Features

This chapter covers the core features and capabilities of Log Analyzer.

Features

• Access log parsing — Handles Apache/Nginx Combined Log Format out of the box
• Traffic analysis — Requests by hour, top paths, top IPs, status code breakdown
• Error analysis — Error rates, top error paths, error trends over time
• Anomaly detection — Statistical spike detection for traffic, IPs, and error rates
• Pretty terminal output — Hourly traffic histograms, formatted tables
• JSON export — Machine-readable reports for automation

Requirements

• Python 3.10+
• No external dependencies (stdlib only)

Quick Start

Follow this guide to get Log Analyzer up and running in your environment.

Quick Start

# Full analysis (traffic + errors + anomalies)
python src/log_analyzer.py --log examples/sample_access.log --report all

# Traffic analysis only
python src/log_analyzer.py --log examples/sample_access.log --report traffic

# Error analysis with top 20 paths
python src/log_analyzer.py --log examples/sample_access.log --report errors --top 20

# Anomaly detection with custom threshold (3 standard deviations)
python src/log_analyzer.py --log access.log --report anomalies --threshold 3.0

# Export to JSON
python src/log_analyzer.py --log access.log --report all --output report.json

Log Format

Parses Apache/Nginx Combined Log Format:

192.168.1.100 - - [14/Mar/2026:10:00:00 +0000] "GET /index.html HTTP/1.1" 200 2326 "https://example.com/" "Mozilla/5.0"

Fields parsed: IP, timestamp, method, path, status code, response size, referrer, user agent.