 提取状态码分布
goaccess /var/log/nginx/access.log --log-format=COMBINED -o - | \
  jq '.status_codes.data'

# 用 jq 获取访客排行前 10
goaccess /var/log/nginx/access.log --log-format=COMBINED -o - | \
  jq '.visitors.data[:10]'

# 导出 404 URL 列表
goaccess /var/log/nginx/access.log --log-format=COMBINED -o - | \
  jq -r '.not_found.data[].data' > 404_urls.txt

goaccess /var/log/nginx/access.log \
  --log-format=COMBINED \
  -o report.csv

# Generated by GoAccess - 1.9.2
# Date: 2026-05-10 14:30:00 - Log size: 500.00 MiB

# Unique visitors (IPs)
"10.0.0.1",1200,350,"9.57","28.36"
"10.0.0.2",800,220,"6.38","17.83"

# Requested files
"/",3000,890,"23.93","72.16"
"/index.html",1500,420,"11.97","34.05"

# Status codes
"200",10500,"83.73"
"304",1200,"9.57"
"404",450,"3.59"
"500",47,"0.37"

# 导入到 SQLite 数据库
goaccess /var/log/nginx/access.log --log-format=COMBINED -o report.csv

# 用 Python 分析 CSV
python3 << 'EOF'
import csv

with open('report.csv', 'r') as f:
    reader = csv.reader(f)
    for row in reader:
        if row and not row[0].startswith('#'):
            print(row)
EOF

# 使用暗色主题
goaccess access.log --log-format=COMBINED --color-scheme=1

# 使用亮色主题
goaccess access.log --log-format=COMBINED --color-scheme=2

# 使用 Mono Green 主题
goaccess access.log --log-format=COMBINED --color-scheme=3

# 使用 Monokai 主题
goaccess access.log --log-format=COMBINED --color-scheme=4

# 自定义颜色（在配置文件中设置）
# color-scheme 1

# 处理 gzip 压缩的日志
zcat /var/log/nginx/access.log.*.gz | goaccess --log-format=COMBINED -

# 处理 bzip2 压缩的日志
bzcat /var/log/nginx/access.log.*.bz2 | goaccess --log-format=COMBINED -

# 同时处理压缩和未压缩的日志
cat /var/log/nginx/access.log.*.gz | zcat - /var/log/nginx/access.log | \
  goaccess --log-format=COMBINED -

# 使用 zgrep 过滤后再分析
zcat /var/log/nginx/access.log.*.gz | grep "2026/May" | \
  goaccess --log-format=COMBINED -

TODAY=$(date +%d/%b/%Y)
grep "$TODAY" /var/log/nginx/access.log | goaccess --log-format=COMBINED -

goaccess /var/log/nginx/access.log \
  --log-format=COMBINED \
  -o /tmp/report.html && \
  xdg-open /tmp/report.html  # Linux
  # open /tmp/report.html    # macOS

# 分析 2026 年 5 月的日志
awk '/10\/May\/2026/' /var/log/nginx/access.log | \
  goaccess --log-format=COMBINED -

goaccess /var/log/nginx/access.log \
  --log-format=COMBINED \
  --exclude-ip=$(curl -s ifconfig.me) \
  -o report.html