Powerpipe MCP Server →

Plugins Docs Home

turbot/tailpipe-mod-apache-access-log-detections

activity_dashboard_bad_request_count activity_dashboard_error_count activity_dashboard_redirect_count activity_dashboard_requests_by_day activity_dashboard_requests_by_errors activity_dashboard_requests_by_http_method activity_dashboard_requests_by_status_code activity_dashboard_requests_by_successful_requests activity_dashboard_requests_by_user_agent activity_dashboard_success_count activity_dashboard_top_10_clients activity_dashboard_top_10_urls activity_dashboard_total_logs cross_site_scripting_angular_template cross_site_scripting_attribute_injection cross_site_scripting_common_patterns cross_site_scripting_dom_based cross_site_scripting_encoding cross_site_scripting_html_injection cross_site_scripting_javascript_methods cross_site_scripting_javascript_uri cross_site_scripting_script_tag encoded_path_traversal header_based_local_file_inclusion hidden_file_access log4shell_vulnerability os_file_access path_traversal restricted_file_access spring4shell_vulnerability sql_injection_blind_based sql_injection_common_patterns sql_injection_error_based sql_injection_time_based sql_injection_union_based sql_injection_user_agent_based

Query: Top 10 URLs (Errors)

Description

List the top 10 requested URLs by error count.

Usage

powerpipe query apache_access_log_detections.query.activity_dashboard_requests_by_errors

Tailpipe Tables

apache_access_log

Apache plugin

SQL

select
  request_uri as "Path",
  count(*) as "Error Count",
  string_agg(
    distinct status :: text,
    ', '
    order by
      status :: text
  ) as "Status Codes"
from
  apache_access_log
where
  status between 400 and 599
  and request_uri is not null
group by
  request_uri
order by
  count(*) desc,
  request_uri
limit
  10;

Dashboards

The query is used in the dashboards:

Access Log Activity Dashboard