Dashboard: Access Log Activity Dashboard
This dashboard answers the following questions:
- How many HTTP requests has the Apache server handled?
- What is the distribution of HTTP status codes (success, redirect, client errors, server errors)?
- What HTTP methods are being used most frequently?
- How has request volume changed over time?
- Which browsers and tools are accessing the server?
- Which client IPs are generating the most traffic?
- Which URIs are most frequently requested?
- Which paths have the most successful requests?
- Which paths are generating the most errors?
This dashboard contains 5 cards.
Usage
Install the mod:
mkdir dashboardscd dashboardspowerpipe mod initpowerpipe mod install github.com/turbot/tailpipe-mod-apache-access-log-detections
Start the Powerpipe server:
powerpipe server
Open http://localhost:9033 in your browser and select Access Log Activity Dashboard dashboard.
You could also snapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe dashboard run apache_access_log_detections.dashboard.activity_dashboard --share
Queries
This dashboard uses the the following queries:
select count(*) as "Bad Requests (4xx)"from apache_access_logwhere status between 400 and 499;