GoAccess - Real-Time Web Log Analyzer - AMI by cloudimg

This is a repackaged open source software product wherein additional charges apply for cloudimg support services.

Overview

GoAccess is a fast, real-time web log analyzer that parses your web server access logs and renders them as an interactive HTML dashboard you open in a browser. This AMI delivers GoAccess fully built and running behind an nginx reverse proxy, so your analytics dashboard is serving within minutes of launch - no compilation, no dependency chasing, no manual configuration.

Why This AMI Instead of a Manual Install

Installing GoAccess from source typically means compiling with GeoIP and WebSocket support, configuring systemd services, setting up a reverse proxy, generating credentials, and separating data from the OS volume. This AMI eliminates that entire process. Unlike a bare install, it ships with a hardened first-boot sequence that generates a unique password per instance (no shared defaults), stores analytics data on a dedicated disk so it survives instance replacement, and fronts everything behind nginx with HTTP Basic Auth. Compared to SaaS analytics tools, you keep full control of your data with no third-party tracking and no data leaving your AWS account.

Live Web Analytics

Out of the box the dashboard analyzes the instance's own nginx access log, so it is populated the moment you open it. Repoint it at your production nginx, Apache, or CDN logs with a single configuration line and GoAccess parses the combined log format and streams results live. See unique visitors over time, top requests and static files, 404s, referring sites and search terms, visitor operating systems and browsers, HTTP status-code distribution, geographic origin, and bandwidth consumed - all in one scrollable panel view that refreshes in real time.

Application Stack

GoAccess runs under systemd as a dedicated service, writing a real-time report to disk and driving a WebSocket that pushes live updates to the browser. nginx fronts it on port 80, serving the dashboard behind HTTP Basic Auth and proxying the WebSocket, with an unauthenticated health endpoint for load-balancer and uptime checks. The generated report, the persisted parse database, and the access password all live on a dedicated data disk so they are independently resizable and separate from the operating system volume.

Security and Encryption

• On first boot a one-shot service generates a dashboard password unique to that instance, applies it as an nginx HTTP Basic Auth credential for the user admin, and records it in a file only root can read.
• No shared or default credentials ship in the image.
• The data disk can be encrypted using AWS EBS encryption; enable it at launch for encryption at rest.
• For encryption in transit, add a TLS certificate to serve the dashboard and its WebSocket over HTTPS. Until TLS is configured, restrict security-group access to trusted IPs.
• The AMI ships with automatic security updates enabled and root SSH login disabled by default.

Deployment Steps

1. Launch the AMI with a security group allowing inbound TCP port 80 (and 443 if adding TLS).
2. SSH into the instance using the ec2-user key pair.
3. Read the generated password from /root/.goaccess_password.
4. Open the instance public IP in your browser, sign in as admin with the generated password.
5. To analyze your own logs, edit /etc/goaccess/goaccess.conf and set the log-file path to your production access log.
6. Restart the goaccess service: sudo systemctl restart goaccess.
7. For HTTPS, install a certificate (e.g., via Let's Encrypt) and update the nginx configuration.

The built-in health endpoint at /health answers without authentication for monitoring and load-balancer integration.

Use Cases

• Watch live traffic on a web property during a launch or campaign.
• Diagnose spikes, error rates, and slow-loading assets from real access logs.
• Analyze CDN and reverse-proxy logs for cache and origin behavior.
• Give operations and marketing a shared, always-current view of site visitors.
• Maintain a lightweight, self-hosted analytics solution with zero third-party tracking.

Get Started

Launch the AMI, retrieve your unique password, and open the dashboard - your first analytics data appears immediately. For a guided walkthrough or help integrating with your log pipeline, contact cloudimg support at any time.