If GoAccess could talk, what format would she want server logs in?

[breck7]

I recently switched from nginx to Node.js Express for our primary web server and now we write our own server log (#2455).

Since we have our own function appending to disk, and all we care about is GoAccess, what's the best format string that we should use?

There are 10 choices listed here: https://github.com/allinurl/goaccess#nearly-all-web-log-formats

Should I use one of those? Or would there be an 11th that is ideal?

[breck7]

Seems like the winner is: Combined Log Format (XLF/ELF) Apache | Nginx

[allinurl]

I agree. I find the combined log format to be a good format with enough data for basic analytics.

[allinurl]

From those 10 options, I'd go with the JSON Structured format. However, if you run apache, I'd use a custom format:

LogFormat "%v:%p %h %l %u %t \"%r\" %>s %O \"%{Referer}i\" \"%{User-Agent}i\" %D %{Content-Type}o %{SSL_PROTOCOL}x %{SSL_CIPHER}x" vhost_combined_tls