allinurl / goaccess

GoAccess is a real-time web log analyzer and interactive viewer that runs in a terminal in *nix systems or through your browser.
https://goaccess.io
MIT License
18.53k stars 1.11k forks source link

Support for e2guardian logs - Error with "specifier %s NULL" #2753

Open Slamberz opened 3 weeks ago

Slamberz commented 3 weeks ago

Hello, I'm trying to use GoAccess to analyze logs generated by e2guardian on my server. However, I'm encountering an issue where GoAccess returns an error message: specifier %s NULL, making it difficult to proceed with log analysis.

I've attempted some modifications to the log format but haven't had much success. If anyone has experience or suggestions for parsing e2guardian logs with GoAccess, I’d appreciate any advice or insights.

Screenshot 2024-11-01 111334

System Info:

OS: Ubuntu 24.04 LTS GoAccess Version: v1.8.1 e2guardian Version: v5.3.5

Thank you in advance for any assistance or guidance!

allinurl commented 3 weeks ago

Please feel free to share a few lines from your access log. Additionally, please update to the latest version of GoAccess.

Slamberz commented 3 weeks ago

Sample access log e2guardian:

1730602468.690 - 192.168.1.10 192.168.1.10 https://github.com/_alive POST 200 213 - - - 272 - 0 - 0 - PTA6 1

This is my configure :

Squid native log format

Time-format %s date-format %d/%b/%Y log-format %s %^ %h %U %m %s %b %^ %^ %^ %^ %^ %^ %^ %^ %d %s

And, what version of goaccess is compatible with e2guardian v5.3.5 with ubuntu 24.04 LTS

allinurl commented 3 weeks ago

The fields in your format aren't clear, but with more info, I can add them if necessary. However, this should bring you closer to what you need:

# goaccess access.log --log-format='%x.%^ %^ %h %^ %U %m %s %b %^' --datetime-format=%s

2024-11-04-181820_501x291_scrot