goaccess

Panels refresh every 200ms in the terminal output, enabling instant traffic monitoring and anomaly detection directly via SSH, as highlighted in the features.

Parses nearly all web log formats including Apache, Nginx, AWS CloudFront, and custom strings, minimizing configuration effort for diverse server environments.

Written in C with only ncurses as a dependency, making it lightweight and easy to deploy on *nix systems without complex package management.

Supports on-disk persistence to process logs incrementally, allowing data retention across sessions and efficient handling of large historical files.

Generates terminal, HTML, JSON, and CSV reports from the same log data, catering to needs from quick CLI checks to interactive browser dashboards.