goaccess geoip 測試

 

goaccess 是一個很不錯的日志實時統計分析工具,我們可以用來方便的分析nginx apcahe iis 等的日志信息
對於geoip 的支持是需要源碼編譯的，所以基於官方docker 鏡像添加了geoip 的支持

dockerfile

# Builds a goaccess image from the current working directory:
FROM alpine:edge
WORKDIR /goaccess
RUN wget https://tar.goaccess.io/goaccess-1.3.tar.gz
RUN tar -xzvf goaccess-1.3.tar.gz
RUN cd goaccess-1.3/
ARG build_deps="build-base ncurses-dev autoconf automake git gettext-dev"
ARG runtime_deps="tini ncurses libintl gettext openssl-dev"
RUN apk update && \
    apk add -u $runtime_deps $build_deps geoip-dev && \
    wget -O goaccess-1.3.tar.gz https://tar.goaccess.io/goaccess-1.3.tar.gz && \
    tar -xzvf goaccess-1.3.tar.gz && \
    cd goaccess-1.3 && \
    autoreconf -fiv && \
    ./configure --enable-utf8 --enable-geoip=legacy --with-openssl && \
    make && \
    make install && \
    apk del $build_deps && \
    rm -rf /var/cache/apk/* /tmp/goaccess/* /goaccess
VOLUME /srv/data
VOLUME /srv/logs
VOLUME /srv/report
EXPOSE 7890
ENTRYPOINT ["/sbin/tini", "--"]
CMD ["goaccess", "--no-global-config", "--config-file=/srv/data/goaccess.conf"]

docker-compose 文件

version: "3"
services:
  log:
    image: dalongrong/goaccess-geo
    ports:
    - "7890:7890"
    volumes: 
    - "./data:/srv/data"
    - "./logs:/srv/logs"
    - "./html:/srv/report"
    - "./geoip/:/src/geoip/"
  web:
    image: nginx
    ports: 
    - "8080:80"
    volumes: 
    - "./html/:/usr/share/nginx/html/"

goaccess 配置文件

data/goaccess.conf

geoip-database /src/geoip/GeoLiteCity.dat
log-format COMBINED
real-time-html true
log-file /srv/logs/access.log
output /srv/report/index.html

geoip 下載地址

http://geolite.maxmind.com/download/geoip/database/GeoLiteCity.dat.gz

啟動&&測試

• copy log 文件

  就是一個簡單的nginx access log

• 啟動

docker-compose up -d

• 效果

說明

goaccess 還是挺方便的，可以實時的進行一些訪問指標的獲取,同時docker 鏡像我已經推送官方倉庫了 dalongrong/goaccess-geo

參考資料

https://github.com/rongfengliang/goaccess-geoip-docker-compose-demo
https://goaccess.io/