[LOG] cheatsheet access.log nginx - fourslickz/notes GitHub Wiki

READ ACCESS.LOG

zcat /var/log/nginx/passport.ayosatu.id.access.log-20260506.gz | \
awk -F\" '{print $2}' | \
awk '{print $2}' | \
awk '{split($1,a,"?"); print a[1]}' | \
sort | uniq -c | sort -nr | head -50

FIND USER-AGENT FROM ENDPOINT REQUEST

zcat /var/log/nginx/passport.ayosatu.id.access.log-20260506.gz | \
grep '/api/feed' | awk -F\" '{print $6}' | \
sort | uniq -c | sort -nr | head -50